Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/323830363a3333623a3a2f33322d3438203d3e20323635353836.roa
File:                     323830363a3333623a3a2f33322d3438203d3e20323635353836.roa (raw, json)
Hash identifier:          5Qyg7Ojga8eEYZ/t7i5pG8IiIb8QSDbSsB3oyHwjBfw=
Subject key identifier:   09:E3:B6:41:5E:0B:11:F6:B9:C1:D4:9B:59:45:2B:47:6D:BB:0E:6F
Certificate issuer:       /CN=97DFE5114076326D22F751B0AA10943A7346D8AC
Certificate serial:       0E6416BD5D64F3A66C6A1227652DF1474F39C8F8
Authority key identifier: 97:DF:E5:11:40:76:32:6D:22:F7:51:B0:AA:10:94:3A:73:46:D8:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97DFE5114076326D22F751B0AA10943A7346D8AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/323830363a3333623a3a2f33322d3438203d3e20323635353836.roa
Signing time:             Tue 04 Feb 2025 18:31:54 +0000
ROA not before:           Tue 04 Feb 2025 18:26:54 +0000
ROA not after:            Tue 03 Feb 2026 18:31:54 +0000
asID:                     265586
IP address blocks:        2806:33b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/97DFE5114076326D22F751B0AA10943A7346D8AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/97DFE5114076326D22F751B0AA10943A7346D8AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97DFE5114076326D22F751B0AA10943A7346D8AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:64:16:bd:5d:64:f3:a6:6c:6a:12:27:65:2d:f1:47:4f:39:c8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFE5114076326D22F751B0AA10943A7346D8AC
        Validity
            Not Before: Feb  4 18:26:54 2025 GMT
            Not After : Feb  3 18:31:54 2026 GMT
        Subject: CN=09E3B6415E0B11F6B9C1D49B59452B476DBB0E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:f0:a2:4d:73:9b:a7:f6:85:75:b9:34:4c:
                    93:c8:06:31:4a:75:2d:6b:87:6d:7a:b6:fb:5e:7f:
                    10:40:bc:02:b8:79:c8:84:c5:5e:41:a8:6a:cd:a5:
                    81:f0:94:c1:ed:ff:49:4f:33:cf:ef:3e:52:fc:ed:
                    cf:f5:83:b2:62:16:58:e6:25:2a:96:7b:35:46:c3:
                    39:80:22:72:9e:8d:41:fa:83:e4:c6:96:13:a0:1d:
                    a0:5a:17:e3:0e:15:a5:95:a2:8c:99:0f:24:8f:92:
                    d4:7b:b0:2f:43:30:07:11:d6:b3:d7:db:7a:fe:14:
                    1f:1f:86:cc:6d:11:8c:e2:3d:a5:24:21:73:00:a1:
                    c3:cc:df:12:7e:dd:4a:00:85:03:07:b6:b3:ba:13:
                    fe:1e:ad:1c:cc:1a:17:12:76:41:15:b0:b0:50:75:
                    59:74:5f:9f:03:9d:89:0f:eb:f0:a0:03:9a:24:4d:
                    a5:e8:94:d1:b0:4c:b2:74:fd:9d:3b:46:10:eb:2a:
                    48:44:f4:77:e5:30:ff:aa:55:4c:26:df:07:c8:72:
                    27:53:52:6c:c7:9e:62:45:33:5c:0e:ab:53:fc:27:
                    0a:c3:34:5b:a0:86:44:5f:56:31:3e:5c:86:84:67:
                    24:8f:8c:0f:cf:88:09:e8:31:a1:1f:1a:72:9c:5f:
                    64:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:B6:41:5E:0B:11:F6:B9:C1:D4:9B:59:45:2B:47:6D:BB:0E:6F
            X509v3 Authority Key Identifier:
                keyid:97:DF:E5:11:40:76:32:6D:22:F7:51:B0:AA:10:94:3A:73:46:D8:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/97DFE5114076326D22F751B0AA10943A7346D8AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97DFE5114076326D22F751B0AA10943A7346D8AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/323830363a3333623a3a2f33322d3438203d3e20323635353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:33b::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:f4:77:64:9e:c5:d4:55:cb:cb:39:76:e4:32:9f:ae:bf:5b:
         7b:c4:8b:55:2c:75:5d:c1:be:2c:f9:a0:bf:1d:9d:92:6e:4d:
         fa:1b:42:19:cc:d2:33:d7:2b:74:dd:f6:38:a2:47:c6:ff:93:
         1f:95:2d:4b:d0:1e:50:25:c0:2c:f4:b7:f9:60:e5:e9:1e:d8:
         98:72:8c:c1:d3:f6:4a:be:a1:e5:8d:83:1f:ed:e7:3c:d3:6d:
         68:20:09:0c:3a:82:14:80:51:47:14:e5:a3:41:d0:dd:5f:9b:
         83:5e:b0:41:61:ee:3b:0c:dd:7d:b0:a2:59:51:e1:14:7c:eb:
         29:a4:12:49:6b:44:c3:cb:26:ff:31:c5:8d:b7:ee:3f:f7:89:
         7b:e5:5d:52:12:df:14:2f:e5:23:33:6c:49:19:cc:7f:a8:cf:
         e2:47:b0:e3:e5:2f:6d:62:c4:ea:68:80:10:3a:de:6c:e8:79:
         0f:c3:15:f4:6e:4f:79:53:72:ce:56:db:d7:30:a6:49:6c:a7:
         42:44:de:03:16:7e:98:6d:16:0c:b0:87:d9:43:11:b3:a0:d6:
         0e:22:42:c4:59:26:7d:44:39:9e:a3:54:f3:e6:77:2c:45:ed:
         76:de:7d:24:25:07:ed:49:cb:a6:b3:7b:c4:04:68:44:3d:a3:
         8c:62:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:22 2025 by rpki-client