Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa
File:                     323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa (raw, json)
Hash identifier:          DzrrS1/OvLktBNdSPN8X94EFQNzdOTqf7KJFwlJqdZQ=
Subject key identifier:   68:CD:C4:EB:B3:95:CC:30:79:37:30:4A:B4:B0:CA:26:53:A9:3E:88
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       390AB1823E9DD6C27F0B9A73F9B157F857D91CDC
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa
Signing time:             Thu 12 Jun 2025 01:21:49 +0000
ROA not before:           Thu 12 Jun 2025 01:16:49 +0000
ROA not after:            Thu 11 Jun 2026 01:21:49 +0000
asID:                     270160
IP address blocks:        2806:3e7:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0a:b1:82:3e:9d:d6:c2:7f:0b:9a:73:f9:b1:57:f8:57:d9:1c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Jun 12 01:16:49 2025 GMT
            Not After : Jun 11 01:21:49 2026 GMT
        Subject: CN=68CDC4EBB395CC307937304AB4B0CA2653A93E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:4c:e9:ad:5b:de:30:77:7b:5c:a9:95:ca:
                    08:5e:48:3f:9d:03:67:e4:89:55:4d:c8:58:d8:a3:
                    4f:96:90:ef:73:b0:b6:57:31:52:a1:40:bb:21:b4:
                    a2:3b:0d:57:33:11:be:e5:a0:10:97:73:4a:d3:79:
                    71:02:0c:3f:ca:8a:f3:db:4a:41:f2:d9:3f:61:ae:
                    a8:91:44:69:cd:66:3c:95:2e:9e:de:a5:46:a7:ea:
                    8f:b8:78:c9:51:4d:0b:f1:61:95:e4:44:58:6d:0b:
                    e0:90:2b:9f:f4:97:fd:e9:94:46:0e:f0:b7:6a:5a:
                    f1:41:16:d8:d9:95:4c:ad:23:45:cd:b4:cc:d7:97:
                    a7:ad:17:af:d1:7a:ad:32:45:ba:e0:b8:61:33:75:
                    71:fb:55:a5:e4:cd:c8:6d:72:e9:5c:e9:58:cc:2b:
                    a8:04:15:dd:cd:95:0b:a4:ce:2f:58:6c:a5:67:25:
                    29:b7:d2:99:b1:d4:a1:0b:57:44:ab:6f:9a:d8:7b:
                    a7:12:1d:1e:75:a8:31:20:69:fe:63:8a:5f:46:6e:
                    73:0c:3e:5f:01:9f:85:55:11:4c:c9:65:04:83:74:
                    59:ae:45:76:03:a1:29:37:d2:c3:2c:6c:03:55:ff:
                    74:d5:82:bb:00:ca:f0:c1:b4:98:45:8d:46:ad:39:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CD:C4:EB:B3:95:CC:30:79:37:30:4A:B4:B0:CA:26:53:A9:3E:88
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b7:74:72:bc:36:e2:79:43:41:8f:e6:12:88:21:95:75:fd:12:
         25:97:bc:fc:8d:a1:4f:7a:2f:ed:0d:b8:1f:49:1d:a3:89:e4:
         93:61:93:1a:57:3a:11:c8:f7:25:2d:44:ed:29:10:87:7f:e3:
         0a:7d:6e:ce:83:a4:58:42:1d:a0:6b:9b:d0:69:25:2b:54:1d:
         fb:87:6d:d5:56:67:20:1e:59:17:fa:61:c1:25:72:84:0a:dd:
         4e:ea:34:55:36:d5:62:47:45:87:89:67:54:88:84:91:fc:11:
         61:ed:30:03:25:dc:5d:30:96:0a:b0:10:58:72:65:b2:4b:11:
         a9:cb:15:80:cb:62:1f:73:68:19:f5:32:8f:c6:65:d4:ae:b8:
         f6:c3:41:4c:f7:5a:78:cf:83:e3:8b:3b:81:80:20:b6:c8:fa:
         6a:98:5b:4c:56:38:b2:08:98:89:c3:00:b1:25:13:c4:63:76:
         d3:6a:73:b3:a3:9f:a4:ae:c8:e8:14:83:76:95:4a:b3:26:fb:
         ab:a4:12:fc:7d:6a:18:a1:7e:c5:4d:5b:50:56:fb:e8:f0:6e:
         d5:d4:e8:eb:d8:af:aa:a8:51:af:30:b0:dd:6c:18:5f:7c:04:
         b3:a7:83:1e:d3:4b:77:1a:03:c2:42:37:41:92:84:01:e8:ac:
         97:75:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:42:19 2025 by rpki-client