Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/323830363a3434303a3a2f33322d3332203d3e20323733323635.roa
File:                     323830363a3434303a3a2f33322d3332203d3e20323733323635.roa (raw, json)
Hash identifier:          pXyXDJAlNs4gAA2K4uBakIOcgRAk02xDWwkxF7K7PfI=
Subject key identifier:   3D:CD:BD:21:67:59:D1:AE:46:98:31:DF:C7:E4:67:B6:EA:AA:C0:90
Certificate issuer:       /CN=416CF0331286750C025F14783F3BED3EB3227568
Certificate serial:       7CB5A0DDA27327D0F97F8B2454248EBEE01A5CB0
Authority key identifier: 41:6C:F0:33:12:86:75:0C:02:5F:14:78:3F:3B:ED:3E:B3:22:75:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/416CF0331286750C025F14783F3BED3EB3227568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/323830363a3434303a3a2f33322d3332203d3e20323733323635.roa
Signing time:             Mon 07 Apr 2025 04:20:00 +0000
ROA not before:           Mon 07 Apr 2025 04:15:00 +0000
ROA not after:            Mon 06 Apr 2026 04:20:00 +0000
asID:                     273265
IP address blocks:        2806:440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/416CF0331286750C025F14783F3BED3EB3227568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/416CF0331286750C025F14783F3BED3EB3227568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/416CF0331286750C025F14783F3BED3EB3227568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 12:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b5:a0:dd:a2:73:27:d0:f9:7f:8b:24:54:24:8e:be:e0:1a:5c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416CF0331286750C025F14783F3BED3EB3227568
        Validity
            Not Before: Apr  7 04:15:00 2025 GMT
            Not After : Apr  6 04:20:00 2026 GMT
        Subject: CN=3DCDBD216759D1AE469831DFC7E467B6EAAAC090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:df:3f:b1:ed:3e:92:8e:fe:7b:ad:77:1d:21:
                    fd:ad:14:0e:b5:7c:95:a8:a5:9d:5e:ea:6c:0d:92:
                    57:b8:77:55:a7:62:f1:7d:6c:cc:25:3e:9b:ca:f7:
                    9d:cd:c8:14:64:f4:55:4e:0e:d1:cc:b4:56:4e:93:
                    f5:2b:ad:d3:63:fe:98:37:d9:b3:ca:a1:0f:ec:72:
                    a5:ab:70:59:39:ab:e9:4c:0f:c7:e0:73:1e:8f:5d:
                    b4:54:96:39:3a:5f:40:92:f5:88:f9:5f:0a:81:63:
                    54:e0:44:7e:7e:db:c4:30:1a:a1:42:ad:7e:78:ac:
                    65:dd:19:cb:44:ca:11:42:ea:62:08:2f:24:25:e5:
                    0b:7b:91:38:15:b3:a8:86:a6:2c:6e:e3:75:7b:e7:
                    56:d0:bd:35:09:9c:a4:a9:e1:03:bd:f1:bc:a6:22:
                    a8:a3:62:ed:5e:e8:d1:ae:6b:77:2e:e0:9c:30:9a:
                    0a:01:4b:54:c1:3e:51:69:fc:82:57:f3:27:c9:7d:
                    f1:e6:28:da:dd:5b:87:29:74:b9:24:ae:09:7f:3f:
                    0d:fb:b9:b8:de:aa:9b:4a:da:13:6b:76:81:c8:63:
                    7a:f7:70:b6:ca:7b:4e:87:79:ba:c4:98:49:d5:7b:
                    a1:32:63:12:dc:b4:aa:cf:f7:ac:73:46:5d:80:6b:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CD:BD:21:67:59:D1:AE:46:98:31:DF:C7:E4:67:B6:EA:AA:C0:90
            X509v3 Authority Key Identifier:
                keyid:41:6C:F0:33:12:86:75:0C:02:5F:14:78:3F:3B:ED:3E:B3:22:75:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/416CF0331286750C025F14783F3BED3EB3227568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/416CF0331286750C025F14783F3BED3EB3227568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/323830363a3434303a3a2f33322d3332203d3e20323733323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:440::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:54:7c:bb:3b:13:34:15:51:1d:ed:0b:7a:1b:13:7f:36:
         d5:d1:2c:ea:a4:33:c0:7e:44:b1:bd:60:6f:30:67:e0:24:38:
         af:33:04:b7:78:9b:86:43:0c:ee:06:99:4f:3a:69:fb:08:4b:
         30:f0:dd:6d:61:58:1c:e9:da:44:b1:95:bb:9a:0c:d3:aa:69:
         29:a0:2a:8f:d2:f9:e7:0f:69:94:5a:dc:e8:ef:e1:0b:3f:1a:
         95:eb:66:7c:13:ba:69:0f:ec:c9:75:79:ff:ac:94:74:50:01:
         63:26:e4:52:27:9c:eb:b4:14:da:a4:36:21:8d:c9:58:85:e4:
         19:f5:6a:f2:8a:e2:89:1a:8e:25:78:f9:11:de:2e:88:e5:5d:
         bf:a7:90:d6:48:3b:ee:24:87:6f:93:1d:43:f1:79:64:29:8e:
         4f:49:b8:9f:b3:2c:64:9a:e1:1a:89:ff:7d:d7:d1:a7:d4:bb:
         4e:62:c1:41:7e:27:80:83:de:9a:ff:f5:ba:3a:8a:05:21:1b:
         c1:98:28:6f:a4:95:4b:f8:89:e7:65:90:b0:24:4c:03:ea:7d:
         fc:5a:af:6c:00:dc:79:12:b6:97:0c:b4:1f:a0:9f:6f:17:5c:
         5a:f8:dd:72:07:0b:e5:bc:59:6a:f6:a9:7a:37:e3:54:73:b0:
         e8:54:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:25:44 2025 by rpki-client