Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a363a3a2f34382d3438203d3e20323732333733.roa
File:                     323830363a3431393a363a3a2f34382d3438203d3e20323732333733.roa (raw, json)
Hash identifier:          8XEAS6ZpeK6TlhwFnbm1IX3vg/As43XYMauB8RcyC7g=
Subject key identifier:   E3:91:A9:EB:79:7C:43:76:CA:E6:9A:97:20:F7:18:02:9F:48:76:83
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       38C0E3629C733044CAA18C3DA2D5D542C6528416
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a363a3a2f34382d3438203d3e20323732333733.roa
Signing time:             Fri 06 Jun 2025 04:00:00 +0000
ROA not before:           Fri 06 Jun 2025 03:55:00 +0000
ROA not after:            Fri 05 Jun 2026 04:00:00 +0000
asID:                     272373
IP address blocks:        2806:419:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c0:e3:62:9c:73:30:44:ca:a1:8c:3d:a2:d5:d5:42:c6:52:84:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: Jun  6 03:55:00 2025 GMT
            Not After : Jun  5 04:00:00 2026 GMT
        Subject: CN=E391A9EB797C4376CAE69A9720F718029F487683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:c4:73:67:2a:af:4f:f5:3a:e2:3e:a7:a9:
                    0a:1b:e6:47:98:69:09:26:04:c6:00:1b:10:19:0a:
                    12:d3:4f:c9:9f:e8:22:4f:cf:b4:38:e6:a9:a7:61:
                    94:86:ad:03:1e:b0:4b:60:b3:9c:a9:7a:0f:1e:30:
                    15:a9:2f:5f:31:54:9c:a1:a6:ab:8b:1d:0b:e9:df:
                    35:da:c6:54:0b:15:14:91:a8:b2:f5:83:2b:4b:62:
                    27:1e:a2:50:b7:ff:5a:f6:13:b7:26:e6:16:37:e2:
                    2a:74:30:34:b2:86:1b:8f:f7:72:83:35:d3:8f:09:
                    5d:6d:cd:db:04:5b:de:6e:95:62:84:89:e1:8f:53:
                    ef:50:26:fc:72:b6:84:2f:98:d4:fc:68:06:db:fa:
                    51:60:82:f0:43:5a:c1:d2:8e:b1:37:dd:f7:fa:2f:
                    31:31:99:92:c3:8a:fe:26:b2:0b:31:48:55:9e:2b:
                    29:53:c8:1c:7a:9e:60:7e:b4:31:af:02:06:49:29:
                    2a:bc:2b:9e:d0:1b:45:d4:fe:38:63:0e:86:f6:7a:
                    70:90:32:a6:94:e7:cf:d7:52:01:08:aa:d7:d2:28:
                    be:24:53:1c:5e:24:fd:39:2a:22:d7:3b:22:6b:8b:
                    ba:4d:cf:4a:14:e8:d1:d5:44:e4:f9:13:f6:ac:30:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:91:A9:EB:79:7C:43:76:CA:E6:9A:97:20:F7:18:02:9F:48:76:83
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a363a3a2f34382d3438203d3e20323732333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:9a:3c:b6:13:77:08:29:00:88:9d:95:fe:72:f2:30:98:42:
         70:a6:dd:83:0d:ff:2a:4b:e7:2f:c6:43:fa:c9:66:e9:04:28:
