Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/323830363a3237303a383030303a3a2f33342d3438203d3e203139333733.roa
File:                     323830363a3237303a383030303a3a2f33342d3438203d3e203139333733.roa (raw, json)
Hash identifier:          JNyBcRxn4UXBdxB2bTrezhBs52OU/X10bO+0aLoT9Fw=
Subject key identifier:   14:CB:C6:7B:76:1B:E9:45:76:B0:BC:DC:5C:9B:D8:FF:30:2F:88:22
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       6E6232B6581D5A649E5F87BF443B3E040E0A8C3B
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/323830363a3237303a383030303a3a2f33342d3438203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:50:00 +0000
ROA not before:           Sun 16 Feb 2025 06:45:00 +0000
ROA not after:            Sun 15 Feb 2026 06:50:00 +0000
asID:                     19373
IP address blocks:        2806:270:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:62:32:b6:58:1d:5a:64:9e:5f:87:bf:44:3b:3e:04:0e:0a:8c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:45:00 2025 GMT
            Not After : Feb 15 06:50:00 2026 GMT
        Subject: CN=14CBC67B761BE94576B0BCDC5C9BD8FF302F8822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:2c:c3:8e:a9:fa:5d:3b:32:1e:9c:7a:f4:
                    a9:0f:42:55:51:e5:c5:56:96:fd:ee:3e:14:a8:b5:
                    f6:62:82:c7:47:44:54:7c:77:42:d5:7f:6d:ef:48:
                    8f:59:b1:7a:d4:ae:55:96:3b:ac:f5:97:36:86:9f:
                    cb:ea:bf:79:31:c8:71:2d:88:93:14:eb:40:28:03:
                    1a:9a:6b:65:30:7a:75:2a:15:ec:b0:19:9c:81:01:
                    80:4e:4a:59:ed:4e:9c:c5:d6:0a:1a:f8:e0:37:4c:
                    33:2a:d0:50:8f:bc:b6:65:cb:00:e0:2e:64:7e:5c:
                    0b:10:1f:9e:4e:58:a5:a5:8d:a5:cb:3f:a9:95:65:
                    62:64:31:0f:0c:d2:3b:91:4f:f7:96:8b:71:e1:2d:
                    6e:16:08:e6:3b:57:7e:fa:9a:8b:d3:67:f9:73:43:
                    b7:03:88:75:b3:6b:fd:17:e8:f0:7a:5e:25:c2:4c:
                    f4:37:79:fd:68:e3:f3:73:7f:39:f1:9f:8e:5e:95:
                    d7:91:be:67:bf:53:91:65:f4:66:8e:7a:b3:d7:34:
                    3e:c4:61:a1:f6:ec:4a:d5:12:4b:50:8b:67:63:ed:
                    af:95:ac:89:3f:17:ca:2b:45:86:16:dd:1f:af:24:
                    4e:4b:6c:03:3a:d7:b0:90:3a:5a:6a:e1:54:e2:7d:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CB:C6:7B:76:1B:E9:45:76:B0:BC:DC:5C:9B:D8:FF:30:2F:88:22
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/323830363a3237303a383030303a3a2f33342d3438203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:270:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:68:1c:fa:0c:0d:c9:85:9c:c4:9d:c1:82:da:6e:c7:82:
         d5:41:7a:35:bc:7e:47:93:ed:e5:56:84:8c:8c:84:31:80:b8:
         ff:32:c4:78:c2:cb:e6:bd:d6:cc:70:8b:78:37:fa:ae:b4:03:
         9d:8b:43:5c:9e:4d:3b:ca:24:ea:ee:f7:77:69:a7:58:a1:fe:
         cf:ba:cb:48:1e:b3:80:d8:e7:98:46:de:a7:73:a0:08:b0:a4:
         09:9c:2b:35:80:e3:5f:ae:a8:a0:e8:0c:a7:f5:c9:18:7f:a6:
         61:d7:93:4a:4d:0b:6a:11:88:c5:91:57:35:c1:95:3d:13:1a:
         be:60:de:05:18:0f:3e:9b:64:f1:25:b6:0c:20:00:81:fc:ad:
         40:1a:d3:f4:c7:01:2b:3f:8f:4a:07:cc:55:4d:81:b8:4c:3d:
         cf:3b:6e:d8:a7:ae:5a:bf:97:6d:dc:33:59:fc:74:17:99:22:
         a2:a7:70:a5:a2:fc:65:e4:1f:a2:d1:56:c4:94:8a:10:76:24:
         51:dc:ee:91:8c:b9:69:63:ef:72:e3:fb:70:c7:80:24:e9:ee:
         0e:18:88:4e:5a:45:04:6f:52:f6:7f:32:c2:4e:91:1a:de:7d:
         12:aa:39:d3:86:c9:6f:54:6d:ed:12:0d:ee:42:3d:7d:e3:cb:
         61:aa:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:29:19 2025 by rpki-client