Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/323830363a3334333a3a2f33322d3438203d3e20323635353932.roa
File:                     323830363a3334333a3a2f33322d3438203d3e20323635353932.roa (raw, json)
Hash identifier:          i4/wdsCkuaAoYQMOHVWekVV3YGa7mZkk7WbHv+KDXUc=
Subject key identifier:   37:34:53:4D:4B:90:95:42:67:B6:99:B5:78:73:2F:A1:43:F9:33:3A
Certificate issuer:       /CN=206CAFF7CB6060056D90A0062ACF9A4217F9EB8B
Certificate serial:       470BFF2FAD1CBCAB49A279BE932FC1B1E5D84894
Authority key identifier: 20:6C:AF:F7:CB:60:60:05:6D:90:A0:06:2A:CF:9A:42:17:F9:EB:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/323830363a3334333a3a2f33322d3438203d3e20323635353932.roa
Signing time:             Tue 04 Feb 2025 18:41:19 +0000
ROA not before:           Tue 04 Feb 2025 18:36:19 +0000
ROA not after:            Tue 03 Feb 2026 18:41:19 +0000
asID:                     265592
IP address blocks:        2806:343::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0b:ff:2f:ad:1c:bc:ab:49:a2:79:be:93:2f:c1:b1:e5:d8:48:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206CAFF7CB6060056D90A0062ACF9A4217F9EB8B
        Validity
            Not Before: Feb  4 18:36:19 2025 GMT
            Not After : Feb  3 18:41:19 2026 GMT
        Subject: CN=3734534D4B90954267B699B578732FA143F9333A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:4f:07:3a:eb:34:73:75:b8:65:a6:8d:9b:
                    8d:3c:82:6d:56:80:93:da:17:69:55:fa:89:e4:21:
                    13:36:28:89:a2:6f:e9:05:66:9b:ff:36:37:49:49:
                    51:fb:3c:9b:5d:e4:b5:e8:05:76:64:aa:28:07:22:
                    3e:07:e3:66:ab:0a:40:c4:df:a6:19:44:d2:c1:61:
                    b8:ed:cb:75:72:11:b5:b6:3b:1d:5f:c1:85:42:d1:
                    b0:eb:c5:eb:17:9f:6d:20:a9:dd:a5:95:e8:4f:a6:
                    78:ba:d7:29:1b:1d:9f:ab:01:73:f8:de:3e:cd:f9:
                    29:ea:be:32:c8:b1:2b:f3:78:93:64:8f:25:fe:a4:
                    02:e6:c4:54:e3:c5:a0:07:99:26:97:db:9f:1c:d4:
                    95:2c:cb:f3:7b:6a:6d:22:a8:5d:47:e7:45:40:ab:
                    48:dc:64:0a:54:38:6a:2f:fe:6b:ec:f8:ae:7b:ae:
                    90:00:60:c8:2d:14:fb:d7:c6:01:b7:9e:18:f5:4b:
                    0b:e9:fc:40:ad:f5:0f:98:64:b9:30:dd:5a:af:ff:
                    73:10:7d:22:e7:af:06:37:53:29:2a:26:0d:9b:67:
                    ab:68:6d:9d:c8:6b:bd:74:da:5f:ec:b4:45:73:5b:
                    29:60:64:2f:93:b3:e5:80:a7:3b:68:30:5d:c9:36:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:34:53:4D:4B:90:95:42:67:B6:99:B5:78:73:2F:A1:43:F9:33:3A
            X509v3 Authority Key Identifier:
                keyid:20:6C:AF:F7:CB:60:60:05:6D:90:A0:06:2A:CF:9A:42:17:F9:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/323830363a3334333a3a2f33322d3438203d3e20323635353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:343::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:43:76:3d:c6:53:02:a6:c4:7c:ea:e0:59:a9:45:9d:37:7a:
