Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/323830363a3361633a3a2f33322d3430203d3e20323635363036.roa
File:                     323830363a3361633a3a2f33322d3430203d3e20323635363036.roa (raw, json)
Hash identifier:          FeF+CA1umht/nEYfs8h51BRFJO4YkmcWGH8pjv914xI=
Subject key identifier:   2E:5B:60:A4:80:DA:03:7F:C6:25:0E:04:5F:B5:AA:80:F9:C1:C4:A2
Certificate issuer:       /CN=C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6
Certificate serial:       632EAFB5F6D8D5961C17D7B3B15DD97DCC50EA3E
Authority key identifier: C6:40:51:3C:AB:89:8A:7B:4B:1C:A0:EA:B7:CA:AB:03:5A:E5:85:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/323830363a3361633a3a2f33322d3430203d3e20323635363036.roa
Signing time:             Tue 04 Feb 2025 20:01:28 +0000
ROA not before:           Tue 04 Feb 2025 19:56:28 +0000
ROA not after:            Tue 03 Feb 2026 20:01:28 +0000
asID:                     265606
IP address blocks:        2806:3ac::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2e:af:b5:f6:d8:d5:96:1c:17:d7:b3:b1:5d:d9:7d:cc:50:ea:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6
        Validity
            Not Before: Feb  4 19:56:28 2025 GMT
            Not After : Feb  3 20:01:28 2026 GMT
        Subject: CN=2E5B60A480DA037FC6250E045FB5AA80F9C1C4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:03:c9:1c:00:40:6a:78:4f:6d:81:1d:81:
                    10:a4:84:4b:87:25:39:4d:a6:3a:3b:3a:8a:9b:d2:
                    24:32:ac:c5:9a:e2:fd:2f:57:75:67:a0:09:a8:65:
                    93:3b:8a:85:10:fd:eb:0e:27:95:41:98:c5:7e:ad:
                    b7:93:b1:05:04:44:37:d9:f7:37:60:e7:c6:82:cd:
                    ac:17:11:12:72:f7:0a:f9:7a:17:7f:da:7e:35:34:
                    48:66:c4:f5:26:17:87:1e:09:ac:24:a5:dc:55:99:
                    e9:3b:00:95:31:98:4c:dd:3e:76:14:34:21:46:71:
                    c1:f6:b5:38:ba:1a:37:04:8f:00:ae:b1:c0:f9:4a:
                    42:de:86:02:1f:0b:53:ec:87:e1:36:f7:2b:91:c5:
                    c4:95:fc:a9:d2:de:39:e4:9e:5c:77:61:69:9a:f8:
                    ef:d0:00:1d:70:1d:6c:06:31:03:e0:c7:bc:00:f8:
                    d2:2f:80:6a:a0:5a:fe:66:03:46:f7:52:7e:5c:ac:
                    c4:6b:15:d0:6b:39:69:c9:16:a5:e7:e1:a1:19:02:
                    64:e8:af:26:24:7d:f8:28:3f:91:6d:d9:c4:c5:d7:
                    4b:55:45:25:3c:e9:1f:e1:f1:4c:73:a9:3b:de:73:
                    a2:74:2a:54:ed:86:37:15:71:f1:b7:8b:ac:63:8f:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5B:60:A4:80:DA:03:7F:C6:25:0E:04:5F:B5:AA:80:F9:C1:C4:A2
            X509v3 Authority Key Identifier:
                keyid:C6:40:51:3C:AB:89:8A:7B:4B:1C:A0:EA:B7:CA:AB:03:5A:E5:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/323830363a3361633a3a2f33322d3430203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:fa:0e:9a:08:97:5e:ce:39:2b:c2:f7:94:34:ac:9e:3a:73:
         6e:3e:2b:c6:ba:08:55:6f:54:43:bb:da:78:7d:1c:00:2b:48:
         41:cf:cd:88:af:42:9c:93:87:b1:45:94:05:32:d3:4c:4e:f0:
         f0:f1:08:b1:a2:0b:6b:61:ed:54:c6:de:e8:2b:30:bb:9e:cf:
         b4:4e:03:da:5f:33:5b:f9:93:cd:9f:e5:02:d3:ee:ce:95:dd:
         73:5a:9b:1b:97:6c:65:29:2d:de:88:e7:90:62:7c:8c:b8:3f:
         2f:94:d6:09:13:31:46:09:1d:23:a4:a2:6d:54:be:f2:32:26:
         50:7b:1d:82:0b:59:25:29:0d:dc:a9:cd:47:1f:6f:6c:80:a1:
         65:60:71:8c:85:e9:9e:83:9f:0b:bf:b6:a7:dc:c3:ce:04:52:
         41:85:cf:ab:24:7d:f9:11:10:1e:bb:e9:67:d5:91:9c:8a:7c:
         95:dd:18:3c:de:12:bb:5a:cb:b5:b5:80:5c:ec:68:d4:32:dd:
         c6:3e:ec:75:bb:72:4d:60:68:de:33:24:07:a0:22:7f:0e:89:
         45:60:f6:1b:00:28:f5:62:ab:79:60:62:06:f0:1a:fb:f1:bf:
         57:a3:15:7b:41:85:47:ab:e5:fb:af:a6:1d:97:4b:56:a6:8c:
         9c:31:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:05 2025 by rpki-client