Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/323830363a3365323a3a2f33322d3332203d3e20323635353334.roa
File:                     323830363a3365323a3a2f33322d3332203d3e20323635353334.roa (raw, json)
Hash identifier:          ihNtpcOhZ3Lm2+NQFvPdSfbE9tiETpSWGpPB+raqqn4=
Subject key identifier:   74:D0:64:E9:0C:82:BF:CE:F6:04:D7:6B:B7:B2:4F:F7:53:40:57:69
Certificate issuer:       /CN=2A3E18C8D040DD1C29E422399CF2718C4D9147AC
Certificate serial:       023ED77E7789851873D762AE66AFAC7ADB515E9A
Authority key identifier: 2A:3E:18:C8:D0:40:DD:1C:29:E4:22:39:9C:F2:71:8C:4D:91:47:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/323830363a3365323a3a2f33322d3332203d3e20323635353334.roa
Signing time:             Tue 04 Feb 2025 18:49:32 +0000
ROA not before:           Tue 04 Feb 2025 18:44:32 +0000
ROA not after:            Tue 03 Feb 2026 18:49:32 +0000
asID:                     265534
IP address blocks:        2806:3e2::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3e:d7:7e:77:89:85:18:73:d7:62:ae:66:af:ac:7a:db:51:5e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3E18C8D040DD1C29E422399CF2718C4D9147AC
        Validity
            Not Before: Feb  4 18:44:32 2025 GMT
            Not After : Feb  3 18:49:32 2026 GMT
        Subject: CN=74D064E90C82BFCEF604D76BB7B24FF753405769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:b1:af:2a:7e:64:19:22:86:7f:50:8d:c3:
                    f5:20:99:c8:38:a9:3f:67:79:ed:1d:cb:12:51:23:
                    45:40:20:6c:02:4f:34:51:79:58:47:9a:a7:6c:f0:
                    70:e8:28:2a:2d:52:19:2a:ad:20:dd:56:c0:3f:bb:
                    ea:6a:5c:89:a1:01:bb:fb:ef:ed:4a:4e:32:fd:d7:
                    75:2f:e0:73:df:2e:be:81:67:43:3d:51:0b:01:94:
                    42:43:33:72:cb:d0:68:a4:64:54:ae:80:cf:d4:80:
                    f9:bc:2b:2c:55:0d:67:b9:0c:19:68:51:54:d0:7e:
                    9b:7d:3d:4f:08:ff:04:5c:f8:8a:bb:6a:09:74:47:
                    55:76:07:76:7d:3a:54:c0:5a:c0:d8:89:92:42:1f:
                    81:87:c5:f2:78:c8:83:dd:46:87:8d:56:93:29:57:
                    5b:24:05:25:9d:99:32:cc:95:b1:cb:7e:d1:6b:73:
                    f5:0c:ab:f1:6b:d6:1d:71:d6:b9:e2:b2:f3:c0:e3:
                    b9:9f:83:67:62:38:cb:cb:f9:7d:24:92:da:e6:66:
                    c5:f0:43:e6:c0:c7:71:4a:e2:6c:70:fa:b3:95:ad:
                    b7:b3:47:36:6e:ac:a3:27:e2:0d:8c:b0:e4:ca:87:
                    1d:ca:2d:15:fa:ff:0e:d5:59:92:0d:ed:9a:fc:fa:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D0:64:E9:0C:82:BF:CE:F6:04:D7:6B:B7:B2:4F:F7:53:40:57:69
            X509v3 Authority Key Identifier:
                keyid:2A:3E:18:C8:D0:40:DD:1C:29:E4:22:39:9C:F2:71:8C:4D:91:47:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/323830363a3365323a3a2f33322d3332203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e2::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:b5:ab:f1:16:d2:5b:31:11:b2:5a:66:a9:01:f3:4b:48:ed:
         ac:41:3e:fd:ff:7d:27:ff:5e:9e:04:6d:a1:e9:d5:cb:25:78:
         21:88:45:87:38:f8:6c:a8:98:1d:93:f1:12:e3:10:b6:ca:32:
         df:dd:2e:85:a0:b0:19:d9:60:75:08:48:6c:5a:63:77:83:79:
         e5:76:37:41:ea:b1:d2:19:f2:37:ec:3d:f7:32:ca:ae:d4:ca:
         82:57:c2:7f:88:cb:12:69:e7:1c:23:4d:0d:50:9d:be:7d:70:
         ee:5e:a3:a9:6c:c0:9f:80:6b:0d:4f:5c:a1:7b:5a:6d:6d:c4:
         63:f6:8f:63:f4:8f:a8:ae:0e:7e:8b:2c:bf:d5:b3:95:19:63:
         94:4f:43:17:60:70:22:80:4d:9a:67:cc:a1:3e:6f:5b:fc:9b:
         df:8b:24:af:21:b4:22:5a:fa:56:3b:48:c6:af:11:2b:0e:ba:
         9e:a6:0d:66:db:88:d4:78:b3:e4:53:92:7c:ba:1d:3b:4a:73:
         73:2f:ed:3a:66:3f:88:34:d3:da:37:32:82:e7:dd:44:00:a4:
         86:94:65:a6:6c:2e:6f:15:5f:4e:88:bc:e2:9d:72:65:ef:70:
         70:ae:4a:21:ff:5d:f9:cd:ec:e8:ec:be:c4:02:b5:c5:ff:6a:
         65:41:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:22 2025 by rpki-client