Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa
File:                     323830363a3361643a3a2f33322d3438203d3e20323635353836.roa (raw, json)
Hash identifier:          EUZC66Cd7qPzN4m5ETswsn3wPLBrLQueaO3WsOLgcgI=
Subject key identifier:   7D:BE:18:6B:51:DB:52:C6:ED:DB:54:A5:EB:C9:63:88:0C:DA:1E:1F
Certificate issuer:       /CN=0064A500360F990C57B314989FD548943A9832EF
Certificate serial:       029A94F6C6998254BBED6B89F6BC5F53BF84AC66
Authority key identifier: 00:64:A5:00:36:0F:99:0C:57:B3:14:98:9F:D5:48:94:3A:98:32:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0064A500360F990C57B314989FD548943A9832EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa
Signing time:             Tue 04 Feb 2025 20:07:31 +0000
ROA not before:           Tue 04 Feb 2025 20:02:31 +0000
ROA not after:            Tue 03 Feb 2026 20:07:31 +0000
asID:                     265586
IP address blocks:        2806:3ad::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/0064A500360F990C57B314989FD548943A9832EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/0064A500360F990C57B314989FD548943A9832EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0064A500360F990C57B314989FD548943A9832EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9a:94:f6:c6:99:82:54:bb:ed:6b:89:f6:bc:5f:53:bf:84:ac:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0064A500360F990C57B314989FD548943A9832EF
        Validity
            Not Before: Feb  4 20:02:31 2025 GMT
            Not After : Feb  3 20:07:31 2026 GMT
        Subject: CN=7DBE186B51DB52C6EDDB54A5EBC963880CDA1E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:d4:11:53:9b:36:06:9c:49:80:04:ba:63:
                    cb:50:60:fb:0e:db:75:40:2b:20:0c:13:ef:14:12:
                    de:94:0e:ac:6d:46:c6:a3:d9:2f:25:64:05:ba:d3:
                    91:08:63:fc:33:a1:ce:1d:57:cb:b3:2b:0d:b6:e4:
                    1f:84:19:6c:43:d1:9c:9d:a1:df:15:ee:21:63:d2:
                    c4:78:d8:93:09:6b:ab:50:8e:1e:95:7f:94:30:3e:
                    16:2e:45:0b:6a:16:2a:ed:2d:91:99:e1:3d:91:77:
                    3d:93:2d:a8:07:63:d8:63:e0:b9:b0:33:69:0c:ae:
                    35:24:f8:75:23:12:76:3f:2b:a9:6b:b3:e5:ae:24:
                    80:2f:40:b6:66:61:01:e3:a7:7c:e6:66:8f:1a:af:
                    db:d8:f9:3a:1e:ab:2a:f6:97:4c:7d:14:41:87:e3:
                    88:13:20:e2:a8:9b:66:ae:89:52:ae:5b:75:1c:3d:
                    fc:57:27:19:85:84:6d:74:0f:f1:2c:4a:44:39:d2:
                    0a:21:22:ba:e4:38:a9:33:07:b2:b4:51:80:c8:7c:
                    f4:a2:df:62:86:45:e5:d6:46:a0:0b:e7:b4:51:b5:
                    2b:a1:6f:ce:a8:88:d7:8e:cd:be:91:7e:f7:5a:06:
                    27:ae:95:5f:fc:f3:1e:f3:65:db:7b:f9:fb:24:88:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BE:18:6B:51:DB:52:C6:ED:DB:54:A5:EB:C9:63:88:0C:DA:1E:1F
            X509v3 Authority Key Identifier:
                keyid:00:64:A5:00:36:0F:99:0C:57:B3:14:98:9F:D5:48:94:3A:98:32:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/0064A500360F990C57B314989FD548943A9832EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0064A500360F990C57B314989FD548943A9832EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ad::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:20:e1:46:3d:e4:33:61:7f:7a:01:95:09:74:62:a5:ab:a4:
         71:f7:5f:c9:b5:12:b5:f0:83:37:ce:e8:20:9c:40:b7:1c:3d:
         70:49:c1:08:13:86:79:3e:94:c3:9a:32:c9:fb:39:b7:5f:eb:
         ce:49:c4:2e:24:a4:42:a3:16:57:71:e9:d1:c2:a7:10:2f:a4:
         52:d4:43:90:1e:75:1e:f9:41:10:25:03:50:66:a4:b2:d7:8f:
         7d:97:03:75:1c:b2:fb:de:06:7c:0f:78:25:a9:ea:d2:3a:75:
         dc:19:97:c8:bb:e6:39:27:78:00:8e:bb:5b:6e:e6:1c:c2:ea:
         9f:fe:fe:5b:a3:18:a0:ab:eb:5d:27:62:42:eb:e7:4b:a8:08:
         45:04:5c:ce:5b:ad:ea:f6:d8:ee:7a:c1:81:10:7d:23:37:e3:
         31:92:fe:5d:de:57:cc:1f:a2:dd:36:4e:a1:62:3e:73:7c:11:
         e7:1c:ff:c3:53:43:a4:46:5d:8d:a8:8c:85:31:ba:cd:e2:13:
         2c:f8:db:ca:81:84:3d:1a:70:b6:0c:79:a4:13:b0:ea:21:9c:
         51:31:94:1d:36:d0:b0:b1:31:d7:ed:a4:31:f6:bb:d8:a5:ab:
         19:da:08:49:21:58:2c:97:75:0d:28:c4:83:ea:69:ef:44:a6:
         e1:c6:1e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:45:56 2025 by rpki-client