Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a343a3a2f34382d3438203d3e20323732333733.roa
File:                     323830363a3431393a343a3a2f34382d3438203d3e20323732333733.roa (raw, json)
Hash identifier:          rSaakBr8xdc/Lb5XBghPEAEO/Pf18dfw26OIkhscewM=
Subject key identifier:   95:71:F8:2C:B1:10:84:C9:4B:74:EC:7F:7E:7F:4B:91:B0:DC:A7:25
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       697339B06A8A1DEB871CB9754CDC356BD5A535B1
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a343a3a2f34382d3438203d3e20323732333733.roa
Signing time:             Fri 02 May 2025 05:00:00 +0000
ROA not before:           Fri 02 May 2025 04:55:00 +0000
ROA not after:            Fri 01 May 2026 05:00:00 +0000
asID:                     272373
IP address blocks:        2806:419:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 10:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:73:39:b0:6a:8a:1d:eb:87:1c:b9:75:4c:dc:35:6b:d5:a5:35:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: May  2 04:55:00 2025 GMT
            Not After : May  1 05:00:00 2026 GMT
        Subject: CN=9571F82CB11084C94B74EC7F7E7F4B91B0DCA725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:f6:ee:bd:46:18:07:54:49:37:45:81:51:
                    d3:34:21:fa:8e:5e:cf:45:62:86:88:bf:62:0b:e2:
                    9a:08:27:6f:8f:fe:12:69:24:06:92:6c:65:e5:97:
                    96:7f:14:3d:c0:c9:70:15:6a:6e:74:51:db:cb:ac:
                    e9:48:38:d6:a1:e6:33:c3:82:23:80:be:ba:ce:0d:
                    66:62:37:80:36:8e:1a:6f:9a:d6:f1:5c:f1:dc:be:
                    8a:7a:f2:ce:b0:2f:92:91:1d:15:f2:97:29:30:38:
                    bb:40:16:0a:38:40:60:87:c5:67:46:05:e6:f5:42:
                    3f:a8:f6:6f:7f:c0:ed:ce:61:56:f5:1b:57:e8:07:
                    27:42:82:b8:94:ff:3a:68:c2:f1:43:01:eb:17:56:
                    26:a9:98:e6:02:c0:16:a8:eb:0b:27:52:b2:9c:a0:
                    a9:2f:7f:75:f1:98:4c:b3:53:9b:6c:9a:43:47:82:
                    a6:d4:3f:e3:be:f1:e7:27:b9:79:61:f9:7a:79:7d:
                    d1:76:03:b8:71:a7:07:56:51:bf:e4:f5:8f:ce:1c:
                    39:dc:bb:46:b6:1d:ba:f8:88:b4:de:f0:85:6a:83:
                    ad:0f:f3:53:b4:8d:ea:ce:95:34:16:30:8d:15:aa:
                    3d:6b:cb:74:d8:b2:9b:c6:0f:a3:4d:88:d0:37:88:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:71:F8:2C:B1:10:84:C9:4B:74:EC:7F:7E:7F:4B:91:B0:DC:A7:25
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a343a3a2f34382d3438203d3e20323732333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:0d:27:9b:3d:28:7b:4a:59:1d:03:da:b3:ae:df:c8:dc:b4:
         c2:fb:fb:d4:b8:84:44:36:05:ce:95:cf:ad:6b:3e:79:ad:b3:
         f3:da:4e:51:09:ec:fa:1a:66:f2:19:f3:8c:55:75:bb:cf:89:
         e9:90:db:e3:d7:4a:98:06:5a:9a:ce:8f:5f:56:b2:da:5d:67:
         b8:86:10:01:af:38:94:97:af:4d:79:3e:7f:47:b3:8d:ef:a3:
         bb:92:ed:02:4e:ac:90:37:ad:51:83:8b:cf:3f:7e:3e:1b:be:
         ad:d7:aa:bd:84:bd:63:fc:7a:29:41:83:09:83:57:a0:65:70:
         f6:dc:e7:11:27:2c:ee:de:93:27:06:1e:2a:47:71:23:b5:cb:
         bf:f8:d0:29:35:84:86:37:33:bc:90:e2:69:73:e0:41:4a:68:
         57:54:1d:34:0c:23:2a:03:af:38:d5:10:9a:53:5f:b5:b2:c1:
         6b:1a:d7:bb:17:48:15:52:51:bf:0f:49:de:76:bf:0e:b5:2c:
         f0:bc:70:d3:87:08:9a:c3:c7:ed:ac:9e:d3:6e:d3:50:4e:53:
         00:fd:d1:0a:be:26:d3:b3:00:fd:3b:bb:43:4a:2c:18:79:97:
         ae:b8:d1:58:91:0b:05:fc:dc:09:e7:10:67:a2:4a:0e:74:f7:
         cb:67:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:44:04 2025 by rpki-client