         ae:f5:9d:6b:3f:2b:e9:26:29:3f:62:f0:ff:57:83:19:e2:8c:
         05:e6:bf:2b:bd:d2:6c:fe:5b:ff:67:76:86:9f:7c:13:e1:b7:
         77:fc:91:a6:5f:99:08:49:d4:02:ff:31:00:d5:c3:73:a2:8c:
         1e:cb:af:a3:c6:10:9f:9a:bc:d8:59:51:ff:23:11:dd:0b:39:
         24:2d:b9:7e:c3:48:62:17:43:06:08:d9:a4:13:e4:ab:67:2e:
         5e:b4:2e:9e:37:58:e0:57:7c:41:88:e7:03:31:d8:4e:62:fd:
         36:58:56:64:b4:f1:12:75:3e:3a:13:41:f0:46:8e:e9:da:dc:
         d4:f9:aa:c1:bc:64:c0:27:a9:ce:f1:32:12:ef:a8:45:79:d3:
         e7:ce:94:65:c9:76:7f:3d:31:87:b3:2b:99:21:cd:37:e2:59:
         cc:d6:28:36:f1:eb:95:e1:f6:93:13:98:8f:03:c0:66:1b:5e:
         a1:2a:c3:65:3b:ae:e3:ef:e5:bf:d0:4a:6f:86:2d:e2:94:9c:
         34:8d:bb:c0:de:e2:98:86:f6:44:47:71:87:3a:56:72:40:63:
         1c:36:08:dc
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUOMDjYpxzMETKoYw9otXVQsZShBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyMEJDMzAxMTgzNzQ2Q0FFODJFMEJDQUUzNTNCNkJD
OUEyNDU2ODAeFw0yNTA2MDYwMzU1MDBaFw0yNjA2MDUwNDAwMDBaMDMxMTAvBgNV
BAMTKEUzOTFBOUVCNzk3QzQzNzZDQUU2OUE5NzIwRjcxODAyOUY0ODc2ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1sRzZyqvT/U64j6nqQob5keY
aQkmBMYAGxAZChLTT8mf6CJPz7Q45qmnYZSGrQMesEtgs5ypeg8eMBWpL18xVJyh
pquLHQvp3zXaxlQLFRSRqLL1gytLYiceolC3/1r2E7cm5hY34ip0MDSyhhuP93KD
NdOPCV1tzdsEW95ulWKEieGPU+9QJvxytoQvmNT8aAbb+lFggvBDWsHSjrE33ff6
LzExmZLDiv4msgsxSFWeKylTyBx6nmB+tDGvAgZJKSq8K57QG0XU/jhjDob2enCQ
MqaU58/XUgEIqtfSKL4kUxxeJP05KiLXOyJri7pNz0oU6NHVROT5E/asMMUNAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU45Gp63l8Q3bK5pqXIPcYAp9IdoMwHwYDVR0j
BBgwFoAUeyC8MBGDdGyuguC8rjU7a8miRWgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDZENjRDQUU3NTdFMjk3QzA5N0Y3Qjc5ODFCRDY2NEEx
OUQyOTA0MjQxRENBQUMxMzU3NEYyNTY0RUJCOTNGLzAvN0IyMEJDMzAxMTgzNzQ2
Q0FFODJFMEJDQUUzNTNCNkJDOUEyNDU2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjIwQkMzMDExODM3NDZDQUU4
MkUwQkNBRTM1M0I2QkM5QTI0NTY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQ2RDY0Q0FFNzU3RTI5N0MwOTdGN0I3OTgxQkQ2NjRBMTlEMjkwNDI0
MURDQUFDMTM1NzRGMjU2NEVCQjkzRi8wLzMyMzgzMDM2M2EzNDMxMzkzYTM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMyMzMzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAYE
GQAGMA0GCSqGSIb3DQEBCwUAA4IBAQDJmjy2E3cIKQCInZX+cvIwmEJwpt2DDf8q
S+cvxkP6yWbpBCiu9Z1rPyvpJik/YvD/V4MZ4owF5r8rvdJs/lv/Z3aGn3wT4bd3
/JGmX5kISdQC/zEA1cNzoowey6+jxhCfmrzYWVH/IxHdCzkkLbl+w0hiF0MGCNmk
E+SrZy5etC6eN1jgV3xBiOcDMdhOYv02WFZktPESdT46E0HwRo7p2tzU+arBvGTA
J6nO8TIS76hFedPnzpRlyXZ/PTGHsyuZIc034lnM1ig28euV4faTE5iPA8BmG16h
KsNlO67j7+W/0Epvhi3ilJw0jbvA3uKYhvZER3GHOlZyQGMcNgjc
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:53:05 2025 by rpki-client