Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/323830363a3362343a3a2f33322d3438203d3e20323730313133.roa
File:                     323830363a3362343a3a2f33322d3438203d3e20323730313133.roa (raw, json)
Hash identifier:          olOAQLCtqZorAdkjrWLjFsPmSDaWhstO87ra/+RcYik=
Subject key identifier:   BF:80:31:E7:87:7C:94:60:83:A4:3F:56:B4:D5:F0:F9:C9:09:E4:89
Certificate issuer:       /CN=6CA60F8C86AE97CFC070767C44A39A611589F61A
Certificate serial:       09FAF00D0B2FDFCD261D8F7A91AD4A17DFE2E389
Authority key identifier: 6C:A6:0F:8C:86:AE:97:CF:C0:70:76:7C:44:A3:9A:61:15:89:F6:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/323830363a3362343a3a2f33322d3438203d3e20323730313133.roa
Signing time:             Wed 07 May 2025 03:17:54 +0000
ROA not before:           Wed 07 May 2025 03:12:54 +0000
ROA not after:            Wed 06 May 2026 03:17:54 +0000
asID:                     270113
IP address blocks:        2806:3b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 08:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fa:f0:0d:0b:2f:df:cd:26:1d:8f:7a:91:ad:4a:17:df:e2:e3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA60F8C86AE97CFC070767C44A39A611589F61A
        Validity
            Not Before: May  7 03:12:54 2025 GMT
            Not After : May  6 03:17:54 2026 GMT
        Subject: CN=BF8031E7877C946083A43F56B4D5F0F9C909E489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:06:a0:a4:ec:65:6a:09:e7:e3:05:a5:fb:
                    20:19:fb:96:0d:31:59:2c:7a:7c:e1:d2:40:f0:8e:
                    c0:c2:a9:b4:52:b7:fa:46:d4:58:8d:de:6b:e3:a7:
                    ed:ce:82:2f:ae:78:d9:3e:32:8d:d5:5b:7b:5f:ef:
                    83:7c:ee:78:fc:d4:1f:4b:c1:c4:d5:64:1e:90:11:
                    30:0b:b9:f6:65:d6:f5:2f:01:74:2c:b5:8a:ef:3e:
                    c6:00:df:e1:9a:d5:10:37:77:22:d6:00:f4:80:29:
                    5e:1d:35:e3:83:8b:61:cc:c4:98:ba:5f:6d:90:3d:
                    62:6a:39:8d:b4:44:93:63:fb:22:dd:7b:d2:94:74:
                    40:a5:26:40:b8:b5:c7:6e:82:42:e6:f3:d8:e7:2d:
                    5d:cd:fb:f5:02:81:df:97:d8:35:e1:bf:3d:bf:c5:
                    35:59:4b:e4:7a:50:f1:5f:2c:f3:63:db:75:d3:bf:
                    72:b3:77:63:8c:68:0c:4d:a7:47:02:2d:8d:11:3b:
                    01:68:a7:5b:c9:55:99:96:92:ca:8f:10:84:51:d6:
                    34:10:2e:90:80:c8:be:46:17:93:f0:4d:da:8d:20:
                    5b:7b:2c:4c:df:79:7f:9e:3d:06:55:a1:f6:43:83:
                    2b:25:29:bd:d4:7f:f5:ea:28:ff:ec:c4:26:41:48:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:80:31:E7:87:7C:94:60:83:A4:3F:56:B4:D5:F0:F9:C9:09:E4:89
            X509v3 Authority Key Identifier:
                keyid:6C:A6:0F:8C:86:AE:97:CF:C0:70:76:7C:44:A3:9A:61:15:89:F6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/323830363a3362343a3a2f33322d3438203d3e20323730313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:93:49:d3:66:33:38:4d:66:73:e4:68:27:6d:24:2c:f6:bf:
         c2:52:9f:87:ce:a1:7c:60:50:f8:86:34:8d:33:23:51:1c:0d:
         9a:b7:0a:98:0d:8e:44:fd:c5:6c:51:f6:f3:4e:86:78:68:e6:
         81:15:eb:b4:a4:6e:ac:4a:d3:71:9b:99:e6:81:0c:f1:8c:df:
         83:18:06:db:3f:16:65:6a:96:6d:2d:cd:bd:f5:00:f1:f0:71:
         d7:85:d7:4d:cd:f6:15:4e:18:38:cb:47:c3:2d:a6:52:cd:a7:
         b7:2b:74:3d:19:2b:77:7d:54:4f:67:8a:5e:c8:6d:3f:f3:f1:
         e3:62:3b:c0:d5:f4:40:fa:d9:9c:68:33:2c:61:b5:94:b8:f0:
         7d:cd:53:30:ea:d9:14:57:9f:7a:d9:74:88:67:f0:41:5a:14:
         26:73:24:2b:23:c1:d4:47:e8:7d:ea:70:9a:f6:ca:2a:56:4b:
         5e:53:f7:f0:d8:be:3b:07:8d:aa:53:94:a4:70:c4:4c:76:65:
         93:e4:1a:bf:05:ee:80:8f:74:25:6a:1e:44:72:68:75:45:63:
         26:c1:ad:04:77:c9:32:52:83:34:56:e2:ee:aa:34:94:58:4b:
         ba:8b:ab:15:73:b0:d3:c4:9e:86:29:dd:e7:6a:0a:9b:25:3c:
         8f:92:64:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:35:27 2025 by rpki-client