Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/323830363a3431363a3a2f33322d3438203d3e20323732333638.roa
File:                     323830363a3431363a3a2f33322d3438203d3e20323732333638.roa (raw, json)
Hash identifier:          dpEHMpsSDk5KcTUaUlNO6Bs+10mddxduRzdCcUPq8FE=
Subject key identifier:   37:6C:ED:78:B9:EE:8F:64:6C:B1:14:20:9D:63:06:7C:CA:6B:54:F8
Certificate issuer:       /CN=D47E678D8A41F4FB7348F091558FB10E0E209FB9
Certificate serial:       6C2C8602DAAF076345D89806AA3C4034C3C636E0
Authority key identifier: D4:7E:67:8D:8A:41:F4:FB:73:48:F0:91:55:8F:B1:0E:0E:20:9F:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/323830363a3431363a3a2f33322d3438203d3e20323732333638.roa
Signing time:             Thu 08 May 2025 03:20:00 +0000
ROA not before:           Thu 08 May 2025 03:15:00 +0000
ROA not after:            Thu 07 May 2026 03:20:00 +0000
asID:                     272368
IP address blocks:        2806:416::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2c:86:02:da:af:07:63:45:d8:98:06:aa:3c:40:34:c3:c6:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D47E678D8A41F4FB7348F091558FB10E0E209FB9
        Validity
            Not Before: May  8 03:15:00 2025 GMT
            Not After : May  7 03:20:00 2026 GMT
        Subject: CN=376CED78B9EE8F646CB114209D63067CCA6B54F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:a3:4b:4a:0e:7a:bd:0a:8f:59:76:b5:3a:
                    46:46:fc:d9:f2:ff:06:19:71:08:2d:f1:5e:1a:d0:
                    de:01:79:29:ab:53:40:62:42:c9:4c:90:4c:94:f5:
                    8d:c5:5d:c8:4b:1d:9d:e7:84:d6:e4:96:e9:85:37:
                    8b:bf:98:eb:43:42:8c:d5:4e:ae:45:e0:4e:23:7a:
                    18:6d:34:06:9e:4c:fc:a9:3c:55:82:ac:5c:d4:0c:
                    6a:16:2e:20:9d:ff:31:61:0f:62:f2:30:30:17:44:
                    b1:ae:86:14:82:13:e1:3a:e8:62:72:90:60:b6:75:
                    ff:85:26:89:82:ac:e4:03:b5:20:34:c0:89:69:a0:
                    16:14:ae:ab:6c:c5:31:0e:ce:6e:e3:8d:12:fc:f4:
                    d0:82:e7:d5:a6:59:f7:b0:57:b9:7e:9d:fa:16:f3:
                    29:84:a3:07:fd:95:df:39:1e:b8:38:41:1e:bb:62:
                    1b:9f:1a:10:0d:c2:3f:da:b5:47:73:29:5b:ef:07:
                    b7:66:db:0a:db:7f:5a:ab:a4:1d:d8:fd:5c:19:6e:
                    fc:28:77:4b:a0:a6:89:8d:2d:aa:5f:5a:e6:e4:03:
                    33:5a:b9:b8:df:a3:98:7d:87:c7:07:f7:83:33:a1:
                    1e:bc:df:95:e7:94:73:e8:d8:d9:6a:61:6b:24:d6:
                    a5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6C:ED:78:B9:EE:8F:64:6C:B1:14:20:9D:63:06:7C:CA:6B:54:F8
            X509v3 Authority Key Identifier:
                keyid:D4:7E:67:8D:8A:41:F4:FB:73:48:F0:91:55:8F:B1:0E:0E:20:9F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/323830363a3431363a3a2f33322d3438203d3e20323732333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:416::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:78:18:98:a1:40:31:a4:9a:55:8f:74:d2:7d:cf:c3:e1:6d:
         c7:84:4c:c5:fb:03:33:05:fa:86:8a:ba:bc:9b:c5:1e:af:77:
         d3:d2:2b:a3:78:e8:7e:63:90:93:40:95:04:d6:da:2c:cd:a4:
         3d:68:e8:50:08:00:96:38:03:cc:0b:05:39:f1:4c:30:44:8b:
         4d:f1:05:d4:9a:70:62:a9:78:75:8c:c7:46:2f:ca:48:f5:06:
         2e:4e:4a:c4:c1:aa:a8:73:c2:9b:46:06:86:b5:7c:3c:c6:1e:
         7e:b4:75:4f:e7:30:af:b5:91:30:47:11:1e:23:dc:b7:59:0f:
         4e:5a:70:0c:af:d6:01:8c:45:0a:2d:31:c4:11:1e:a9:27:4e:
         f7:05:64:09:eb:aa:bd:9a:c2:38:9d:8a:6d:e1:de:5c:62:ca:
         ba:4b:0f:34:32:15:80:d2:a8:3a:76:44:d3:aa:24:db:38:fd:
         60:eb:b6:fa:e6:38:43:e5:86:60:28:75:97:60:13:27:71:bd:
         b1:5f:fa:01:8c:72:d9:d7:91:69:4d:d2:4d:71:74:53:6d:8e:
         92:8a:92:7b:ad:fe:7e:81:38:ad:96:80:1f:68:86:a4:76:61:
         49:a3:50:6c:0d:0d:87:ed:19:d4:5c:df:7f:b2:49:a8:bb:74:
         02:7c:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:26:21 2025 by rpki-client