Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa
File:                     323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa (raw, json)
Hash identifier:          2vJzBJyfAOwnLH7Iky3zdLvhYj3Rk0HuS8YU/cQY1SA=
Subject key identifier:   A1:13:89:0E:83:3F:EE:E0:DA:69:2A:D9:A1:6E:90:C0:97:25:62:01
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       0CE97DE5422809E3B4AEC6F6C5B4D1116F72CD58
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa
Signing time:             Thu 12 Jun 2025 02:21:51 +0000
ROA not before:           Thu 12 Jun 2025 02:16:51 +0000
ROA not after:            Thu 11 Jun 2026 02:21:51 +0000
asID:                     270160
IP address blocks:        2806:3e7:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e9:7d:e5:42:28:09:e3:b4:ae:c6:f6:c5:b4:d1:11:6f:72:cd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Jun 12 02:16:51 2025 GMT
            Not After : Jun 11 02:21:51 2026 GMT
        Subject: CN=A113890E833FEEE0DA692AD9A16E90C097256201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:f4:72:e7:a5:da:4d:e3:76:8c:ee:26:80:
                    b8:b4:ca:1f:ae:ce:74:4a:8a:22:2b:a0:12:a9:9e:
                    f0:a2:25:1c:0c:88:a7:6c:65:38:ef:95:57:1c:7f:
                    f1:10:c2:19:f1:9f:6e:fc:d1:98:bc:6a:cf:76:e3:
                    fc:6b:18:be:7a:33:94:25:85:e5:a1:84:3e:73:9a:
                    20:75:7c:ff:ac:06:e6:82:27:ed:1c:31:82:95:d0:
                    b5:f1:42:6c:7d:19:42:de:fc:3a:2a:e0:1a:b3:c6:
                    67:b7:9b:e2:46:f6:28:9c:a7:78:7e:fe:86:ac:49:
                    ec:a4:18:56:0e:d6:db:c3:9f:55:75:a1:29:ba:13:
                    e7:cb:fd:fe:fc:c6:0c:02:f2:6a:0f:ca:f1:41:1e:
                    02:fd:66:69:b1:68:88:91:65:72:5f:eb:89:eb:71:
                    5c:66:a3:04:8f:da:cd:c1:66:b9:03:b4:62:c1:40:
                    11:76:5c:7f:b5:cf:ee:38:60:a0:68:f9:12:a8:dd:
                    c1:19:e4:41:21:10:bf:8a:00:d7:f7:ef:94:69:b6:
                    b5:43:9c:0f:a4:5d:c4:f3:bc:3a:ce:6f:18:f6:55:
                    95:a7:9b:f5:e4:74:7f:f5:70:d9:14:c8:d3:76:3c:
                    1d:e4:0f:65:f1:40:04:d8:5a:96:22:39:7d:08:7c:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:13:89:0E:83:3F:EE:E0:DA:69:2A:D9:A1:6E:90:C0:97:25:62:01
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c0:63:25:1d:95:09:cc:12:ba:87:89:c8:e2:3f:4d:4a:06:bd:
         f6:a6:45:a3:3a:a9:09:9a:de:6c:ba:25:de:4e:96:1e:ba:80:
         1e:e6:24:cd:91:cf:ac:b8:c7:f6:ed:4e:ea:e4:b1:96:09:82:
         c6:cb:fb:f9:d4:a0:65:ef:b0:eb:0f:af:c8:1d:b5:17:cb:29:
         a1:52:c4:38:8b:4c:5a:fc:84:0f:81:d7:c7:07:24:73:ab:e9:
         97:8f:8a:6f:8b:a1:c1:29:0b:1e:f5:fc:58:22:f2:29:dc:26:
         89:a3:7d:ec:e9:4b:6d:e3:40:a1:df:e0:35:0d:8e:c5:23:e7:
         e1:78:4e:8f:0f:19:bd:cd:f1:79:c5:39:de:b2:81:86:7c:b1:
         ea:88:dc:37:59:54:49:7e:a4:02:68:7f:b9:a1:0b:a2:3d:ba:
         3f:5d:3f:25:44:f5:f4:2b:f3:e7:25:15:07:fe:57:98:4f:cc:
         9d:72:51:54:82:a2:b0:29:32:a1:fd:ae:b0:ad:31:d0:12:98:
         3b:42:fd:38:54:ce:33:ce:72:23:3a:a5:b4:02:73:56:57:59:
         fd:fb:98:18:49:f1:ab:cf:1a:74:54:20:1a:81:92:11:e9:39:
         b8:38:dc:5e:b4:70:24:7f:2f:a9:4a:b2:8f:b0:89:b9:17:9f:
         09:c6:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:37:36 2025 by rpki-client