Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/323830363a3336333a3a2f33322d3438203d3e20323635363037.roa
File:                     323830363a3336333a3a2f33322d3438203d3e20323635363037.roa (raw, json)
Hash identifier:          C2byqGSRZCK98ogbQqnc0f+gcwlzZWNoAVMnBpa1dug=
Subject key identifier:   29:8D:80:86:7A:A6:6F:A2:3C:A2:BB:A6:CC:A5:94:DE:82:55:59:CF
Certificate issuer:       /CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
Certificate serial:       29A7E59F99F50D5FA7BD97AFB7CDFA4A84B29C8F
Authority key identifier: C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/323830363a3336333a3a2f33322d3438203d3e20323635363037.roa
Signing time:             Tue 04 Feb 2025 18:37:54 +0000
ROA not before:           Tue 04 Feb 2025 18:32:54 +0000
ROA not after:            Tue 03 Feb 2026 18:37:54 +0000
asID:                     265607
IP address blocks:        2806:363::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a7:e5:9f:99:f5:0d:5f:a7:bd:97:af:b7:cd:fa:4a:84:b2:9c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
        Validity
            Not Before: Feb  4 18:32:54 2025 GMT
            Not After : Feb  3 18:37:54 2026 GMT
        Subject: CN=298D80867AA66FA23CA2BBA6CCA594DE825559CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:b9:c0:3f:bf:46:7d:4a:2c:55:51:a0:4e:
                    53:45:69:e2:6f:20:40:93:da:5e:e8:12:1a:a4:e4:
                    a8:ad:10:82:cc:ca:5b:3a:c8:de:c7:f6:df:7b:30:
                    0e:0a:60:cc:f1:6f:bc:48:70:fb:69:2c:87:72:79:
                    0c:23:81:c2:9d:23:ba:f7:9a:f8:ac:e0:e5:ee:42:
                    84:06:58:c9:40:ec:08:51:e4:e5:0d:d5:3f:c0:90:
                    40:45:c7:de:69:6a:6b:5b:7b:e1:08:6d:9d:a1:00:
                    03:00:cb:b9:14:3f:2e:62:0b:cd:e8:f9:60:2c:43:
                    68:73:3d:ff:d7:d7:90:2e:7d:16:f4:b6:2a:a4:8c:
                    ec:57:54:88:01:cf:75:19:d9:fe:ab:bd:ff:20:9d:
                    5e:cc:b3:71:23:a6:4a:7c:08:41:b5:8b:94:42:e4:
                    e9:3a:58:cf:5b:a0:16:12:54:71:d7:65:c4:4a:16:
                    d1:de:11:08:73:5d:cd:23:3b:e5:19:a1:f3:eb:6f:
                    d8:cc:6f:cd:3e:62:3d:5b:8f:59:f1:87:40:35:65:
                    43:81:81:6f:66:66:a9:00:a0:c5:60:35:59:43:85:
                    dc:aa:68:0a:11:83:23:5a:3f:e7:5f:04:04:3d:be:
                    f7:d3:a0:84:17:f7:ee:81:43:bd:16:90:24:c9:7f:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8D:80:86:7A:A6:6F:A2:3C:A2:BB:A6:CC:A5:94:DE:82:55:59:CF
            X509v3 Authority Key Identifier:
                keyid:C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/323830363a3336333a3a2f33322d3438203d3e20323635363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:363::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:bf:83:2e:92:c3:68:4e:72:fa:de:d0:0a:48:59:35:38:aa:
         6c:10:75:a5:95:2d:a4:32:c4:3b:4c:2f:66:b0:07:9d:5d:5a:
         b9:7b:66:74:65:f4:52:a2:1c:4c:a5:3d:eb:46:0a:41:27:91:
         45:0c:ec:d0:cb:40:96:f7:8d:0e:24:36:99:9f:1f:59:b6:4f:
         7e:bb:0d:ce:be:41:ee:2b:b3:1f:ac:a5:46:54:1e:3c:3f:9b:
         8e:27:f4:d6:e3:fc:a7:9c:38:e3:d1:b1:35:28:75:95:a7:99:
         d8:c5:18:24:0f:ee:e0:68:41:cd:56:b8:7c:ff:9e:f9:44:1a:
         e6:40:ae:80:0b:f9:60:53:5f:3f:b0:cc:cf:8b:36:e0:b9:b2:
         70:3b:9e:8a:b1:92:93:da:4b:73:63:31:5b:d3:67:d4:d5:12:
         26:f0:02:fe:74:d6:aa:47:9b:94:6a:8b:1f:6f:d2:a9:92:1a:
         58:16:16:80:0f:bc:dc:d1:e7:fe:18:db:86:10:85:85:5c:c9:
         8d:4e:85:1f:f8:a2:66:6f:5f:bc:6a:17:b1:7f:b4:52:43:9f:
         39:09:83:27:97:17:38:bd:91:78:92:24:bd:98:c0:41:fb:ac:
         2c:1a:25:2b:65:b7:5c:41:39:f9:5e:39:eb:4e:f7:ad:df:41:
         5b:3e:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:48:40 2025 by rpki-client