Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/323830363a3363373a3a2f33322d3438203d3e20323730313538.roa
File:                     323830363a3363373a3a2f33322d3438203d3e20323730313538.roa (raw, json)
Hash identifier:          hDgCnl0PYRszKuhumfnh7cWoaSDKY068swldWYKjIW4=
Subject key identifier:   D0:99:2D:2C:20:F5:04:53:FD:94:A7:D0:0E:F7:6B:61:49:4D:10:6D
Certificate issuer:       /CN=D9A7BE89544C8816011A928E90C51CB503A4D5CD
Certificate serial:       61B65BA910EF7E641D4100BE547E4F8A4E067B78
Authority key identifier: D9:A7:BE:89:54:4C:88:16:01:1A:92:8E:90:C5:1C:B5:03:A4:D5:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/323830363a3363373a3a2f33322d3438203d3e20323730313538.roa
Signing time:             Tue 04 Feb 2025 18:50:33 +0000
ROA not before:           Tue 04 Feb 2025 18:45:33 +0000
ROA not after:            Tue 03 Feb 2026 18:50:33 +0000
asID:                     270158
IP address blocks:        2806:3c7::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 09:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b6:5b:a9:10:ef:7e:64:1d:41:00:be:54:7e:4f:8a:4e:06:7b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A7BE89544C8816011A928E90C51CB503A4D5CD
        Validity
            Not Before: Feb  4 18:45:33 2025 GMT
            Not After : Feb  3 18:50:33 2026 GMT
        Subject: CN=D0992D2C20F50453FD94A7D00EF76B61494D106D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:0e:66:87:20:c2:ca:9e:e2:82:45:ef:87:
                    88:18:d0:e7:93:64:8d:4c:36:6a:4b:ba:da:60:7d:
                    71:bd:24:ac:5c:d8:4a:fd:90:17:05:56:92:88:c0:
                    75:c6:f4:a8:12:44:1c:00:a4:d9:8e:80:35:5b:74:
                    0e:c4:9c:f1:e8:0a:79:99:61:ae:e9:fc:af:7a:d9:
                    9c:2d:96:4c:ef:20:c8:44:bc:d2:fa:15:6f:94:fc:
                    84:4c:85:c7:8e:c6:0a:18:59:18:ac:69:f5:27:f5:
                    30:c2:d7:1e:fd:f5:d3:d9:9c:a9:d1:86:d9:b4:12:
                    44:d6:30:51:6c:a8:35:9e:ca:5a:57:db:1c:09:cd:
                    e7:2c:6b:18:8f:6d:f8:ba:6e:19:72:23:3b:16:f5:
                    f1:9a:5a:74:55:ca:36:1f:d9:84:70:1e:35:b1:b0:
                    ec:6c:ff:b9:de:eb:6e:b2:5d:9b:a2:30:4d:4e:c8:
                    35:ed:f1:7f:c5:40:e1:96:5e:05:08:1f:02:bc:7d:
                    ad:c3:67:67:86:1f:de:28:0d:ab:5b:2d:7e:19:b1:
                    37:54:fd:47:4f:46:47:ac:ff:cc:be:86:cc:37:d4:
                    c0:e1:8b:71:45:dc:6f:8c:4e:70:68:cd:93:86:a4:
                    16:6e:f1:ad:32:eb:83:e5:a8:21:e8:b4:c4:d0:5f:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:99:2D:2C:20:F5:04:53:FD:94:A7:D0:0E:F7:6B:61:49:4D:10:6D
            X509v3 Authority Key Identifier:
                keyid:D9:A7:BE:89:54:4C:88:16:01:1A:92:8E:90:C5:1C:B5:03:A4:D5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/323830363a3363373a3a2f33322d3438203d3e20323730313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:77:a0:0d:b1:76:16:5d:4a:cf:8a:4b:32:59:ec:b0:af:af:
         a1:60:4c:06:65:bf:7c:fb:17:2f:5a:be:eb:60:f4:36:0a:f3:
         1c:f9:ae:62:b6:5c:cc:5b:7f:59:a3:bf:f7:5c:ff:82:df:a9:
         75:46:0d:47:42:1c:86:84:20:31:35:55:25:b6:c4:e0:ba:6d:
         3a:21:14:ae:1d:2d:ba:87:f6:af:35:7b:d4:a8:98:19:ca:51:
         c9:21:eb:5c:42:8e:7e:a4:41:20:1c:9a:fd:db:9c:ef:03:7b:
         09:5e:e9:44:ba:de:74:95:2f:6b:8d:a5:65:4f:c9:65:0e:b0:
         3a:fb:69:6e:b7:71:06:46:0d:88:44:64:db:7a:81:4b:84:d1:
         b8:cf:cc:7d:18:04:24:62:27:db:67:1e:ae:d0:35:9f:4d:8e:
         dc:0f:16:84:53:1b:42:f8:ec:f0:21:04:18:22:66:a5:b5:2f:
         c5:de:85:a6:4e:00:52:8b:15:1b:8e:3d:d5:53:a6:e8:1c:78:
         f7:78:33:fe:b8:58:94:fd:6f:bc:38:2f:14:27:c5:94:3f:4a:
         c4:1d:fd:2e:79:de:2f:84:3d:ce:32:ca:fd:35:93:25:f5:42:
         36:a9:bb:de:d4:45:c1:c4:90:d2:dc:60:18:d5:af:97:0e:7e:
         d9:6f:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:44 2025 by rpki-client