Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/323830363a3331363a3a2f33322d3332203d3e20323635353636.roa
File:                     323830363a3331363a3a2f33322d3332203d3e20323635353636.roa (raw, json)
Hash identifier:          zjBpdxMKgSsmOp8BYmlkiXXYI7QHlQkvZJmCAJTYm38=
Subject key identifier:   6C:17:B7:AE:61:A6:21:AC:D1:E0:E0:F6:C6:DE:31:EF:7F:23:A8:7E
Certificate issuer:       /CN=DDC74D2AC502784A739697FD18F617C20B9593D4
Certificate serial:       3CF117F91E9A7DD9F2ADB89DFE790120D8E34A58
Authority key identifier: DD:C7:4D:2A:C5:02:78:4A:73:96:97:FD:18:F6:17:C2:0B:95:93:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDC74D2AC502784A739697FD18F617C20B9593D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/323830363a3331363a3a2f33322d3332203d3e20323635353636.roa
Signing time:             Tue 04 Feb 2025 18:41:16 +0000
ROA not before:           Tue 04 Feb 2025 18:36:16 +0000
ROA not after:            Tue 03 Feb 2026 18:41:16 +0000
asID:                     265566
IP address blocks:        2806:316::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDC74D2AC502784A739697FD18F617C20B9593D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f1:17:f9:1e:9a:7d:d9:f2:ad:b8:9d:fe:79:01:20:d8:e3:4a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDC74D2AC502784A739697FD18F617C20B9593D4
        Validity
            Not Before: Feb  4 18:36:16 2025 GMT
            Not After : Feb  3 18:41:16 2026 GMT
        Subject: CN=6C17B7AE61A621ACD1E0E0F6C6DE31EF7F23A87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:e4:f1:32:6b:99:0c:77:7d:c6:ed:88:96:
                    86:91:cb:60:da:06:c3:a1:f9:1b:73:f0:16:78:5c:
                    82:b0:bb:5b:a3:de:f3:ca:d6:97:b4:29:99:f2:54:
                    93:d6:95:75:50:5e:71:c9:7b:fa:36:c7:4b:84:bb:
                    5e:86:f5:09:90:37:8b:52:f5:af:be:de:84:81:fe:
                    eb:45:4d:cf:fb:0b:a9:eb:c8:3d:dc:af:a5:5f:68:
                    92:06:d4:30:7d:3b:94:f0:94:c6:8b:2e:ed:0c:be:
                    cf:d2:ff:a1:57:7a:c7:cb:f6:1b:e2:83:d7:ae:71:
                    0e:33:d6:0f:26:94:b1:37:f7:4d:36:32:ae:15:47:
                    fd:76:81:7f:d4:0b:5d:10:14:a6:f4:97:c6:48:bd:
                    1d:6f:57:49:a2:27:bd:30:73:57:8d:c8:e4:d9:f8:
                    94:7e:c1:44:f1:fa:02:e5:bb:87:19:dd:f9:cc:88:
                    0e:7d:ee:c3:4a:aa:3f:dd:2e:5d:21:2e:85:d0:de:
                    b8:66:41:05:ad:18:4d:86:3f:9f:d4:2c:e7:42:58:
                    98:4c:31:66:c8:02:35:55:de:3d:73:80:af:ac:5d:
                    30:6e:7e:25:36:70:bd:c7:72:7a:b0:40:0b:ca:50:
                    0e:6a:c8:be:31:17:47:f0:6c:d6:c5:71:16:16:af:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:17:B7:AE:61:A6:21:AC:D1:E0:E0:F6:C6:DE:31:EF:7F:23:A8:7E
            X509v3 Authority Key Identifier:
                keyid:DD:C7:4D:2A:C5:02:78:4A:73:96:97:FD:18:F6:17:C2:0B:95:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDC74D2AC502784A739697FD18F617C20B9593D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/323830363a3331363a3a2f33322d3332203d3e20323635353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:316::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:e7:d5:2a:55:8f:cf:72:72:9c:f7:a4:7e:40:94:8e:84:1b:
         b8:e0:2a:76:46:3b:06:60:d2:c5:c2:b9:cd:bb:9e:0b:2b:d6:
         5f:5a:6d:3a:6b:f6:03:db:c3:1c:26:1f:e2:e7:ce:8c:46:50:
         c0:f9:6b:43:c6:5b:45:c1:ef:01:72:49:1b:9f:f1:8a:7f:d2:
         3f:7e:16:cd:b0:04:ea:cb:44:39:1c:d8:32:0c:82:2c:a7:2f:
         56:29:cb:3b:db:8e:fa:fc:cb:2c:23:24:4f:fd:30:16:61:63:
         8d:f9:b1:7d:be:d8:21:cf:4e:a7:3b:6d:b7:58:db:62:c2:e2:
         17:56:56:74:58:a1:d0:35:55:e3:79:dc:12:01:96:ad:f6:81:
         0b:12:15:41:ab:e4:d0:d1:32:ca:41:8e:77:98:ed:57:77:8b:
         90:e0:48:2c:9b:fa:8e:c8:75:fa:61:84:6e:c6:dc:74:4b:ee:
         82:da:a0:0d:b6:4e:97:a8:3c:86:5f:4a:7a:4d:36:40:ce:18:
         3d:2a:a4:7f:c7:a9:bd:af:8f:2c:fa:48:bc:e8:74:9e:08:1e:
         4a:ef:c4:7a:f5:fe:98:9a:18:f5:71:1c:56:01:76:92:3e:78:
         04:43:0b:dd:4b:95:72:6d:dc:60:8d:41:3c:2e:94:72:81:c6:
         04:07:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:52 2025 by rpki-client