Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa
File:                     323830363a3231623a3a2f33322d3438203d3e203139333332.roa (raw, json)
Hash identifier:          vzI8KPyuEgCmSr4WHX/6yT3F+8i9dpf0xj8OPB8XGQY=
Subject key identifier:   2F:AD:94:12:19:14:55:C8:60:F0:95:DC:16:55:23:6C:3E:96:86:3C
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       5493D81EB7FAB9D1DE21FB8DBD711D6472D4214C
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa
Signing time:             Tue 04 Feb 2025 18:10:53 +0000
ROA not before:           Tue 04 Feb 2025 18:05:53 +0000
ROA not after:            Tue 03 Feb 2026 18:10:53 +0000
asID:                     19332
IP address blocks:        2806:21b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:93:d8:1e:b7:fa:b9:d1:de:21:fb:8d:bd:71:1d:64:72:d4:21:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Feb  4 18:05:53 2025 GMT
            Not After : Feb  3 18:10:53 2026 GMT
        Subject: CN=2FAD9412191455C860F095DC1655236C3E96863C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:52:6b:fc:5b:29:b6:cc:cf:39:de:ed:94:
                    06:9d:eb:01:2a:4a:e8:f0:c3:ab:9b:f1:b1:17:48:
                    da:ab:d8:14:21:4d:04:20:e0:6f:bc:fa:cc:3f:82:
                    e3:09:f9:5e:eb:e7:9a:ce:68:a1:52:db:df:5f:ab:
                    5c:f6:7c:e3:31:ca:3d:fd:1d:4d:18:d8:af:d3:d1:
                    94:ce:18:43:12:80:39:e7:ca:59:82:c9:e1:6f:78:
                    b0:66:f3:bb:8d:88:3a:8b:df:1c:b2:c6:71:8d:3a:
                    8d:fc:08:cc:72:9d:e2:46:a9:eb:de:2b:0a:55:3c:
                    1c:51:95:43:ec:f3:f6:d5:d0:1f:d4:ff:c0:ba:9a:
                    e7:4e:ee:fe:8c:5b:a4:7f:2a:0d:56:58:92:2a:e9:
                    05:f1:34:f8:31:55:2f:c9:39:8b:1c:70:42:88:9d:
                    60:da:93:42:02:26:ab:e4:68:3d:45:6e:16:51:ec:
                    03:a0:fe:38:9e:95:61:4f:63:8d:0c:b4:67:72:58:
                    cc:9c:7b:e3:26:a1:cd:51:cb:6d:71:ef:2a:3c:ad:
                    81:fe:92:c9:f1:eb:5e:b7:b9:ea:7f:40:62:25:2a:
                    16:d9:20:aa:99:99:1e:e3:a5:f5:cd:a4:db:8d:be:
                    07:26:a7:57:7c:ba:a8:21:c3:02:9a:78:e3:05:51:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AD:94:12:19:14:55:C8:60:F0:95:DC:16:55:23:6C:3E:96:86:3C
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21b::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:6d:8c:46:d2:d7:05:fb:be:09:a4:6d:0f:69:c1:d5:ae:
         68:a5:b6:21:80:b7:8c:36:d6:5b:f6:9f:92:28:0d:ed:11:b3:
         7d:3a:4a:98:c4:6e:cb:59:f2:5c:49:f5:65:6d:44:89:c2:20:
         c6:8d:c9:cf:95:ca:99:b5:5a:82:ea:c4:5d:c0:87:67:bc:ff:
         b1:5c:f3:70:7b:92:d4:39:0c:69:4f:27:80:ea:1f:6c:76:ec:
         21:f7:eb:cb:b8:54:d1:15:4b:0d:dc:62:a9:02:7d:4d:3e:7b:
         15:36:4a:3a:25:5e:62:62:4d:34:69:0a:0c:e1:c0:ab:f8:62:
         06:6b:c8:7f:d4:ab:b7:40:1e:82:e5:97:60:d8:ca:99:6d:1a:
         2c:f6:73:8d:c1:df:d2:7b:92:c1:58:59:33:69:bd:aa:cd:26:
         79:6d:32:a9:6b:af:af:b8:77:31:52:32:8c:92:ef:1d:4c:dd:
         f9:36:61:e6:d8:b4:49:5b:0e:0c:ff:b7:ac:16:d6:a9:47:1a:
         64:b1:e3:63:90:d9:d7:db:bf:25:3c:e6:4b:90:2d:1e:54:eb:
         c2:39:10:3f:1a:67:eb:88:a6:64:7c:2d:1b:62:9a:eb:62:93:
         b6:dc:01:cf:e2:b6:61:34:38:10:24:7a:19:bf:0a:62:6e:3b:
         f3:b0:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:02 2025 by rpki-client