Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a313030303a3a2f33362d3336203d3e20323730313630.roa
File:                     323830363a3365373a313030303a3a2f33362d3336203d3e20323730313630.roa (raw, json)
Hash identifier:          eiXdhYrWKh26c4JWPI8HjjvlOaz1xjob5PaJYA8Peng=
Subject key identifier:   11:83:19:98:78:DF:4B:2D:A9:2B:6D:EF:CE:B4:F2:E3:1C:62:B4:D9
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       79A3AA1C651BD78C200878F46432379B4421454A
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a313030303a3a2f33362d3336203d3e20323730313630.roa
Signing time:             Thu 12 Jun 2025 01:21:49 +0000
ROA not before:           Thu 12 Jun 2025 01:16:49 +0000
ROA not after:            Thu 11 Jun 2026 01:21:49 +0000
asID:                     270160
IP address blocks:        2806:3e7:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 12:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a3:aa:1c:65:1b:d7:8c:20:08:78:f4:64:32:37:9b:44:21:45:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Jun 12 01:16:49 2025 GMT
            Not After : Jun 11 01:21:49 2026 GMT
        Subject: CN=1183199878DF4B2DA92B6DEFCEB4F2E31C62B4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:13:e9:14:fa:14:d6:db:29:8e:07:e6:7b:
                    ef:de:8f:25:34:0b:75:9d:1a:53:1b:ac:72:37:18:
                    a3:ed:6e:8b:92:d4:8a:9c:16:38:82:4c:65:7e:4c:
                    53:2a:08:d1:1a:7b:63:38:c3:a6:12:13:37:9c:3e:
                    cd:27:97:15:16:57:b8:b3:7e:3f:de:ed:f7:a4:60:
                    5e:dc:ea:fe:dd:db:d6:1b:93:df:c4:74:dd:79:de:
                    7d:25:1d:5f:06:88:b0:ec:2f:fb:91:4d:e7:0b:b4:
                    00:ff:9b:1b:23:f6:5e:06:92:ff:8b:c7:c9:6a:7a:
                    70:f6:62:f4:f5:9e:64:4f:42:fa:c9:4a:76:b9:38:
                    58:42:53:ab:37:38:cd:ee:11:66:d2:07:48:4c:04:
                    9f:c7:9e:49:ec:aa:e8:4a:b7:3f:6a:17:93:2a:b0:
                    cc:c2:a1:64:21:bd:da:0f:c8:90:f6:11:4a:a3:60:
                    7f:b0:3a:62:b8:e2:15:25:0f:45:6f:a6:5a:cc:58:
                    6b:dd:11:6c:8b:2e:b7:51:6b:f1:81:e2:3f:4c:ce:
                    16:ea:19:f3:7b:6d:97:83:f4:4b:6a:f0:f2:2a:89:
                    73:78:85:72:14:18:1a:0d:52:a6:e1:de:c5:1e:df:
                    8d:6e:f1:0f:41:39:f9:a6:37:39:eb:5e:50:c1:68:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:83:19:98:78:DF:4B:2D:A9:2B:6D:EF:CE:B4:F2:E3:1C:62:B4:D9
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a313030303a3a2f33362d3336203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:79:dc:a7:b1:ba:e3:0a:c6:01:a4:5c:5e:24:f8:07:f4:
         f6:39:95:75:77:35:11:8e:1f:66:6a:87:c6:3d:44:d1:9e:1b:
         87:df:b9:0d:f9:01:84:26:59:a3:3e:7f:2f:26:fa:fa:2c:94:
         ec:42:c9:62:e6:d0:83:a3:e2:e7:91:87:a3:62:75:08:3b:a7:
         a3:3c:5c:4d:bb:24:71:bd:04:aa:02:20:f6:14:59:85:74:b7:
         cb:73:c4:fe:09:44:8c:59:0a:76:17:32:be:aa:ff:b0:54:98:
         d4:17:f4:6b:5b:9c:7d:1c:67:bd:b2:46:f7:4a:41:85:fb:34:
         94:33:19:c4:e8:20:51:b8:9f:1a:fe:e7:56:72:3d:81:b8:64:
         22:2a:28:21:5d:3d:1b:8b:bd:9b:b2:30:9f:55:4b:d2:81:a1:
         d0:6f:7e:27:b8:64:86:52:37:20:23:cc:9a:86:5c:0c:30:cb:
         d8:6d:88:74:04:49:74:a5:fa:f1:66:d8:5c:26:60:b4:86:dc:
         94:ea:82:40:67:c0:31:98:ee:a2:e8:6c:42:44:81:c0:48:a7:
         1d:56:f5:19:ef:3f:1a:7a:bf:54:92:04:a1:a1:77:1c:2f:a7:
         2a:c0:95:7e:15:18:f5:54:0f:bf:2a:78:71:e6:eb:cd:0e:38:
         9a:da:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:40:17 2025 by rpki-client