Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/323830363a3336623a3a2f33322d3438203d3e20323635363134.roa
File:                     323830363a3336623a3a2f33322d3438203d3e20323635363134.roa (raw, json)
Hash identifier:          u4ZDQr6uxokDM6ggaFMwXaJ/bYJNL2Nz/TkVbBi9QVQ=
Subject key identifier:   80:21:DB:D5:70:68:67:7A:86:E5:A8:A2:6E:EC:EC:48:E0:97:EF:B6
Certificate issuer:       /CN=BC628CE1C3E1DDD106402753F9498886591C9394
Certificate serial:       32B3E81950F674F5E2D0F9A9F71E657ED00954CD
Authority key identifier: BC:62:8C:E1:C3:E1:DD:D1:06:40:27:53:F9:49:88:86:59:1C:93:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC628CE1C3E1DDD106402753F9498886591C9394.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/323830363a3336623a3a2f33322d3438203d3e20323635363134.roa
Signing time:             Tue 04 Feb 2025 18:04:18 +0000
ROA not before:           Tue 04 Feb 2025 17:59:18 +0000
ROA not after:            Tue 03 Feb 2026 18:04:18 +0000
asID:                     265614
IP address blocks:        2806:36b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/BC628CE1C3E1DDD106402753F9498886591C9394.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/BC628CE1C3E1DDD106402753F9498886591C9394.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC628CE1C3E1DDD106402753F9498886591C9394.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b3:e8:19:50:f6:74:f5:e2:d0:f9:a9:f7:1e:65:7e:d0:09:54:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC628CE1C3E1DDD106402753F9498886591C9394
        Validity
            Not Before: Feb  4 17:59:18 2025 GMT
            Not After : Feb  3 18:04:18 2026 GMT
        Subject: CN=8021DBD57068677A86E5A8A26EECEC48E097EFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:e5:45:d7:9e:c1:0d:e7:63:92:78:b8:b3:
                    a6:f0:27:ac:16:18:ca:46:e1:65:8c:ac:f4:a8:a3:
                    fe:ef:84:98:0c:63:b5:2b:a5:b0:3e:ef:e7:0a:a1:
                    42:01:82:cb:14:19:e5:4f:5e:8c:4c:11:5a:53:ee:
                    4f:7e:24:25:76:2f:09:f6:ce:5c:67:79:c8:80:24:
                    a8:92:26:64:79:b3:35:bb:92:70:b4:05:d8:69:77:
                    9a:af:55:14:32:ed:ab:c6:e3:4c:9a:18:fd:e1:79:
                    84:46:9e:1e:15:fa:62:dc:55:5a:2c:4e:79:82:de:
                    d7:3d:83:5b:50:19:fb:c3:6c:13:f9:40:47:0d:ad:
                    8b:a3:61:9f:0d:50:a8:a3:2b:e3:e1:24:8c:4d:24:
                    49:e5:3c:92:59:18:8a:6c:9a:9d:68:6c:c3:de:a7:
                    ad:d9:6a:bd:a5:64:97:f0:0a:9a:40:4c:c9:25:95:
                    99:28:03:ad:c9:99:ae:94:74:4a:b6:b2:77:b8:5c:
                    8f:87:8c:e5:57:c1:14:d8:4d:b3:dc:a9:49:5b:57:
                    39:8e:14:52:cf:46:81:73:7e:e0:93:fe:21:94:04:
                    fe:b6:25:ef:ec:6b:02:66:65:e0:c3:ad:58:de:b1:
                    d4:e1:c4:06:9b:f8:d3:bd:8e:6d:8d:d8:3a:31:13:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:21:DB:D5:70:68:67:7A:86:E5:A8:A2:6E:EC:EC:48:E0:97:EF:B6
            X509v3 Authority Key Identifier:
                keyid:BC:62:8C:E1:C3:E1:DD:D1:06:40:27:53:F9:49:88:86:59:1C:93:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/BC628CE1C3E1DDD106402753F9498886591C9394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC628CE1C3E1DDD106402753F9498886591C9394.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/323830363a3336623a3a2f33322d3438203d3e20323635363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:36b::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:e0:d1:6e:69:55:b9:ad:bc:22:c2:0b:c7:7c:bd:a5:2d:
         16:87:45:27:48:14:b5:29:22:23:b2:35:6e:90:b0:f3:13:f8:
         38:94:67:17:31:c0:1d:57:86:49:a9:3e:38:4f:82:c6:53:b0:
         8b:7c:0d:35:59:f8:0e:33:74:b8:2b:ca:79:f7:e3:3b:57:bb:
         f5:d6:fd:71:d3:7f:b6:f0:f6:50:62:06:b5:00:d1:b8:b9:55:
         94:20:05:4e:45:8c:20:86:03:69:3e:f7:ef:70:8d:71:e8:21:
         a1:d5:35:d6:87:b6:07:d9:0d:d2:f6:c7:0e:28:cd:25:08:db:
         e0:c3:26:ad:cb:6e:b1:4d:c9:e7:1e:43:e3:c4:3c:8b:fd:b6:
         d4:ee:19:6a:32:9c:55:40:f0:b8:bd:18:52:00:84:94:ea:ef:
         35:7f:4f:82:23:3f:72:39:94:54:14:a7:ce:26:76:7c:f0:64:
         22:0c:92:d8:fe:c3:d9:25:4d:5e:d4:88:12:97:0c:2a:31:8d:
         7b:d2:8e:9e:a6:a6:3a:be:a6:f7:18:f4:30:9d:50:7a:04:05:
         e6:71:40:cb:94:d0:ce:cc:65:bf:d2:63:99:aa:cb:37:1b:c1:
         1f:00:cc:b3:56:83:f2:46:69:b6:aa:cd:82:f1:04:8b:a6:83:
         8f:1c:fa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:32:37 2025 by rpki-client