         10:14:d7:fc:b7:58:12:c8:d2:e1:0d:44:cd:5b:b5:90:b4:ba:
         83:f0:cf:2b:db:bb:77:55:81:e7:b5:93:41:77:95:86:2f:8d:
         4f:8e:65:40:7a:27:02:72:06:d1:b9:17:fb:0d:85:6c:8a:f3:
         ba:82:0f:5b:13:2e:58:bc:31:a0:b5:0e:df:06:d3:9d:d8:9d:
         24:58:04:84:0c:96:7d:9e:98:af:9b:66:4f:b0:18:38:4e:3e:
         0a:0a:98:fd:a6:54:d9:af:61:9c:2b:dc:8e:c0:bd:a1:e2:11:
         62:a9:61:e4:13:9b:5f:1d:42:36:5f:61:58:7d:d5:9e:16:31:
         24:82:a0:e7:14:65:9a:5e:3e:36:7b:da:7f:b0:df:bf:32:73:
         9d:6b:b0:3e:9f:ba:6e:2a:39:9e:c3:9a:11:b3:a9:6c:12:13:
         4d:6b:79:d1:61:01:a0:b8:14:b7:3b:ec:fb:c2:82:42:2c:e8:
         d3:2f:45:ab:0f:5b:9b:53:f6:5b:ad:a9:a5:4c:47:c0:94:c3:
         1e:aa:0f:4c:0b:d1:f4:57:f1:a7:3e:5d:1a:e8:75:6c:7b:dc:
         b4:d7:cf:25:8d:38:7a:15:22:c2:56:11:a4:21:2b:cf:7f:41:
         73:cc:d5:6e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIURwv/L60cvKtJonm+ky/BseXYSJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA2Q0FGRjdDQjYwNjAwNTZEOTBBMDA2MkFDRjlBNDIx
N0Y5RUI4QjAeFw0yNTAyMDQxODM2MTlaFw0yNjAyMDMxODQxMTlaMDMxMTAvBgNV
BAMTKDM3MzQ1MzRENEI5MDk1NDI2N0I2OTlCNTc4NzMyRkExNDNGOTMzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRh08HOus0c3W4ZaaNm408gm1W
gJPaF2lV+onkIRM2KImib+kFZpv/NjdJSVH7PJtd5LXoBXZkqigHIj4H42arCkDE
36YZRNLBYbjty3VyEbW2Ox1fwYVC0bDrxesXn20gqd2llehPpni61ykbHZ+rAXP4
3j7N+SnqvjLIsSvzeJNkjyX+pALmxFTjxaAHmSaX258c1JUsy/N7am0iqF1H50VA
q0jcZApUOGov/mvs+K57rpAAYMgtFPvXxgG3nhj1Swvp/ECt9Q+YZLkw3Vqv/3MQ
fSLnrwY3UykqJg2bZ6tobZ3Ia7102l/stEVzWylgZC+Ts+WApztoMF3JNrt/AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUNzRTTUuQlUJntpm1eHMvoUP5MzowHwYDVR0j
BBgwFoAUIGyv98tgYAVtkKAGKs+aQhf564swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNDZGMUQ1OTBGNEE1RDQ2NTJDQkJERkUzMzk0MzZFOERE
N0QxOEFCQzE1NTU5RkQ2QTZGRURGNzk0NDQ0Nzc1LzAvMjA2Q0FGRjdDQjYwNjAw
NTZEOTBBMDA2MkFDRjlBNDIxN0Y5RUI4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMDZDQUZGN0NCNjA2MDA1NkQ5
MEEwMDYyQUNGOUE0MjE3RjlFQjhCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTQ2RjFENTkwRjRBNUQ0NjUyQ0JCREZFMzM5NDM2RThERDdEMThBQkMx
NTU1OUZENkE2RkVERjc5NDQ0NDc3NS8wLzMyMzgzMDM2M2EzMzM0MzMzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzUzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgNDMA0G
CSqGSIb3DQEBCwUAA4IBAQBfQ3Y9xlMCpsR86uBZqUWdN3oQFNf8t1gSyNLhDUTN
W7WQtLqD8M8r27t3VYHntZNBd5WGL41PjmVAeicCcgbRuRf7DYVsivO6gg9bEy5Y
vDGgtQ7fBtOd2J0kWASEDJZ9npivm2ZPsBg4Tj4KCpj9plTZr2GcK9yOwL2h4hFi
qWHkE5tfHUI2X2FYfdWeFjEkgqDnFGWaXj42e9p/sN+/MnOda7A+n7puKjmew5oR
s6lsEhNNa3nRYQGguBS3O+z7woJCLOjTL0WrD1ubU/ZbramlTEfAlMMeqg9MC9H0
V/GnPl0a6HVse9y0188ljTh6FSLCVhGkISvPf0FzzNVu
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:41 2025 by rpki-client