Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/323830363a3430383a3a2f33322d3438203d3e20323730313238.roa
File:                     323830363a3430383a3a2f33322d3438203d3e20323730313238.roa (raw, json)
Hash identifier:          ev/GuEw1oq5XclTZ5QMKbvKRlGBnDQiCGbBPgmlLYuA=
Subject key identifier:   0A:6F:46:3E:08:BF:E2:08:46:F8:23:FF:87:15:FB:52:A3:76:AC:C6
Certificate issuer:       /CN=AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8
Certificate serial:       79E83814485FBA81A41831022710A0C8B4D6F0EC
Authority key identifier: AA:FB:3D:DE:DB:02:82:CB:7B:21:DA:68:34:EF:3E:E2:E7:C7:FB:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/323830363a3430383a3a2f33322d3438203d3e20323730313238.roa
Signing time:             Thu 05 Jun 2025 19:30:00 +0000
ROA not before:           Thu 05 Jun 2025 19:25:00 +0000
ROA not after:            Thu 04 Jun 2026 19:30:00 +0000
asID:                     270128
IP address blocks:        2806:408::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e8:38:14:48:5f:ba:81:a4:18:31:02:27:10:a0:c8:b4:d6:f0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8
        Validity
            Not Before: Jun  5 19:25:00 2025 GMT
            Not After : Jun  4 19:30:00 2026 GMT
        Subject: CN=0A6F463E08BFE20846F823FF8715FB52A376ACC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:7c:e4:25:c0:66:03:53:f9:5c:10:7f:04:
                    6c:99:35:43:02:37:7a:46:f6:f2:2e:29:24:ab:06:
                    b0:73:1e:bd:84:7d:a1:82:dc:0b:be:03:7f:23:fa:
                    43:57:cb:6d:6a:c0:94:bb:87:25:29:67:8f:da:0f:
                    9b:63:e9:87:f2:43:2e:50:3d:9d:ae:d4:86:e7:f5:
                    6d:71:02:f6:15:d1:ef:51:db:eb:a2:59:8a:0a:a1:
                    77:f4:3c:b2:e2:ef:92:7c:22:95:d1:f2:3c:94:62:
                    12:ca:5d:6f:9d:a4:49:44:06:ab:4e:00:71:ca:5c:
                    6d:8f:31:7a:6c:70:80:64:55:de:5b:cc:4f:33:b6:
                    d9:d7:cc:f6:80:80:fd:98:6f:4b:2c:7b:d0:24:34:
                    8e:15:1f:91:d6:3a:6c:13:c8:6e:a0:0a:b7:72:44:
                    e6:28:a3:d1:d6:a4:ad:ef:5d:04:fe:1d:ec:ea:9b:
                    f1:c2:12:9d:cf:41:27:8a:ae:1c:8a:1e:f1:44:e3:
                    3e:79:6d:c9:e3:27:c8:ab:1f:58:5b:14:c2:9d:bb:
                    72:c2:59:2e:9f:80:2b:8b:6f:b1:50:79:df:f8:89:
                    b7:d7:47:33:bb:68:21:d5:49:2b:86:13:0e:62:6f:
                    f6:e6:8d:1f:8f:fb:e7:2b:56:03:2f:1b:97:be:91:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6F:46:3E:08:BF:E2:08:46:F8:23:FF:87:15:FB:52:A3:76:AC:C6
            X509v3 Authority Key Identifier:
                keyid:AA:FB:3D:DE:DB:02:82:CB:7B:21:DA:68:34:EF:3E:E2:E7:C7:FB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/323830363a3430383a3a2f33322d3438203d3e20323730313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:408::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:44:44:bc:41:d1:66:91:a3:89:aa:f8:66:62:e2:ff:e3:bd:
         08:9d:c6:3a:9f:35:68:13:7d:ab:b8:a4:fb:fc:b9:50:8c:98:
         09:5c:12:f0:be:1e:b4:24:ba:80:b8:b1:d4:20:91:72:1e:9b:
         f2:14:2f:15:0a:f7:9d:70:84:a9:21:a2:c8:40:ad:10:30:7f:
         17:e8:b9:41:5f:45:e6:fc:f1:c5:2d:30:1c:49:81:f4:05:96:
         d1:bf:ea:e8:32:2d:a8:74:a4:cd:8f:e9:7b:24:a5:55:c6:ec:
         40:5b:1f:71:aa:61:d2:9d:2a:01:6c:28:c1:bf:46:65:10:e5:
         3c:05:ae:20:62:df:f6:7a:00:95:6a:61:f2:2e:07:a7:19:cc:
         61:13:c9:17:de:91:b6:3b:3f:c7:02:9e:a6:78:ab:22:ff:e5:
         ee:71:df:24:fd:61:ff:1c:b3:e5:dc:e7:13:4b:10:40:43:dc:
         f8:b2:37:74:d2:28:78:8c:6d:96:72:13:03:bf:47:81:49:1d:
         32:9c:18:20:ab:13:7b:84:4e:61:5a:1e:77:6b:ca:b2:a2:c7:
         f2:ac:4d:cb:aa:c6:4f:bc:c8:bb:9d:17:14:ff:8d:0c:46:f5:
         b3:51:58:ce:8d:6d:49:a1:fb:57:24:5a:e7:cd:e5:f2:e2:54:
         48:bc:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:02:50 2025 by rpki-client