Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DD4A078E4DABC1BC589A2832B93987270A6DA3DEA04035B61A5695E9C204A91/0/323830363a3433663a3a2f33322d3332203d3e20323733323634.roa
File:                     323830363a3433663a3a2f33322d3332203d3e20323733323634.roa (raw, json)
Hash identifier:          589Sh6txF4+3iys5OxiVCFSfpEdLQ2l5XGrIufpt28Y=
Subject key identifier:   A7:1E:DD:26:27:CD:BE:4D:C8:CF:FF:D6:96:A4:AD:68:44:86:D4:2D
Certificate issuer:       /CN=A40379F60573B39EB86D693DDAC20C316BF5D7C1
Certificate serial:       0A772D4DE3ED07918BF9A1FAE8C86D1BC4C24017
Authority key identifier: A4:03:79:F6:05:73:B3:9E:B8:6D:69:3D:DA:C2:0C:31:6B:F5:D7:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A40379F60573B39EB86D693DDAC20C316BF5D7C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DD4A078E4DABC1BC589A2832B93987270A6DA3DEA04035B61A5695E9C204A91/0/323830363a3433663a3a2f33322d3332203d3e20323733323634.roa
Signing time:             Tue 11 Mar 2025 07:30:00 +0000
ROA not before:           Tue 11 Mar 2025 07:25:00 +0000
ROA not after:            Tue 10 Mar 2026 07:30:00 +0000
asID:                     273264
IP address blocks:        2806:43f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DD4A078E4DABC1BC589A2832B93987270A6DA3DEA04035B61A5695E9C204A91/0/A40379F60573B39EB86D693DDAC20C316BF5D7C1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DD4A078E4DABC1BC589A2832B93987270A6DA3DEA04035B61A5695E9C204A91/0/A40379F60573B39EB86D693DDAC20C316BF5D7C1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A40379F60573B39EB86D693DDAC20C316BF5D7C1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:2d:4d:e3:ed:07:91:8b:f9:a1:fa:e8:c8:6d:1b:c4:c2:40:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A40379F60573B39EB86D693DDAC20C316BF5D7C1
        Validity
            Not Before: Mar 11 07:25:00 2025 GMT
            Not After : Mar 10 07:30:00 2026 GMT
        Subject: CN=A71EDD2627CDBE4DC8CFFFD696A4AD684486D42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:d6:4b:21:af:2e:df:52:a1:e7:11:39:62:
                    41:bb:ae:ad:e7:8e:c7:05:6e:f0:69:cd:89:cb:0a:
                    ec:0e:43:a6:d0:09:6a:3e:b6:76:2c:ee:03:dc:b8:
                    f0:65:8d:9d:56:5e:08:bb:ec:a1:c1:41:bf:1c:d6:
                    5f:b0:c0:ef:01:aa:7f:f9:af:24:ab:c9:e0:28:d6:
                    d7:92:fe:83:e5:9d:b2:b0:e9:35:20:35:5b:6e:94:
                    8a:c5:8d:17:67:2c:22:85:54:24:da:3f:97:c5:cb:
                    23:be:7c:67:d8:74:ff:97:5b:39:6b:fc:79:a5:b4:
                    a8:5a:67:40:b9:5a:64:73:e7:38:6b:14:29:0f:c6:
                    ad:7b:eb:98:75:e7:97:a7:53:9f:c3:8b:c4:df:8b:
                    1d:2a:2e:e1:fd:44:98:48:2a:6c:79:ff:1e:83:4c:
                    34:e4:f2:a5:84:14:10:7e:17:ac:7a:e1:0e:a3:1f:
                    1a:cf:34:5f:c0:eb:9a:7d:c8:a4:aa:1a:b6:75:6b:
                    0b:59:99:04:6c:9a:4f:85:43:7e:25:85:e7:42:46:
                    80:5c:97:a5:ce:5a:a9:13:1b:7a:0d:9c:31:07:8e:
                    23:a1:6b:55:7d:ed:2b:ea:ce:de:4e:5c:25:66:0c:
                    41:17:58:e7:50:cd:0e:05:0e:02:b1:f4:1b:ed:08:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:DD:26:27:CD:BE:4D:C8:CF:FF:D6:96:A4:AD:68:44:86:D4:2D
            X509v3 Authority Key Identifier:
                keyid:A4:03:79:F6:05:73:B3:9E:B8:6D:69:3D:DA:C2:0C:31:6B:F5:D7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DD4A078E4DABC1BC589A2832B93987270A6DA3DEA04035B61A5695E9C204A91/0/A40379F60573B39EB86D693DDAC20C316BF5D7C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A40379F60573B39EB86D693DDAC20C316BF5D7C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DD4A078E4DABC1BC589A2832B93987270A6DA3DEA04035B61A5695E9C204A91/0/323830363a3433663a3a2f33322d3332203d3e20323733323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:43f::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:97:48:92:17:f3:92:f2:f0:16:61:09:db:6e:0e:31:38:
         14:98:67:91:ea:35:5e:37:e5:f3:19:70:59:8f:1a:c7:8e:b2:
         e8:24:ee:ef:80:39:70:81:6c:15:b9:ae:8c:41:58:0f:50:e6:
         97:a8:ed:e7:cf:99:4c:b7:ce:96:06:3b:f5:15:5c:cb:e6:39:
         f7:99:c9:4b:e1:4b:3e:52:0d:ba:76:e1:99:85:93:e3:b7:9c:
         5b:ce:42:be:a0:20:a4:77:c3:a2:8b:68:06:69:6e:ee:2c:70:
         96:e3:55:22:72:fc:da:57:aa:25:4a:a8:15:67:43:1c:a4:32:
         73:89:5c:84:51:66:cb:35:67:44:e5:9b:67:25:ec:26:54:84:
         c3:06:be:e6:50:1f:61:ee:42:d3:31:a9:4e:73:5b:c5:a5:0e:
         e8:08:05:f2:b6:e2:38:8d:ff:d0:a9:75:dd:ea:14:5f:74:c9:
         61:33:2e:56:20:a3:5c:22:71:82:40:41:d0:81:ff:37:80:7e:
         8c:16:ef:40:cd:24:84:28:5d:5f:75:11:69:8e:6a:c7:05:62:
         a1:29:93:10:9d:01:db:f0:9c:44:76:c9:8f:eb:7f:bd:ab:96:
         9a:d8:96:aa:9f:15:d4:76:a2:89:71:7f:b5:c5:6e:61:7a:66:
         6b:93:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:48:40 2025 by rpki-client