Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a323a3a2f34382d3438203d3e20323732333733.roa
File:                     323830363a3431393a323a3a2f34382d3438203d3e20323732333733.roa (raw, json)
Hash identifier:          hl4ncqyAapTtkt6J8knZhHTsxiqFePjVHPNYOvy8Ru4=
Subject key identifier:   89:6A:39:E7:2A:DB:45:F9:0B:9C:95:7F:7D:D0:6E:02:8D:CB:2B:68
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       15E8EBB4289C0CAC9407BFEE4616867E8D97AD0E
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a323a3a2f34382d3438203d3e20323732333733.roa
Signing time:             Sat 15 Mar 2025 19:11:57 +0000
ROA not before:           Sat 15 Mar 2025 19:06:57 +0000
ROA not after:            Sat 14 Mar 2026 19:11:57 +0000
asID:                     272373
IP address blocks:        2806:419:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e8:eb:b4:28:9c:0c:ac:94:07:bf:ee:46:16:86:7e:8d:97:ad:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: Mar 15 19:06:57 2025 GMT
            Not After : Mar 14 19:11:57 2026 GMT
        Subject: CN=896A39E72ADB45F90B9C957F7DD06E028DCB2B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:ab:f6:fe:48:af:5b:4d:a7:1f:88:64:55:
                    ef:89:52:ee:08:eb:d0:44:1f:cf:2d:d3:85:db:7a:
                    78:23:e6:19:56:77:ad:c0:d3:3a:51:cf:7d:89:34:
                    21:39:4f:c3:b8:4f:ff:de:1d:4e:7d:bd:07:2e:ae:
                    2f:71:98:42:c8:c1:52:32:28:56:3c:6d:01:a9:83:
                    c9:bc:78:8b:94:10:93:21:e2:23:27:0d:10:2f:ef:
                    8e:0d:9f:56:89:15:eb:f5:76:21:d9:ae:5d:05:73:
                    5b:8c:63:8f:72:d5:b5:80:7c:6a:f7:df:fa:91:4a:
                    8e:38:3f:88:e1:7b:f4:ea:e1:fa:b1:c1:5c:87:28:
                    11:ad:5a:6e:b7:3c:17:d5:15:39:26:0f:22:a0:c5:
                    ab:cf:c1:de:07:9b:eb:21:27:17:f0:23:fc:a3:db:
                    21:76:b6:25:00:fe:de:42:6f:80:a0:f7:00:02:ab:
                    74:b3:10:60:94:6c:8d:14:e9:19:6b:10:24:f8:b4:
                    ac:a0:4b:24:4d:33:92:8c:9b:ad:45:32:67:8d:11:
                    a0:60:b7:dd:0e:40:63:b0:f2:d3:2f:5c:39:89:0f:
                    2c:9b:98:fe:fe:09:54:84:b0:4d:06:14:e9:76:60:
                    0f:9f:24:4b:3e:cf:99:6d:b5:b1:89:92:d1:f7:61:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:39:E7:2A:DB:45:F9:0B:9C:95:7F:7D:D0:6E:02:8D:CB:2B:68
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a323a3a2f34382d3438203d3e20323732333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:80:fa:b5:ad:62:6a:27:7a:23:b7:c3:d9:fa:f3:ff:a5:0c:
         3c:66:da:0d:ad:ee:3e:68:2b:34:de:93:df:94:21:86:ea:af:
         06:44:e4:19:a3:31:e1:58:e1:c5:5c:94:58:67:f4:99:ee:25:
         4c:c8:fb:81:5c:38:27:95:27:3c:fd:47:ee:9d:5d:09:22:80:
         67:fd:86:04:f4:78:74:e7:1d:78:b7:1e:c6:41:78:67:47:ff:
         63:8e:5f:05:75:b7:2f:dc:f3:57:77:3a:3e:7e:2a:1b:54:71:
         9e:82:20:39:b2:c6:f0:d1:47:0c:5d:18:0a:c2:2c:86:09:d3:
         25:b7:97:1d:0e:19:70:65:a2:13:25:8c:a8:e8:43:bc:d1:2c:
         09:8d:06:a8:83:ed:fe:6e:46:de:f9:c7:51:e3:82:99:66:6f:
         2f:1e:93:93:85:32:45:5a:83:e3:a6:8c:21:c6:e1:f5:24:1e:
         49:e6:60:8f:c0:cd:3a:28:b0:99:d5:03:cc:e5:84:a2:86:59:
         12:cb:f3:be:38:b2:b3:6d:35:36:30:f8:6f:da:a4:78:63:83:
         94:19:bc:34:84:c9:63:63:3a:44:0b:84:e4:b6:59:85:a0:f3:
         29:b7:c2:87:d7:f7:cb:e1:de:a3:10:53:8c:d1:4e:07:54:de:
         13:d0:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:00 2025 by rpki-client