Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/323830363a3336633a3a2f33322d3332203d3e20323635363135.roa
File:                     323830363a3336633a3a2f33322d3332203d3e20323635363135.roa (raw, json)
Hash identifier:          ymQrdhFT1/C20SSM/88BMGlQjElDy+B5Jew7egxZXdQ=
Subject key identifier:   2C:9A:9A:A5:EA:F5:F5:D5:8B:3D:D3:7C:3D:AB:48:F0:59:10:4A:96
Certificate issuer:       /CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
Certificate serial:       582924143A954D330F9AA81D3E1D6CC111E09DF4
Authority key identifier: B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/323830363a3336633a3a2f33322d3332203d3e20323635363135.roa
Signing time:             Tue 04 Feb 2025 18:35:37 +0000
ROA not before:           Tue 04 Feb 2025 18:30:37 +0000
ROA not after:            Tue 03 Feb 2026 18:35:37 +0000
asID:                     265615
IP address blocks:        2806:36c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:29:24:14:3a:95:4d:33:0f:9a:a8:1d:3e:1d:6c:c1:11:e0:9d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
        Validity
            Not Before: Feb  4 18:30:37 2025 GMT
            Not After : Feb  3 18:35:37 2026 GMT
        Subject: CN=2C9A9AA5EAF5F5D58B3DD37C3DAB48F059104A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:cd:93:20:d9:2f:52:86:93:50:ec:d8:e7:b5:
                    e0:54:ab:96:1d:c0:b6:5f:0d:82:02:30:5b:93:20:
                    ea:21:d2:27:a0:a9:24:ff:2e:20:e1:20:36:de:18:
                    05:e5:e3:1b:60:6a:7b:1b:8c:b1:92:3a:31:78:ca:
                    60:1b:e7:a3:ad:44:79:29:35:39:70:8b:7f:81:4d:
                    95:2f:51:97:92:4f:ab:cd:31:88:46:05:fe:f9:fd:
                    ad:99:1d:92:df:a3:2a:b0:28:fb:27:ce:9b:eb:af:
                    d5:51:18:e2:65:8d:5e:b8:67:4d:41:b3:9f:14:44:
                    bd:40:1f:3e:d9:96:d8:e9:2e:dd:d7:af:8e:0c:07:
                    77:af:6b:92:81:00:93:86:56:59:e7:e3:0a:83:da:
                    00:08:c1:19:ef:c1:90:0a:3b:98:a6:10:74:c0:38:
                    e5:e8:8d:59:05:c0:13:5d:7e:b2:64:e5:0f:9b:44:
                    5e:e4:f7:9c:49:87:88:3a:b8:1d:62:ce:d1:bd:aa:
                    a2:43:f4:1c:45:e0:fd:bb:58:eb:8e:a0:92:8a:30:
                    7e:9f:cc:3b:3b:ea:c2:70:72:6f:d3:66:1f:e4:87:
                    cd:22:2a:5a:e3:6b:2d:0b:ca:13:c7:d9:28:55:0c:
                    a1:be:8d:de:8a:9a:a9:88:1f:3e:97:a6:b6:f7:05:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9A:9A:A5:EA:F5:F5:D5:8B:3D:D3:7C:3D:AB:48:F0:59:10:4A:96
            X509v3 Authority Key Identifier:
                keyid:B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/323830363a3336633a3a2f33322d3332203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:36c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:31:43:49:15:00:3e:36:b3:e9:b7:65:f2:7e:94:43:60:cb:
         1a:0e:bf:e3:cf:6e:ae:e9:0a:a6:e3:7c:8d:47:d8:36:58:32:
         b3:55:be:9e:03:eb:e1:8b:2c:93:28:62:c8:e9:3c:1b:62:90:
         b8:3d:d2:aa:f9:e5:16:44:d8:98:75:6d:e7:98:30:0d:d1:e5:
         4f:36:19:65:2f:f4:83:d3:e9:32:ae:82:7b:d8:9b:f2:0c:4d:
         ec:a0:65:7f:6a:c4:41:ce:d5:2d:55:5c:f8:01:e1:90:10:1f:
         74:6f:fd:3e:51:b9:13:50:08:82:cc:a7:be:99:0c:51:78:e9:
         16:13:10:fc:f0:d2:bd:00:ab:8a:95:c6:88:4f:d9:b5:79:de:
         1e:f4:79:5b:d8:98:24:a8:64:79:fd:f9:ef:8b:37:09:cc:bc:
         63:00:0b:fd:11:ad:0b:b1:e0:b6:5f:b8:3f:eb:10:6f:08:bd:
         21:cb:e9:d7:ed:82:64:e9:51:66:4b:0a:fe:95:90:c1:48:98:
         d7:7e:66:66:a2:21:da:9f:f5:3f:90:72:61:53:0e:ee:67:38:
         30:60:f0:cc:a3:fb:2f:25:b7:4e:13:05:c1:c6:d9:7d:b5:ad:
         64:ab:a8:fa:0b:2b:60:38:e5:e5:05:6c:e9:3a:0a:d1:f4:80:
         1d:5d:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:48:22 2025 by rpki-client