Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/323830363a3336393a3a2f33322d3438203d3e20323635363132.roa
File:                     323830363a3336393a3a2f33322d3438203d3e20323635363132.roa (raw, json)
Hash identifier:          kuguWLNYpcr4iOjCLLSpfjtwqeO5dDl4vOckRpAuxqo=
Subject key identifier:   1B:F5:C8:CD:C1:D5:E7:7E:EF:C7:B7:A2:7D:4A:3A:65:0E:4C:7F:8A
Certificate issuer:       /CN=46C8537BA4910DB999B9E757EED7CBE1BB73EE6A
Certificate serial:       2528F27B759C914BDD95096CE20376CA2BB5AB75
Authority key identifier: 46:C8:53:7B:A4:91:0D:B9:99:B9:E7:57:EE:D7:CB:E1:BB:73:EE:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/323830363a3336393a3a2f33322d3438203d3e20323635363132.roa
Signing time:             Tue 04 Feb 2025 18:17:45 +0000
ROA not before:           Tue 04 Feb 2025 18:12:45 +0000
ROA not after:            Tue 03 Feb 2026 18:17:45 +0000
asID:                     265612
IP address blocks:        2806:369::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:28:f2:7b:75:9c:91:4b:dd:95:09:6c:e2:03:76:ca:2b:b5:ab:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C8537BA4910DB999B9E757EED7CBE1BB73EE6A
        Validity
            Not Before: Feb  4 18:12:45 2025 GMT
            Not After : Feb  3 18:17:45 2026 GMT
        Subject: CN=1BF5C8CDC1D5E77EEFC7B7A27D4A3A650E4C7F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:24:3b:a0:3a:25:4d:74:9e:6e:f0:69:f2:
                    73:11:b7:c9:f0:fc:ad:5a:0f:ea:1a:fc:02:0d:7f:
                    c3:43:80:8d:16:37:38:96:e5:1d:9f:3b:77:4d:08:
                    11:fe:71:57:f7:b4:b2:0a:d3:0b:a5:50:f5:73:7c:
                    7e:ad:10:31:82:b8:b5:ae:9c:5c:c8:7e:80:92:82:
                    18:40:11:d9:6a:58:5f:90:7e:6a:8a:31:a1:4f:b9:
                    c7:f8:6a:48:e5:14:93:4d:42:b3:3b:d6:ca:e9:c1:
                    81:c4:60:e1:73:27:70:bf:9b:b5:81:7b:e4:fd:f0:
                    60:79:7d:b6:8a:8d:01:2e:e3:e9:1c:eb:61:6b:bd:
                    f3:63:7e:ad:5f:ad:c5:2c:0d:45:88:cf:68:d3:9e:
                    28:d3:fe:1c:96:17:80:69:01:c4:ff:c6:bf:82:51:
                    16:71:17:f1:b8:86:71:f2:9e:41:2f:25:58:42:ab:
                    8a:8c:bf:bd:86:29:3f:5c:5a:07:23:b7:29:c4:1f:
                    c4:02:05:b3:e2:6c:45:0a:86:cb:ca:5a:34:3b:0b:
                    b7:c9:47:81:9b:f0:d3:ed:b3:2d:28:63:8c:6a:ee:
                    cb:f3:27:22:f8:0c:24:3a:9a:87:4c:3a:5e:de:a9:
                    0d:cf:fa:10:6e:80:66:f7:03:66:fd:e7:f7:42:b9:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:C8:CD:C1:D5:E7:7E:EF:C7:B7:A2:7D:4A:3A:65:0E:4C:7F:8A
            X509v3 Authority Key Identifier:
                keyid:46:C8:53:7B:A4:91:0D:B9:99:B9:E7:57:EE:D7:CB:E1:BB:73:EE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/323830363a3336393a3a2f33322d3438203d3e20323635363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:369::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:ee:19:2d:0f:81:b8:10:cc:e2:01:08:2d:3d:22:40:e3:
         4e:74:3b:d6:ed:21:c4:28:7b:5d:53:24:35:74:9a:92:ba:e5:
         bf:35:92:c1:90:90:a1:a4:79:07:e4:6b:28:61:f8:4e:9d:20:
         e5:b8:03:39:3b:0f:c8:6e:e9:c1:ae:ad:96:45:a0:1f:d9:e8:
         87:7d:f5:83:b5:74:e9:dd:03:9f:a3:ed:e2:68:99:56:b8:35:
         9f:f7:aa:92:f1:73:9c:bd:32:87:32:9c:e3:fb:7f:ff:d5:6d:
         ae:cc:3e:52:6f:7a:48:bf:5a:3d:b1:ae:a8:7a:11:0e:5a:6b:
         9f:62:91:75:4b:cb:e0:c4:f8:17:cb:b5:72:7d:15:4b:f9:1c:
         fa:4d:05:83:9b:5c:30:99:b4:f4:eb:b1:71:86:ec:c7:03:31:
         fd:3c:3f:15:5b:ac:50:4a:c3:c8:50:f1:b1:f6:c0:b6:27:24:
         fa:15:72:07:c7:59:c5:d0:a9:37:6b:f7:57:5a:e5:d6:4a:45:
         e4:7a:e7:17:65:d8:64:a8:f4:a9:35:bc:95:0a:8f:bc:34:c4:
         11:fa:09:96:c7:75:7b:8d:08:2c:43:95:19:87:b0:11:d3:78:
         77:92:36:93:7f:fa:61:89:51:ca:b5:33:41:f3:54:e1:4f:55:
         0d:85:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:15 2025 by rpki-client