Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa
File:                     323830363a3364343a3a2f33322d3438203d3e20323635353836.roa (raw, json)
Hash identifier:          A00Hw1vSBws2Vorj6ybRtRasz2Ml7x/c3JQMJqA6dmw=
Subject key identifier:   7E:51:C2:6B:59:FA:81:3F:FD:77:2F:99:0A:52:F0:F0:35:BB:C1:2E
Certificate issuer:       /CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
Certificate serial:       15EAA713865DE910D18C07FA9C5C6B1789CA0C01
Authority key identifier: 9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa
Signing time:             Tue 04 Feb 2025 18:33:59 +0000
ROA not before:           Tue 04 Feb 2025 18:28:59 +0000
ROA not after:            Tue 03 Feb 2026 18:33:59 +0000
asID:                     265586
IP address blocks:        2806:3d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ea:a7:13:86:5d:e9:10:d1:8c:07:fa:9c:5c:6b:17:89:ca:0c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
        Validity
            Not Before: Feb  4 18:28:59 2025 GMT
            Not After : Feb  3 18:33:59 2026 GMT
        Subject: CN=7E51C26B59FA813FFD772F990A52F0F035BBC12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:2e:a9:35:ee:17:d0:f7:d2:0d:ae:48:ce:
                    db:0e:1e:2f:88:aa:0a:80:e9:43:24:10:1a:f0:8e:
                    33:1a:f8:d8:8c:25:da:3c:5b:80:e8:a8:0f:af:5f:
                    9d:71:82:e5:93:8d:d2:58:04:d3:fe:22:af:18:98:
                    a4:e8:9c:1e:ba:56:63:af:17:c7:08:d1:df:b5:80:
                    57:74:71:57:75:e0:dc:83:02:38:a6:33:65:31:cb:
                    11:c2:a6:2e:48:86:fa:a3:d9:5c:65:52:e2:01:db:
                    4b:fb:d5:c7:f0:76:6f:ab:dd:10:8a:71:8f:83:dd:
                    73:5b:ab:10:56:05:5b:0f:da:fe:eb:5a:dd:56:4f:
                    8e:28:73:06:9c:2f:c6:2c:7f:e2:63:f7:2b:02:b9:
                    26:49:ff:88:97:45:42:ad:f6:9c:4a:1b:9b:7f:20:
                    5f:38:3a:f4:3d:e6:76:75:77:60:47:e0:0f:54:54:
                    27:a3:6c:1a:03:fc:89:8e:94:95:7d:7c:66:c1:33:
                    da:3e:f4:be:23:11:d7:71:79:c4:02:89:83:9c:c7:
                    9a:b9:80:fe:97:1e:45:03:8a:14:9f:29:26:8b:48:
                    7f:6d:a4:3f:37:74:d2:ca:de:ea:b1:7e:aa:75:76:
                    c4:f4:54:be:4f:71:41:40:93:b5:b8:5c:c0:35:49:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:C2:6B:59:FA:81:3F:FD:77:2F:99:0A:52:F0:F0:35:BB:C1:2E
            X509v3 Authority Key Identifier:
                keyid:9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:af:9f:57:c8:a3:54:9b:36:e2:88:54:a1:48:78:fe:f2:df:
         aa:4b:44:07:46:f9:a8:74:81:69:ad:4c:c8:46:be:08:74:40:
         55:dd:c8:78:da:2e:87:f7:c0:49:7e:4f:73:0e:2a:31:f2:ab:
         57:4b:ce:f0:f7:6d:48:3a:90:19:10:5f:35:35:ea:92:27:05:
         f9:d6:c5:09:73:08:cd:be:6c:5d:ea:c8:76:85:48:b9:35:71:
         7c:ca:d3:f2:1f:4e:fd:4d:cf:90:ec:38:ef:ab:ff:ba:84:76:
         53:4e:e2:a5:3d:d5:5d:33:4a:55:61:1e:e2:e4:85:eb:86:85:
         2e:0b:9f:85:9f:9e:22:37:9e:00:4d:a8:da:b7:f2:d6:c0:11:
         5b:93:b4:3d:88:f7:f5:4a:58:22:84:d4:a9:3a:db:1f:0f:2d:
         b8:ec:68:6a:15:0e:1c:52:1d:96:d9:10:0e:21:17:32:20:2b:
         42:0a:35:0d:ea:24:3f:25:9d:e4:1d:d6:65:73:f0:46:f0:ab:
         17:76:49:5d:1b:f6:9f:c7:0a:dd:91:77:88:dc:26:4f:72:85:
         1a:5c:73:9a:71:6a:1b:76:26:1c:e1:50:9f:3e:9b:c7:58:a9:
         06:95:45:9b:37:cb:eb:b4:3f:71:4a:1d:9d:e0:0e:75:69:67:
         ad:64:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:10 2025 by rpki-client