Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e203133393539.roa
File:                     323830363a3331313a3a2f33322d3332203d3e203133393539.roa (raw, json)
Hash identifier:          V1jTdiIClL8ktJS9JduEpU56fttDHqulLMyqE4LKRsw=
Subject key identifier:   10:9E:1E:6C:39:A6:9F:A8:1B:AD:3C:28:79:B9:58:8E:59:50:AA:45
Certificate issuer:       /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial:       0392241F07D30F3F004E9A6A05CA5A8A80544F19
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e203133393539.roa
Signing time:             Tue 04 Feb 2025 18:03:49 +0000
ROA not before:           Tue 04 Feb 2025 17:58:49 +0000
ROA not after:            Tue 03 Feb 2026 18:03:49 +0000
asID:                     13959
IP address blocks:        2806:311::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:92:24:1f:07:d3:0f:3f:00:4e:9a:6a:05:ca:5a:8a:80:54:4f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
        Validity
            Not Before: Feb  4 17:58:49 2025 GMT
            Not After : Feb  3 18:03:49 2026 GMT
        Subject: CN=109E1E6C39A69FA81BAD3C2879B9588E5950AA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:a9:b7:62:89:f0:84:a2:08:92:12:45:3f:
                    f3:5d:94:e0:db:27:dd:4a:43:46:db:e3:30:15:4e:
                    b2:35:a0:81:74:78:e6:ac:b4:47:a9:16:05:de:88:
                    c2:9f:28:6f:94:bf:7d:af:d3:75:7f:84:f8:2e:63:
                    11:87:7c:bb:1e:46:7b:49:5a:12:79:ec:09:90:54:
                    d0:e8:20:88:a5:a0:15:78:d1:dc:78:c9:57:bb:b4:
                    fb:3e:dd:45:e2:fb:d9:1b:c3:1b:b4:54:c5:5e:6d:
                    f9:4d:bb:b7:ff:3a:ec:bc:45:4d:2a:e0:57:6a:d0:
                    4c:2e:96:a3:6e:2e:f4:6e:48:9e:10:13:00:a5:8f:
                    26:40:fd:1a:5a:8f:f9:19:27:06:39:cc:2a:38:99:
                    6a:8b:53:d5:88:2f:04:70:20:71:b9:4c:5b:07:ee:
                    df:93:94:3d:6c:8e:88:0d:10:95:e0:f3:1c:48:ad:
                    1a:4a:7f:8e:4a:c3:60:9c:5e:a0:4a:ee:42:e2:27:
                    68:51:57:ef:ef:a6:23:0b:16:8c:7d:62:52:b5:6e:
                    16:98:2b:85:bc:39:11:05:75:0b:43:fc:1d:e7:09:
                    06:39:9b:d9:70:7f:c0:0f:db:42:be:cb:26:90:18:
                    51:a7:7d:8b:e8:2c:a9:ef:b3:77:42:0e:1b:1f:f4:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9E:1E:6C:39:A6:9F:A8:1B:AD:3C:28:79:B9:58:8E:59:50:AA:45
            X509v3 Authority Key Identifier:
                keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e203133393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:311::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:78:da:99:85:9d:c7:9f:93:6d:12:9d:d2:4b:f0:77:d7:6f:
         82:eb:d2:74:60:b8:6f:25:76:f4:fc:0c:ea:93:ff:bb:64:e9:
         00:07:e8:50:cd:76:e3:ee:79:00:2d:ac:af:6c:cb:62:be:16:
         9a:66:68:b4:8c:60:a7:c1:1a:04:fe:9c:39:40:40:f9:f8:2f:
         d5:23:d2:49:2e:43:38:cb:3d:f9:fd:3b:9d:db:05:f9:cd:da:
         d6:af:39:d0:5c:52:24:4b:fc:95:8e:1f:62:4f:06:ce:a3:f6:
         a4:4f:f0:e3:e2:22:69:bb:aa:f2:0c:2f:c4:cb:5f:ea:94:93:
         1a:cd:d2:d0:70:4d:e7:1a:b0:79:db:d0:5e:b8:56:c4:c2:cb:
         13:9e:92:2a:84:a1:54:d1:d9:3f:2c:68:3a:a7:21:ab:7b:35:
         e7:8a:c2:37:f5:ae:32:70:2d:e1:05:a8:0a:51:d2:5d:7d:3b:
         2a:8b:a7:6e:0e:be:98:12:9c:c4:7f:01:40:c8:b8:5b:d3:cf:
         e5:2d:c8:76:5d:55:81:d3:63:93:bd:45:54:15:94:99:18:b4:
         b1:3e:3f:e0:ab:dd:a6:31:a5:aa:ad:f3:cf:f1:84:86:a6:11:
         6e:c3:21:71:07:6e:00:50:f4:dd:24:55:a1:5b:7b:ed:e8:57:
         e4:08:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:07 2025 by rpki-client