Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/323830363a3265633a3a2f33322d3438203d3e20323635353631.roa
File:                     323830363a3265633a3a2f33322d3438203d3e20323635353631.roa (raw, json)
Hash identifier:          jev/dZY7iTxp9l6iXJ9wBPyiNouCR/FyDd8mrzjUpLA=
Subject key identifier:   24:3A:42:D9:71:22:CC:88:DC:F3:2F:0E:0F:63:0E:7E:04:EA:B2:9E
Certificate issuer:       /CN=F3DA76435F27BF1767EBDE8272C18338BE1596E1
Certificate serial:       316C1039C4AA351C6E802ECECB5E6A5F2014AEEA
Authority key identifier: F3:DA:76:43:5F:27:BF:17:67:EB:DE:82:72:C1:83:38:BE:15:96:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/323830363a3265633a3a2f33322d3438203d3e20323635353631.roa
Signing time:             Tue 04 Feb 2025 18:12:45 +0000
ROA not before:           Tue 04 Feb 2025 18:07:45 +0000
ROA not after:            Tue 03 Feb 2026 18:12:45 +0000
asID:                     265561
IP address blocks:        2806:2ec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6c:10:39:c4:aa:35:1c:6e:80:2e:ce:cb:5e:6a:5f:20:14:ae:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DA76435F27BF1767EBDE8272C18338BE1596E1
        Validity
            Not Before: Feb  4 18:07:45 2025 GMT
            Not After : Feb  3 18:12:45 2026 GMT
        Subject: CN=243A42D97122CC88DCF32F0E0F630E7E04EAB29E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:e8:cf:f7:ca:58:29:69:c6:eb:76:b7:dc:
                    14:c0:0b:7f:38:18:7d:43:1e:4a:07:7a:a3:ef:9c:
                    02:64:9b:22:60:20:b5:6e:0b:5d:0b:71:04:08:bc:
                    3a:a3:66:5f:e5:eb:64:18:07:b6:a2:0c:a6:21:22:
                    c8:b0:11:c7:d8:4a:e0:8e:af:84:c5:20:5d:06:f1:
                    29:1d:d9:a3:33:72:a0:a4:7c:e5:51:0e:40:df:06:
                    0a:6d:d9:10:ee:f1:cf:3e:09:8e:d8:e4:c9:1d:ed:
                    13:76:81:32:74:60:27:4e:e0:c0:9a:95:45:ff:21:
                    7d:b3:e8:4b:a1:da:98:80:41:9a:24:bb:2e:df:3d:
                    28:ef:6c:8b:61:01:bb:43:2d:29:d0:b9:ea:6d:ef:
                    ea:46:d7:72:0d:28:bd:04:01:97:ea:eb:3a:ac:57:
                    01:80:ce:1f:1d:32:12:37:fb:65:dd:f3:71:1d:41:
                    c1:39:ae:5f:f9:39:cd:37:57:ee:fd:62:1c:a7:41:
                    7d:34:af:c8:e3:20:02:fb:49:e2:ad:ca:73:cc:8b:
                    b5:74:a6:68:1e:60:68:4e:70:58:59:f4:08:5f:ef:
                    d4:65:48:4e:81:5c:78:b9:f9:3c:6c:21:ee:d5:73:
                    23:f9:5a:4c:1a:ff:d1:7a:70:50:41:e0:3b:ea:23:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:42:D9:71:22:CC:88:DC:F3:2F:0E:0F:63:0E:7E:04:EA:B2:9E
            X509v3 Authority Key Identifier:
                keyid:F3:DA:76:43:5F:27:BF:17:67:EB:DE:82:72:C1:83:38:BE:15:96:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/323830363a3265633a3a2f33322d3438203d3e20323635353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:5c:34:da:1f:e8:d8:72:ab:d1:63:ae:b0:11:de:42:99:
         d5:56:0b:57:a0:b8:e7:85:8b:93:1a:da:7f:b1:a7:a8:28:84:
         4f:e2:51:25:7d:72:94:4d:26:08:f3:da:a6:93:30:4f:71:44:
         5c:41:8c:8e:fc:c7:75:86:19:6b:a7:08:be:46:38:29:da:52:
         f7:74:b6:de:ab:a6:a2:eb:7c:13:33:b4:d9:1e:91:7c:4b:3d:
         47:16:14:20:a1:ad:ff:5b:c6:64:24:24:eb:ab:ae:68:6e:39:
         12:81:fb:d0:78:48:dd:99:1e:8c:9a:9a:96:95:43:62:cf:cf:
         26:56:b4:22:73:23:ae:e2:e5:67:9e:9d:01:c8:31:6f:f6:a4:
         03:61:76:ca:fb:e2:d3:fe:56:4b:be:3c:9e:61:4b:a2:e3:6e:
         69:b2:0d:df:9f:90:d7:3c:5d:6d:a1:c9:79:48:5b:d4:90:2a:
         23:bf:6e:76:4c:46:4b:e5:1c:eb:3c:41:fe:8b:f7:49:59:a5:
         5c:2d:d1:99:f6:c8:47:1c:8e:bb:73:18:af:77:58:2f:59:a7:
         88:bb:5b:b3:00:9f:1e:ad:b3:b0:c5:fc:ff:48:58:3f:de:b1:
         b1:a8:91:f3:18:92:a6:9b:28:f5:0b:cc:3f:2f:b8:0f:ff:c1:
         5b:65:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:02:50 2025 by rpki-client