Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/903B64C11DA9D834517B10977CD26B876A680C27D4DE7571E1F54B8D7845527C/0/323830363a3363363a3a2f33322d3438203d3e20323730313438.roa
File:                     323830363a3363363a3a2f33322d3438203d3e20323730313438.roa (raw, json)
Hash identifier:          +fYjbIsGjhSXG9rKChPG825fepdnaDme5Hrufh4jDXw=
Subject key identifier:   C8:30:5C:8A:9F:FB:94:08:58:AA:8A:CB:0D:C6:B7:1B:63:DD:43:33
Certificate issuer:       /CN=F7FB6EE94C88A72935CBA256ADF8C31697AEF6BB
Certificate serial:       0E819D29EA12D6D96774FE7665416CC2AF4DC110
Authority key identifier: F7:FB:6E:E9:4C:88:A7:29:35:CB:A2:56:AD:F8:C3:16:97:AE:F6:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7FB6EE94C88A72935CBA256ADF8C31697AEF6BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/903B64C11DA9D834517B10977CD26B876A680C27D4DE7571E1F54B8D7845527C/0/323830363a3363363a3a2f33322d3438203d3e20323730313438.roa
Signing time:             Tue 04 Feb 2025 18:41:05 +0000
ROA not before:           Tue 04 Feb 2025 18:36:05 +0000
ROA not after:            Tue 03 Feb 2026 18:41:05 +0000
asID:                     270148
IP address blocks:        2806:3c6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/903B64C11DA9D834517B10977CD26B876A680C27D4DE7571E1F54B8D7845527C/0/F7FB6EE94C88A72935CBA256ADF8C31697AEF6BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/903B64C11DA9D834517B10977CD26B876A680C27D4DE7571E1F54B8D7845527C/0/F7FB6EE94C88A72935CBA256ADF8C31697AEF6BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7FB6EE94C88A72935CBA256ADF8C31697AEF6BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:81:9d:29:ea:12:d6:d9:67:74:fe:76:65:41:6c:c2:af:4d:c1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7FB6EE94C88A72935CBA256ADF8C31697AEF6BB
        Validity
            Not Before: Feb  4 18:36:05 2025 GMT
            Not After : Feb  3 18:41:05 2026 GMT
        Subject: CN=C8305C8A9FFB940858AA8ACB0DC6B71B63DD4333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:4c:36:32:89:91:77:89:16:a1:1f:34:8c:
                    11:3c:8e:ad:57:e3:ba:ac:10:e0:51:7d:66:9c:e2:
                    9c:0f:44:03:5c:50:dc:e0:5c:15:0c:fe:88:9b:75:
                    f3:7e:17:8a:1c:9f:c1:66:f0:1c:a8:52:c8:3f:a7:
                    75:53:16:81:69:fa:0c:8c:b8:fb:db:9f:d5:84:10:
                    e3:62:34:92:f3:4e:51:1d:74:da:c7:9e:56:30:b5:
                    a9:a4:e6:32:e0:7e:a3:43:e7:3f:e5:88:73:e6:73:
                    0a:b1:78:a8:21:39:8f:54:63:ce:84:6d:50:7d:42:
                    12:93:9e:b1:62:70:1c:61:22:66:9d:9d:2b:be:cd:
                    cf:74:ea:d1:0f:eb:47:b8:97:c6:df:b2:d7:83:e2:
                    1c:b3:1d:88:55:2c:8c:bf:07:39:df:e0:5b:32:1f:
                    29:ce:f5:ba:bc:7a:2f:62:11:54:11:60:1d:8b:6f:
                    52:15:68:8e:d0:f2:c7:f6:41:a7:9f:62:6b:4e:87:
                    06:0d:e4:6a:2a:bf:2e:3e:d3:3b:36:f7:3b:cd:08:
                    d3:31:30:a5:75:d4:b6:8b:e8:8d:a4:9a:1b:a9:a8:
                    6e:0a:35:f9:4b:97:19:84:3b:0d:e8:c2:89:66:3b:
                    32:00:db:1a:6e:2e:b6:9d:a7:d9:fc:c3:94:63:76:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:30:5C:8A:9F:FB:94:08:58:AA:8A:CB:0D:C6:B7:1B:63:DD:43:33
            X509v3 Authority Key Identifier:
                keyid:F7:FB:6E:E9:4C:88:A7:29:35:CB:A2:56:AD:F8:C3:16:97:AE:F6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/903B64C11DA9D834517B10977CD26B876A680C27D4DE7571E1F54B8D7845527C/0/F7FB6EE94C88A72935CBA256ADF8C31697AEF6BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7FB6EE94C88A72935CBA256ADF8C31697AEF6BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/903B64C11DA9D834517B10977CD26B876A680C27D4DE7571E1F54B8D7845527C/0/323830363a3363363a3a2f33322d3438203d3e20323730313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:14:f4:ab:68:38:b7:a7:a5:d1:b3:a1:b1:a7:81:e0:79:1a:
         88:a2:3b:d3:26:f2:5b:28:ba:29:82:25:88:e9:d6:9c:cc:d3:
         6c:a3:2e:90:92:e9:a2:08:f7:b9:b3:32:b2:fd:3c:66:f1:14:
         e7:e2:70:94:9b:8a:c4:50:cc:35:29:fc:d1:66:9a:85:7e:92:
         73:8c:b7:09:37:a3:a7:97:d8:16:73:cd:6f:c3:bc:a1:c6:b5:
         ac:92:f5:88:7f:d2:d6:f5:06:90:e5:af:4f:ce:8b:7c:de:3c:
         bd:47:4b:68:1e:5b:df:d1:a7:23:71:12:7e:49:d8:9f:f6:4b:
         71:d2:50:e1:ea:56:a8:85:b1:a9:57:00:8c:42:85:51:4d:6c:
         2a:6b:76:0b:0a:7e:67:58:f6:3d:a0:a0:9d:04:4c:da:0d:21:
         c2:63:cb:b5:a4:5b:e6:d1:aa:36:e9:e9:07:0e:4f:fa:5f:76:
         fc:9f:c8:50:0f:aa:17:be:b2:c3:08:42:a3:b8:b0:9b:8a:f1:
         4d:81:66:ac:67:a3:4f:0c:44:8f:dc:42:40:1b:35:a1:3b:a8:
         44:5e:d8:c9:54:db:bb:04:88:10:b9:e4:1a:2e:7d:56:7d:39:
         85:d1:be:e6:0f:0a:6e:de:49:79:de:4b:37:c1:bc:93:b5:e9:
         7a:73:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:24 2025 by rpki-client