Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e20323635353334.roa
File:                     323830363a3265363a3a2f33322d3334203d3e20323635353334.roa (raw, json)
Hash identifier:          9tF1X4u90o0zb8m1e8NxUGaHWol4zppNumLcE6Cmbzg=
Subject key identifier:   3C:86:3D:1A:9E:4B:EA:A4:78:D9:FF:75:53:A0:16:7C:35:DF:9C:E0
Certificate issuer:       /CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Certificate serial:       13093723F16B6753E9E181E3548C73141D329D63
Authority key identifier: A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e20323635353334.roa
Signing time:             Tue 04 Feb 2025 18:54:50 +0000
ROA not before:           Tue 04 Feb 2025 18:49:50 +0000
ROA not after:            Tue 03 Feb 2026 18:54:50 +0000
asID:                     265534
IP address blocks:        2806:2e6::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:09:37:23:f1:6b:67:53:e9:e1:81:e3:54:8c:73:14:1d:32:9d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
        Validity
            Not Before: Feb  4 18:49:50 2025 GMT
            Not After : Feb  3 18:54:50 2026 GMT
        Subject: CN=3C863D1A9E4BEAA478D9FF7553A0167C35DF9CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:92:75:b1:c2:95:63:48:7f:c3:a4:53:51:
                    5c:ab:4b:90:e4:da:8c:18:ca:42:ee:66:21:df:7c:
                    75:ac:0a:14:fe:4b:45:28:fa:43:5f:e0:1e:5a:5a:
                    33:ca:9a:15:df:a3:1b:33:53:81:c7:a3:1d:07:17:
                    6a:a5:fc:2c:36:6b:c6:b6:fd:18:ea:b5:1f:d7:ef:
                    49:f5:55:46:30:31:eb:84:cc:86:79:71:2f:55:da:
                    c5:cf:39:8e:c9:81:cb:b7:95:08:23:42:0f:5d:bb:
                    13:c6:ee:73:0d:eb:31:c0:ed:95:23:a5:f1:0b:d6:
                    62:1f:7c:42:4a:2e:7b:23:09:cd:24:87:32:73:44:
                    4c:19:b1:ac:78:40:57:f9:f1:0b:fd:b7:1c:ce:5b:
                    f2:9c:39:24:73:41:3d:96:fb:1e:56:bb:4a:e6:90:
                    62:ca:f5:1d:59:9c:ea:17:ef:8c:31:87:ec:ae:68:
                    de:50:2c:43:88:f1:62:a6:4c:8c:d9:fe:16:d7:86:
                    d3:aa:bc:86:1d:e3:4b:60:e9:ab:0a:c1:22:e4:87:
                    57:ea:e0:11:04:3f:1a:53:94:06:e2:95:66:de:5f:
                    1f:eb:79:83:25:0f:3b:01:53:8a:3d:2d:1f:8d:34:
                    89:3d:ba:ad:7d:2b:8f:4d:6c:87:48:b9:71:31:0c:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:86:3D:1A:9E:4B:EA:A4:78:D9:FF:75:53:A0:16:7C:35:DF:9C:E0
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:dc:78:fe:b4:73:14:aa:80:89:04:24:ac:12:ab:97:38:e8:
         7a:3a:ff:6d:db:a7:55:8c:14:9e:46:ec:03:cc:be:ba:70:b9:
         c8:55:78:f2:b9:87:8f:61:c5:1c:ba:31:5b:3d:4e:88:dc:9d:
         0d:c3:9d:06:03:1f:04:99:1c:58:ec:70:5b:d5:5a:65:f9:51:
         8d:4a:a6:7a:77:83:bf:69:90:69:89:76:79:92:b2:2f:ef:c5:
         8c:64:38:10:7b:79:a3:4b:6d:2e:af:fa:0c:de:4c:a2:f6:a3:
         0a:58:9c:6b:3d:b1:55:ff:55:50:dd:50:1c:6b:e3:b6:11:e3:
         98:cc:f6:f1:68:e8:ce:ff:0a:f9:d5:c8:98:37:f1:f1:b0:f5:
         88:10:bf:d1:86:ea:77:01:b9:c9:09:f0:55:09:01:96:85:3d:
         e5:5f:bc:80:2a:ab:ce:d4:b4:c6:20:9f:7f:21:a0:4f:56:30:
         b9:6e:41:d6:4a:df:e7:1b:76:ca:42:5e:44:5a:57:49:fb:d8:
         1d:3a:f1:fd:a4:3f:d9:aa:82:fc:9e:1a:f8:06:2b:11:6d:f1:
         c5:f9:fa:1c:7f:b4:ff:33:fb:60:99:4e:2b:84:c1:9c:5f:36:
         ad:81:83:23:06:7d:f4:a1:d9:3d:84:2f:7b:e3:9b:f9:c2:a2:
         b3:27:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:15 2025 by rpki-client