Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f33322d3332203d3e203238343335.roa
File:                     323830363a3336363a3a2f33322d3332203d3e203238343335.roa (raw, json)
Hash identifier:          /RFk/ItiM2VMfcuaGgT4mrnXNZaoKc6Iw7Bs/puSV0A=
Subject key identifier:   F3:DB:7B:AC:F3:ED:6C:34:58:5F:19:CA:3C:60:3C:2D:21:D4:18:65
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       698FC6AF691220D2C4782EB2D32715B880101047
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f33322d3332203d3e203238343335.roa
Signing time:             Tue 04 Feb 2025 19:57:16 +0000
ROA not before:           Tue 04 Feb 2025 19:52:16 +0000
ROA not after:            Tue 03 Feb 2026 19:57:16 +0000
asID:                     28435
IP address blocks:        2806:366::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8f:c6:af:69:12:20:d2:c4:78:2e:b2:d3:27:15:b8:80:10:10:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Feb  4 19:52:16 2025 GMT
            Not After : Feb  3 19:57:16 2026 GMT
        Subject: CN=F3DB7BACF3ED6C34585F19CA3C603C2D21D41865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:17:97:7a:a0:98:d0:f7:83:ba:d2:a4:1e:
                    e9:63:c2:1c:4f:72:54:a6:c9:fb:76:b3:59:77:f2:
                    54:9d:61:49:5c:8a:96:1a:41:75:21:33:51:08:ae:
                    f0:89:46:d9:5b:8b:b9:9a:44:fd:60:23:6e:3c:d6:
                    a7:31:39:92:d4:b7:d7:27:88:81:a2:0d:27:f0:75:
                    b2:85:e9:98:3f:b0:ae:4e:34:eb:ce:b9:9b:74:d8:
                    54:f6:fb:93:f7:da:04:c7:5a:0d:a0:56:16:5e:07:
                    87:bb:aa:35:84:fc:93:be:34:dd:00:61:fe:20:50:
                    59:44:7d:02:53:a6:8d:3e:8b:19:ea:41:9b:98:ce:
                    c3:7e:a6:ef:b1:51:fb:6f:2b:75:c8:a5:5e:ec:43:
                    fb:fb:e3:bf:ee:28:f8:7d:fd:0b:84:2a:72:86:05:
                    f1:fc:43:03:8b:5d:65:93:86:13:83:29:05:e2:0a:
                    1c:ac:93:71:bb:94:6e:84:46:f6:97:43:5d:e1:8e:
                    71:f2:b1:aa:6d:89:34:19:c1:fc:dd:75:b0:ec:87:
                    32:a1:60:8a:b9:49:be:dd:2c:5a:9e:7a:2c:de:bd:
                    24:f3:e5:d1:16:f7:1f:ce:64:ae:07:63:83:68:00:
                    e4:6e:81:5c:e5:2f:da:bb:1f:d3:6b:ec:40:11:bd:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DB:7B:AC:F3:ED:6C:34:58:5F:19:CA:3C:60:3C:2D:21:D4:18:65
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f33322d3332203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:366::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:de:e6:51:9a:37:7d:fa:2e:fa:2a:05:98:fa:ca:c5:f5:fc:
         42:bb:7f:e6:e6:08:83:02:76:a9:97:2c:3a:68:75:9f:17:97:
         38:4a:ed:bd:ca:66:60:a7:c8:3b:95:ca:a5:7a:3b:06:5b:a4:
         43:5b:74:13:c8:24:a1:84:0c:b0:6b:6f:ab:57:ab:e9:91:12:
         93:8c:d5:b1:b0:dc:12:73:11:18:06:29:95:5a:aa:d7:b9:9b:
         3c:fd:91:90:ec:6a:b0:e4:4b:0c:27:94:77:50:96:c1:2d:cc:
         2f:1c:96:2c:ec:1b:eb:06:a3:db:cf:7a:35:1e:23:07:1e:83:
         02:8c:9e:9a:09:b5:43:41:76:f3:7d:13:48:59:4e:74:c6:bc:
         7f:e8:f9:73:f1:e2:e3:4b:52:53:9b:3b:e2:1f:10:22:b9:2f:
         b6:a4:ee:3f:cd:48:c6:07:3b:8c:0b:d5:9c:df:6d:59:5b:0a:
         ec:0a:8b:4b:de:c3:3a:88:d6:0c:21:7d:c4:f8:5a:a7:75:f7:
         2c:71:5d:5e:c0:3d:93:4f:8d:dd:25:32:fe:ff:f3:2b:6e:32:
         e5:04:de:e0:c0:8c:66:fe:68:5e:cb:22:34:7b:e2:25:1a:a7:
         e6:a5:89:db:2a:ff:fa:a2:2e:d9:5d:4a:4a:e4:3f:a7:23:16:
         5a:5a:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:59 2025 by rpki-client