Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/323830363a3331393a343a3a2f34382d3438203d3e20323635353837.roa
File:                     323830363a3331393a343a3a2f34382d3438203d3e20323635353837.roa (raw, json)
Hash identifier:          CaLR9obkgWUYLMQY52GOTBMXrNDEc0yi67kaNzJF46A=
Subject key identifier:   28:E3:2B:84:18:84:C3:66:CA:75:94:B1:EB:1A:EE:63:FE:D6:38:AB
Certificate issuer:       /CN=9A758BF09145BEC830A7EE000666C15B37354654
Certificate serial:       387C16F8221B1A847248FE2970EAD30D88401DB1
Authority key identifier: 9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/323830363a3331393a343a3a2f34382d3438203d3e20323635353837.roa
Signing time:             Thu 19 Jun 2025 05:20:00 +0000
ROA not before:           Thu 19 Jun 2025 05:15:00 +0000
ROA not after:            Thu 18 Jun 2026 05:20:00 +0000
asID:                     265587
IP address blocks:        2806:319:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 15:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7c:16:f8:22:1b:1a:84:72:48:fe:29:70:ea:d3:0d:88:40:1d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A758BF09145BEC830A7EE000666C15B37354654
        Validity
            Not Before: Jun 19 05:15:00 2025 GMT
            Not After : Jun 18 05:20:00 2026 GMT
        Subject: CN=28E32B841884C366CA7594B1EB1AEE63FED638AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:02:fe:97:cd:d5:d0:ec:64:65:3c:e5:0b:
                    f5:d7:e2:45:8f:54:f0:a2:82:89:07:72:7f:68:dd:
                    8d:43:0b:7a:c2:f2:87:32:0d:5c:b0:9f:95:23:76:
                    0f:e2:21:7a:c9:2c:b3:f6:42:ee:97:8e:9e:a9:b2:
                    88:8f:9f:70:59:17:ab:0b:cb:4b:7e:a4:a1:bc:ec:
                    cc:fe:23:f1:52:36:fe:54:ee:37:c6:b1:2b:47:b0:
                    02:74:a9:86:50:66:57:f5:94:a0:a9:f0:59:2b:65:
                    dc:0c:8b:59:00:77:2a:4d:29:fe:ee:d8:2b:d4:f4:
                    f0:3a:a8:9b:99:29:af:ca:0e:d3:41:d4:70:f3:1f:
                    2b:5b:c3:3f:5c:7b:4a:3b:41:fb:4f:30:f3:2b:a4:
                    9a:1f:79:15:ae:62:28:7c:80:8e:9d:bb:92:0f:f6:
                    2f:a7:ec:b2:a0:bf:e9:f0:bc:84:7f:e6:38:ea:32:
                    2f:d2:52:cc:3a:d6:db:3f:d5:5d:24:e3:0b:05:b5:
                    25:44:a6:57:2f:06:82:3e:b0:3b:c0:96:ac:4e:c7:
                    54:de:22:0a:9b:1b:68:a3:8d:0b:79:3b:c5:98:57:
                    b3:4a:26:2c:09:eb:99:e5:d2:d4:49:07:dc:7a:39:
                    a1:bf:08:2b:99:59:4a:97:ac:77:74:71:9d:55:e1:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E3:2B:84:18:84:C3:66:CA:75:94:B1:EB:1A:EE:63:FE:D6:38:AB
            X509v3 Authority Key Identifier:
                keyid:9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/323830363a3331393a343a3a2f34382d3438203d3e20323635353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:319:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:a0:9d:da:30:1e:e8:fc:64:0a:eb:74:17:cd:10:3f:a9:50:
         fa:e2:21:1a:4e:23:05:18:af:f5:e8:cb:1c:22:f0:af:c6:3f:
         9b:7d:83:7a:5f:0c:88:00:41:d2:d0:e3:3f:c0:f6:40:d1:c0:
         67:f5:c9:f1:8b:ca:36:bb:a1:31:ab:08:6e:28:fe:ee:1b:e8:
         04:cf:aa:54:51:bd:66:b8:71:60:52:43:2d:7c:5a:44:1e:1e:
         ee:5d:a5:19:70:da:95:23:ac:a7:c2:d1:24:a4:b0:c9:ab:50:
         81:65:bf:76:e6:07:d4:1e:d1:43:e6:4d:0f:de:a0:e6:03:36:
         11:6d:ed:b5:3f:48:4b:95:06:21:a2:93:50:04:77:0e:68:f7:
         07:b1:d1:a6:ef:4d:d6:21:e4:41:d7:53:42:17:3f:7b:4b:8d:
         a1:fd:91:94:bb:2c:0d:3d:5a:2f:db:de:1b:b8:a1:88:25:cf:
         71:fa:58:d8:10:02:ff:54:ce:72:de:e1:8c:a3:6a:42:b2:11:
         54:e6:e9:8a:70:fa:a9:46:bb:8a:be:5a:c2:f2:08:28:5f:94:
         3e:4d:d1:92:f1:9f:6b:c5:b9:1f:cc:97:b1:51:a6:a0:1b:f3:
         74:5d:8e:86:8c:40:68:b2:a4:3a:bc:39:42:4b:f4:d9:a2:cf:
         77:e9:c3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 09:14:20 2025 by rpki-client