Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/323830363a3363623a3a2f33322d3332203d3e203238343430.roa
File:                     323830363a3363623a3a2f33322d3332203d3e203238343430.roa (raw, json)
Hash identifier:          VPl48yTBzPymjkISZFKr52i3n8KuYAUaCfL1ZNTeJYg=
Subject key identifier:   68:F5:36:02:24:EF:40:03:A5:83:66:18:66:F0:B1:7D:7D:C8:23:7B
Certificate issuer:       /CN=6D10FFF67A506ABC4FE62222995FF6E44B2C1D37
Certificate serial:       7DA5B7FFE969FB7A72EBA6599E8597A44DCC3475
Authority key identifier: 6D:10:FF:F6:7A:50:6A:BC:4F:E6:22:22:99:5F:F6:E4:4B:2C:1D:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/323830363a3363623a3a2f33322d3332203d3e203238343430.roa
Signing time:             Tue 04 Feb 2025 20:00:44 +0000
ROA not before:           Tue 04 Feb 2025 19:55:44 +0000
ROA not after:            Tue 03 Feb 2026 20:00:44 +0000
asID:                     28440
IP address blocks:        2806:3cb::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 17:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:b7:ff:e9:69:fb:7a:72:eb:a6:59:9e:85:97:a4:4d:cc:34:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D10FFF67A506ABC4FE62222995FF6E44B2C1D37
        Validity
            Not Before: Feb  4 19:55:44 2025 GMT
            Not After : Feb  3 20:00:44 2026 GMT
        Subject: CN=68F5360224EF4003A583661866F0B17D7DC8237B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:b1:e0:ab:b2:ee:ad:cc:0c:c2:ea:63:11:
                    71:e2:8b:0b:a3:32:e7:9a:77:4f:7b:02:bd:9d:c3:
                    b9:28:85:d5:8e:19:9a:71:ca:04:6d:dd:6a:fb:35:
                    9e:06:ce:4f:ae:e3:d8:95:9f:68:f4:1f:21:75:8c:
                    72:0a:37:81:91:46:86:ed:cb:ab:2e:30:97:79:57:
                    5f:e9:25:4f:aa:fb:84:9a:d9:d9:41:ce:b8:60:92:
                    07:a1:2f:64:50:30:c1:6c:92:5a:26:d1:a2:12:2b:
                    f5:ce:b2:bf:6a:19:9c:4c:81:a1:b6:d8:2f:77:8b:
                    d1:a3:d7:e9:e1:ad:a7:48:ea:4c:3d:ab:a2:e7:20:
                    0c:4c:49:8a:33:cc:c9:13:dc:92:9c:22:c1:2d:76:
                    d7:02:3a:c8:bb:5e:03:90:ae:a4:85:f7:82:2b:c8:
                    c3:06:f3:78:cc:ec:66:17:92:7e:55:65:a9:c0:7d:
                    9f:3d:b2:7f:09:06:7f:9e:be:30:2d:2b:45:56:02:
                    a6:8a:25:c1:3a:b3:2b:42:b5:8a:0c:9f:4b:16:b4:
                    31:6e:1f:95:a0:c2:83:dc:9d:d7:d6:68:5b:52:9d:
                    bb:2e:2b:ed:25:7c:97:3a:02:64:33:ab:6a:da:2e:
                    4f:58:1d:ed:f8:39:1d:c3:a2:87:89:a7:49:80:fb:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F5:36:02:24:EF:40:03:A5:83:66:18:66:F0:B1:7D:7D:C8:23:7B
            X509v3 Authority Key Identifier:
                keyid:6D:10:FF:F6:7A:50:6A:BC:4F:E6:22:22:99:5F:F6:E4:4B:2C:1D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/323830363a3363623a3a2f33322d3332203d3e203238343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3cb::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:51:74:31:06:fd:e1:15:db:5d:68:92:57:04:b0:93:6d:
         26:84:bb:ad:1f:f1:6c:dd:4f:5b:77:e3:92:20:03:ac:7b:d8:
         55:17:b7:00:1f:3b:cc:34:67:8a:13:1d:c0:43:ea:38:b5:b8:
         84:fb:46:55:b4:1b:67:f9:0d:6d:f8:fb:d7:e0:43:54:2a:1d:
         5b:5c:fe:d9:0e:bd:84:3f:33:ed:d4:82:e9:85:d3:ab:ee:42:
         d6:c1:2c:c9:9c:d1:6c:42:96:46:0b:68:c0:ed:cf:cc:44:1d:
         fd:ba:15:17:10:06:e1:c7:c1:15:cc:18:15:f6:98:78:61:5b:
         14:12:8c:86:f1:a3:0c:16:37:47:01:e1:d5:e0:fc:76:86:de:
         8c:4d:f1:44:36:bd:a5:43:3c:dd:aa:97:43:ba:9a:67:37:9f:
         71:6b:b9:75:eb:0a:1d:d7:b0:ee:44:01:3d:0d:cf:87:a6:24:
         cf:71:e9:0a:2f:d7:de:e6:b4:5c:a4:8b:5d:56:57:7f:88:65:
         64:f6:2f:95:b2:4d:67:b9:d3:6c:51:d9:ea:80:ab:fe:da:ed:
         59:44:59:b9:8c:70:1e:d2:56:94:98:7f:30:c4:3b:98:21:09:
         f0:18:3f:32:0d:33:c0:ed:f1:26:fd:30:5c:48:d9:8c:b9:06:
         a3:38:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:10:52 2025 by rpki-client