Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/323830363a3433643a3a2f33342d3335203d3e20323733323539.roa
File:                     323830363a3433643a3a2f33342d3335203d3e20323733323539.roa (raw, json)
Hash identifier:          1590/mbaNwW7nIvxQaVvpNnz6MNlV0gN45cLh0ZsxgE=
Subject key identifier:   4C:B1:61:B2:CD:83:5E:98:92:61:BC:0E:BD:BF:80:25:D7:1A:D6:E4
Certificate issuer:       /CN=B6AF2213A6524752139A6FFD37B02BB34B2769CD
Certificate serial:       146D76BF0A520545C69217BE2C803F5D010775C4
Authority key identifier: B6:AF:22:13:A6:52:47:52:13:9A:6F:FD:37:B0:2B:B3:4B:27:69:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/323830363a3433643a3a2f33342d3335203d3e20323733323539.roa
Signing time:             Tue 25 Feb 2025 04:55:00 +0000
ROA not before:           Tue 25 Feb 2025 04:50:00 +0000
ROA not after:            Tue 24 Feb 2026 04:55:00 +0000
asID:                     273259
IP address blocks:        2806:43d::/34 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6d:76:bf:0a:52:05:45:c6:92:17:be:2c:80:3f:5d:01:07:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6AF2213A6524752139A6FFD37B02BB34B2769CD
        Validity
            Not Before: Feb 25 04:50:00 2025 GMT
            Not After : Feb 24 04:55:00 2026 GMT
        Subject: CN=4CB161B2CD835E989261BC0EBDBF8025D71AD6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:3f:5f:6d:17:bf:7c:bd:8d:a5:1a:83:76:
                    bf:58:7d:69:8d:fb:ef:73:d6:68:09:96:e3:3a:97:
                    3e:f1:a6:50:84:71:1c:ab:60:0d:0f:e8:04:22:fa:
                    57:2a:62:1e:4d:5f:70:0e:74:ee:d9:49:63:4e:f9:
                    60:5b:f9:5d:fb:08:dc:62:53:93:40:a4:4f:09:11:
                    13:ad:74:27:9d:53:c5:9e:3e:88:e6:6e:1e:05:18:
                    5e:57:13:df:df:6f:14:7c:9a:d2:eb:c4:d1:86:ea:
                    3c:dc:09:b0:a9:9f:e8:ae:f5:c6:1c:69:83:5e:2a:
                    8d:44:3c:20:2e:f7:25:8d:47:71:78:e5:22:4c:25:
                    7a:4d:8a:b5:d5:67:64:7a:4b:32:4f:69:53:4f:7a:
                    a7:3d:c4:d1:8e:08:a9:ea:35:a0:9c:6f:c0:57:2c:
                    88:e4:78:09:6e:76:c3:b5:6a:e3:b2:63:4f:d0:18:
                    de:73:4c:d7:c1:0d:ea:b0:ba:73:6b:fc:18:1c:0c:
                    96:44:00:9b:3b:91:f5:74:4c:4e:ff:d0:ed:a9:9b:
                    7d:ed:d7:eb:96:80:e5:e6:1a:b1:86:88:e9:e1:4f:
                    92:cb:02:b3:68:6b:5e:47:a9:19:45:d8:f1:71:ec:
                    3c:82:9e:39:50:79:c1:5f:97:9a:eb:8b:f2:85:f7:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B1:61:B2:CD:83:5E:98:92:61:BC:0E:BD:BF:80:25:D7:1A:D6:E4
            X509v3 Authority Key Identifier:
                keyid:B6:AF:22:13:A6:52:47:52:13:9A:6F:FD:37:B0:2B:B3:4B:27:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/323830363a3433643a3a2f33342d3335203d3e20323733323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:43d::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:1a:e0:38:cd:4e:d7:22:9d:d5:88:dc:ca:63:23:18:06:
         56:75:88:cd:a2:9b:78:5e:d9:e2:5b:9a:6f:bf:c5:d4:2f:70:
         57:ea:4b:60:93:b7:d0:c1:f0:11:27:2c:2d:10:05:a9:e1:24:
         2d:33:34:fd:58:29:42:b8:08:51:8e:3c:a6:5c:dd:85:be:d1:
         90:99:1d:3b:21:84:55:ac:f1:58:1c:d9:a5:c7:d7:5c:fa:0d:
         81:1b:c1:02:6b:ac:de:f1:c8:87:b4:6f:e1:d9:c7:67:3c:39:
         de:eb:16:c8:bd:32:df:ae:a2:4f:d9:f3:e4:e9:90:29:d3:a6:
         71:cb:2b:0e:e5:e9:9a:fc:a5:15:c8:1f:09:87:59:5e:c8:23:
         c9:5a:d7:d5:ed:07:c3:19:41:df:01:3f:b9:d5:ae:e2:03:6e:
         36:c7:8b:cc:54:5e:01:2a:1c:45:6a:3e:ff:6e:e4:3a:d6:62:
         94:1c:e2:6f:1b:fc:e3:fc:6e:f2:2e:5a:98:07:7a:d8:53:d9:
         3d:df:d8:e9:09:33:2a:4b:02:c3:bb:7e:93:f8:81:e1:25:02:
         93:d3:a2:02:54:0b:8f:8d:c6:de:c5:a2:d0:49:80:0a:5b:0d:
         8d:85:a6:69:1c:39:74:5c:03:9b:3d:ef:31:aa:5d:8a:8d:58:
         ca:e7:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:23:52 2025 by rpki-client