Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e203133393539.roa
File:                     323830363a3265363a3a2f33322d3334203d3e203133393539.roa (raw, json)
Hash identifier:          jsfCAxoLx/c3n2aBDWA/7m9pMO9owUzaipBHpDDhC+s=
Subject key identifier:   76:3F:51:4E:F1:CF:75:93:90:0A:A8:C9:25:2E:D9:87:C8:4C:2C:AA
Certificate issuer:       /CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Certificate serial:       47D54CA03AFEF35D5DDF057E084F7F2675CDC457
Authority key identifier: A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e203133393539.roa
Signing time:             Tue 04 Feb 2025 18:54:50 +0000
ROA not before:           Tue 04 Feb 2025 18:49:50 +0000
ROA not after:            Tue 03 Feb 2026 18:54:50 +0000
asID:                     13959
IP address blocks:        2806:2e6::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d5:4c:a0:3a:fe:f3:5d:5d:df:05:7e:08:4f:7f:26:75:cd:c4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
        Validity
            Not Before: Feb  4 18:49:50 2025 GMT
            Not After : Feb  3 18:54:50 2026 GMT
        Subject: CN=763F514EF1CF7593900AA8C9252ED987C84C2CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:c2:89:f3:0b:a6:69:96:07:ec:f0:7d:4a:
                    42:4a:f7:32:16:22:20:90:f6:2b:e8:9e:38:03:85:
                    65:59:13:a0:29:b8:f1:ec:9b:5e:21:e2:21:19:7b:
                    e9:f5:f5:af:7d:5a:78:db:22:60:a9:72:d5:e0:6c:
                    79:fd:60:77:ab:cb:25:94:0d:06:1c:83:ae:b8:9b:
                    34:eb:34:b5:4f:00:51:b7:18:80:b7:10:93:2f:0f:
                    26:66:77:0b:36:a1:a2:8d:36:2a:4b:a6:b0:a0:0d:
                    9f:db:5a:0e:4b:03:43:c3:08:e1:a3:2b:ff:1c:a4:
                    a5:2b:90:8f:c2:9b:12:61:64:07:37:8c:2b:d7:16:
                    92:63:ae:89:0d:19:c2:2d:60:40:af:da:94:66:88:
                    c4:78:49:1e:f4:6e:6a:4f:62:52:f4:3f:4e:46:5d:
                    e2:bd:83:9b:76:54:de:8b:c3:d5:4e:89:2f:bd:67:
                    c7:3d:d7:99:d0:c9:56:07:9d:36:8c:f7:a4:37:ea:
                    61:38:6c:a4:ac:77:a8:6b:eb:06:6d:6e:e2:f2:9d:
                    86:0d:a6:e3:f8:f2:c8:d4:c9:dc:b0:26:2a:0e:20:
                    ff:6e:ed:af:2c:dd:58:30:3b:9c:11:73:69:04:db:
                    9c:30:a9:13:90:8c:ee:3c:02:09:e6:0c:8b:9c:aa:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:51:4E:F1:CF:75:93:90:0A:A8:C9:25:2E:D9:87:C8:4C:2C:AA
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e203133393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:1c:43:dd:52:54:a5:36:a4:92:44:62:d6:55:e0:92:da:
         4a:6a:69:9f:11:b3:c2:b1:3f:97:5b:28:a0:10:b1:58:76:ac:
         74:3c:6c:96:fb:aa:08:1d:af:04:fb:be:e8:62:f7:4c:4b:70:
         22:c0:21:d5:98:cc:e3:18:7e:e6:0b:59:29:7e:c1:7b:ed:29:
         c5:ea:35:8f:d7:df:f4:35:a1:54:1e:02:73:d3:8b:ed:91:18:
         1b:35:3b:6b:11:ec:af:d5:18:92:b4:1b:3a:51:25:12:10:70:
         7a:b1:6f:3a:6f:a9:fa:51:c3:c3:f0:83:95:cc:74:9c:fd:d2:
         69:f8:d4:89:62:5d:3a:9c:7e:cd:9b:34:bf:7e:49:c3:c9:f5:
         4d:2f:fb:fd:1a:8d:59:d7:d9:0e:c5:66:a0:af:32:ba:30:5a:
         7d:a7:40:67:b8:d1:f3:34:cd:a6:ac:a5:b8:87:ac:79:59:a9:
         47:cb:c1:7a:db:a0:8a:96:4d:5d:9f:42:55:08:18:1c:2d:cd:
         bc:4c:dd:cc:22:da:f3:17:12:c7:2b:4e:ad:86:a8:d0:df:97:
         23:72:b4:d3:4b:8e:1e:5e:c7:e5:8e:bd:d5:bb:7c:15:4a:35:
         8a:2d:38:5e:7e:bc:b6:1e:a1:b3:86:2d:47:fc:35:f9:7e:05:
         64:32:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:02 2025 by rpki-client