Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa
File:                     323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa (raw, json)
Hash identifier:          5VwiRnk27PGYRj4hTeR5KiWvKQyi8kcTy+D5BOE0FyY=
Subject key identifier:   D2:DF:99:0D:F5:C9:2B:7E:03:EA:4D:04:64:21:8D:99:5D:88:BC:24
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       25E97A57CDCD5C08870C7CD242A0A187B06BA429
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa
Signing time:             Wed 05 Mar 2025 23:35:00 +0000
ROA not before:           Wed 05 Mar 2025 23:30:00 +0000
ROA not after:            Wed 04 Mar 2026 23:35:00 +0000
asID:                     28451
IP address blocks:        2806:3f9:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e9:7a:57:cd:cd:5c:08:87:0c:7c:d2:42:a0:a1:87:b0:6b:a4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Mar  5 23:30:00 2025 GMT
            Not After : Mar  4 23:35:00 2026 GMT
        Subject: CN=D2DF990DF5C92B7E03EA4D0464218D995D88BC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6c:1f:27:88:2d:51:b5:aa:11:58:a1:a5:7c:
                    0a:bf:09:a0:cf:f5:a9:ac:f9:7e:97:e6:db:d5:a8:
                    9e:63:95:50:42:ef:16:56:d4:47:79:30:cb:17:3d:
                    0e:42:c7:bf:3a:b3:a8:52:33:66:da:c7:c0:01:5c:
                    bd:8e:16:d8:09:12:2f:25:0a:f8:73:b2:66:37:0f:
                    16:af:27:c6:7c:03:31:6a:6d:85:3b:17:2c:92:4d:
                    af:45:e4:ce:e8:69:1b:10:8d:d2:ef:51:a7:e0:b2:
                    a1:cd:2e:1b:3b:e3:e0:b9:dd:48:ab:89:3e:7d:49:
                    b5:70:ff:48:7c:a4:be:4d:bb:bc:2f:e1:1a:73:9c:
                    c5:96:56:5c:b8:c3:1d:c0:d5:8e:d0:ce:96:a3:50:
                    96:1b:93:a5:4b:de:8b:91:fa:78:82:9e:8f:04:41:
                    c9:ce:9f:8d:6a:74:c5:48:0b:8a:4d:25:a7:d4:6e:
                    52:6a:7f:01:0e:3f:29:92:c4:ca:e5:c7:a6:0c:f6:
                    7c:22:93:06:c8:24:1c:3b:7b:ca:59:2f:07:ae:da:
                    a9:db:13:16:0e:f5:af:69:50:de:6b:9f:75:cb:15:
                    59:0f:6f:ff:c0:af:79:f8:ee:1c:ee:97:61:b3:a3:
                    49:be:df:b2:67:78:e6:6c:eb:81:04:52:1f:f2:29:
                    d5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DF:99:0D:F5:C9:2B:7E:03:EA:4D:04:64:21:8D:99:5D:88:BC:24
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:a0:c3:70:88:c5:f2:22:2c:5b:fa:5c:4b:1e:7f:c1:84:a1:
         f7:a8:86:28:3f:f9:db:54:78:ab:4d:6d:c8:1d:76:7b:51:69:
         e1:df:8b:0c:01:f3:f5:c3:1b:b6:4a:a3:fc:9d:0e:76:44:1f:
         d6:0d:f0:50:65:af:f9:21:a7:01:2c:86:a7:58:9f:1b:73:6f:
         34:b1:d8:f9:df:63:fa:05:b4:08:b9:e2:31:fc:8e:75:09:fa:
         db:1c:ea:3f:e2:a0:2f:65:f3:41:e5:d4:69:06:75:bb:c8:b9:
         6c:74:a2:20:e8:f1:97:4d:53:ad:2d:56:1e:09:49:e9:68:72:
         9b:4c:88:99:9a:0a:69:47:b7:37:57:80:09:92:2e:b7:ea:e1:
         0a:cf:a1:af:be:84:87:a1:57:a8:3d:96:a6:da:be:21:cb:07:
         72:75:13:b6:11:cf:52:3c:97:a8:e4:ed:13:2e:a3:b8:d7:96:
         9c:b6:6a:4f:bd:af:c0:6f:9a:94:49:86:43:89:ff:93:1e:7e:
         80:b1:dc:19:d3:04:a5:7c:b5:e9:80:c4:4a:46:48:d3:4c:16:
         19:da:95:db:ad:df:81:fa:f2:e2:40:e8:9b:89:9a:35:0a:7e:
         68:88:12:ba:09:cb:c8:9f:07:9e:eb:a1:60:70:c7:dc:c2:2d:
         62:13:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:58 2025 by rpki-client