Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/323830363a3433393a3a2f33322d3438203d3e20323733323535.roa
File:                     323830363a3433393a3a2f33322d3438203d3e20323733323535.roa (raw, json)
Hash identifier:          MoYwMVaV558TvZi8W8aPW9jm0ZiVbe/oIiRTYjyb7cI=
Subject key identifier:   3F:51:59:DA:B4:4E:84:BD:3D:06:2B:B6:6D:BD:76:0E:9B:DB:D3:D2
Certificate issuer:       /CN=E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4
Certificate serial:       0D31B8CC15C587CBFE1356125E8B37FB81437F3C
Authority key identifier: E7:65:BD:CF:EE:34:4B:DD:3C:7B:C9:5D:0A:BC:FE:91:DE:B9:63:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/323830363a3433393a3a2f33322d3438203d3e20323733323535.roa
Signing time:             Sat 07 Jun 2025 04:05:00 +0000
ROA not before:           Sat 07 Jun 2025 04:00:00 +0000
ROA not after:            Sat 06 Jun 2026 04:05:00 +0000
asID:                     273255
IP address blocks:        2806:439::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 03:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:31:b8:cc:15:c5:87:cb:fe:13:56:12:5e:8b:37:fb:81:43:7f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4
        Validity
            Not Before: Jun  7 04:00:00 2025 GMT
            Not After : Jun  6 04:05:00 2026 GMT
        Subject: CN=3F5159DAB44E84BD3D062BB66DBD760E9BDBD3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:47:7e:14:b6:19:55:bd:da:ef:13:0d:d8:
                    7b:fe:07:b1:1a:37:80:88:e5:ae:ce:53:94:b4:96:
                    e8:05:19:9c:4b:a2:e4:58:cf:f6:58:1b:48:d2:1d:
                    5a:cc:47:be:06:20:ac:be:18:50:ca:e4:e2:d4:4a:
                    ee:19:10:7d:46:31:56:4b:1c:fa:ba:25:78:6f:38:
                    e1:ac:a8:10:d6:a3:9f:d7:6e:bf:e3:fb:15:64:4b:
                    de:cc:bd:4c:36:4f:c7:fb:81:3c:d5:05:0c:c5:0d:
                    30:33:b9:ca:c5:94:b0:7b:e7:33:1c:32:9e:7f:c3:
                    b1:24:16:21:e5:35:2e:66:cb:5b:cb:e5:a2:3a:78:
                    aa:31:03:e4:d5:0f:86:c8:c9:f0:24:c3:9b:ae:70:
                    df:76:65:bc:6e:1f:5d:34:15:49:c2:65:2a:31:b4:
                    34:f1:c8:e8:c9:35:bb:f2:cd:d7:05:72:7c:d8:56:
                    f6:6e:86:a3:e5:60:e7:13:34:9d:74:24:e0:a1:df:
                    29:e2:b2:cf:62:89:fa:16:16:b5:26:63:75:ce:27:
                    d9:4c:4f:9e:4f:a5:1d:a1:02:66:5d:99:dc:4f:a4:
                    8e:30:88:55:f6:e4:94:a8:d6:d7:c2:9e:c6:6e:11:
                    49:7e:f2:e2:f0:ae:ee:2b:4a:84:55:7f:67:c4:20:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:51:59:DA:B4:4E:84:BD:3D:06:2B:B6:6D:BD:76:0E:9B:DB:D3:D2
            X509v3 Authority Key Identifier:
                keyid:E7:65:BD:CF:EE:34:4B:DD:3C:7B:C9:5D:0A:BC:FE:91:DE:B9:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/323830363a3433393a3a2f33322d3438203d3e20323733323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:439::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:ca:86:5b:f9:f3:b7:d4:81:a3:9f:bf:68:33:23:88:16:
         d7:21:fe:6a:8b:24:c7:5e:26:6b:23:72:b8:5f:30:ef:08:53:
         8f:0c:fb:31:54:f4:d9:cc:ef:00:41:b2:ed:5f:ec:f1:e8:07:
         4b:21:6e:db:ae:23:4b:5e:bf:e0:1e:0d:2c:bf:75:ea:33:2b:
         39:20:69:31:2d:3c:4c:70:cb:84:50:a9:87:14:1a:b5:35:69:
         ef:74:69:86:e7:ac:04:ac:95:c8:8c:08:69:78:42:bf:ca:d4:
         7f:2f:0d:ac:52:b5:6f:a6:7b:99:aa:87:99:38:65:d2:b9:13:
         fd:3c:8d:b9:c8:ff:27:f7:ff:b2:b2:54:3a:62:3a:47:45:cf:
         cd:b4:aa:9e:53:02:5e:ce:5e:ec:72:54:f0:d5:29:19:86:9f:
         08:b7:18:6f:0a:0d:3e:9a:b3:49:f2:f0:ec:05:a2:e4:1c:f0:
         d7:12:e5:66:f7:e0:ab:0a:c6:ad:4b:14:9c:d0:af:4b:50:58:
         55:d5:5d:e0:83:3f:67:2a:63:9c:03:37:49:36:2a:06:b2:e8:
         e4:74:70:74:23:01:9d:64:4e:ca:1c:c9:2d:21:75:19:97:5c:
         95:9f:0e:eb:e8:00:0b:1b:88:12:2a:cc:0f:8f:4e:74:17:e2:
         73:ad:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:34:35 2025 by rpki-client