Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa
File:                     323830363a3230633a3a2f33322d3332203d3e20323635353137.roa (raw, json)
Hash identifier:          s9+7XWrorOr7KpXLfdnkeKA3/NG6PURJW18u6rG19vo=
Subject key identifier:   C5:52:BF:B6:5E:4F:44:FE:96:4A:BB:A1:F5:8A:67:9C:21:60:2A:6C
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       6BA7F26209D60513BC2C5215B3DC7867E61EC106
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa
Signing time:             Mon 07 Apr 2025 17:14:10 +0000
ROA not before:           Mon 07 Apr 2025 17:09:10 +0000
ROA not after:            Mon 06 Apr 2026 17:14:10 +0000
asID:                     265517
IP address blocks:        2806:20c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a7:f2:62:09:d6:05:13:bc:2c:52:15:b3:dc:78:67:e6:1e:c1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: Apr  7 17:09:10 2025 GMT
            Not After : Apr  6 17:14:10 2026 GMT
        Subject: CN=C552BFB65E4F44FE964ABBA1F58A679C21602A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:a3:cc:f2:56:df:da:72:d5:2f:9d:1f:ce:
                    f0:8e:ac:cc:61:d4:48:a0:d7:61:27:58:02:a7:f2:
                    bb:14:57:c0:1f:46:ff:ec:c0:01:20:bc:73:e5:30:
                    ba:ba:16:04:e8:fe:0b:5c:1b:a5:3e:2d:3f:1d:a6:
                    7f:2c:fc:72:5d:51:e8:c4:b5:53:3b:78:6d:b6:bf:
                    3b:d2:3a:1f:fd:9b:b3:31:20:51:7b:d8:40:ae:3f:
                    fd:13:95:2f:81:6e:7f:61:88:e1:b2:1c:04:f3:f6:
                    ef:df:1e:10:8b:63:53:08:7f:70:c3:63:d2:71:3c:
                    46:68:59:de:43:eb:17:95:e5:b3:f7:cc:96:0a:e5:
                    c5:90:d2:74:7f:c3:0c:ec:2c:a9:b2:d4:54:ac:80:
                    b1:1a:b5:6e:76:8c:a9:73:9b:cd:82:10:a8:44:03:
                    d2:ca:52:c5:1a:a7:51:28:cc:48:fb:12:3f:a7:f8:
                    c9:df:a2:e5:17:d1:37:3f:e8:d2:74:c7:8d:f1:1d:
                    e3:4a:d2:4e:85:4b:fd:ec:c0:51:11:91:29:79:d7:
                    ea:ff:fd:be:bf:6a:90:9c:f0:3c:70:12:59:62:d3:
                    f7:98:5a:37:0a:91:18:4b:90:c2:5a:2d:e7:9c:d0:
                    e3:f5:d5:0a:91:9c:ec:51:12:88:b6:b2:4e:04:19:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:BF:B6:5E:4F:44:FE:96:4A:BB:A1:F5:8A:67:9C:21:60:2A:6C
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:20c::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:43:3c:2c:46:3f:15:3a:17:21:fb:09:66:7c:65:3e:63:90:
         ff:0f:86:a2:b2:d0:6f:da:40:ec:85:6d:6f:57:5c:58:04:30:
         62:67:09:93:f2:5e:cb:fc:77:73:30:b9:61:e7:66:89:be:99:
         d2:8f:19:c6:b5:3b:24:28:d6:ea:d3:b0:d0:97:69:40:7d:19:
         00:9f:ca:c9:b2:7f:c4:f7:ef:f1:83:35:b8:65:56:92:54:0d:
         f9:26:b6:a1:c4:0f:2b:22:f7:dc:ff:54:aa:ea:69:45:bd:72:
         ac:78:09:29:3a:fb:e1:af:ef:96:0d:c5:96:f6:d7:0d:cb:b1:
         fa:31:f7:94:b7:f8:f2:13:d5:7b:46:e5:11:fc:2e:9f:02:f7:
         00:82:6e:a1:35:9d:65:a8:a7:14:68:79:7b:05:81:54:ac:27:
         3c:24:c1:24:1c:39:61:db:dc:ee:7f:ba:e6:92:7c:8c:eb:d8:
         b9:91:df:b8:cd:02:ae:0e:bb:1f:63:6e:1b:7f:55:b4:b3:c5:
         92:74:86:8f:30:a5:18:a3:96:f9:a1:06:2c:52:18:47:02:63:
         b6:b1:2c:63:a0:04:74:b1:e8:1a:15:97:f4:eb:23:f8:f9:0c:
         75:9a:87:20:c2:c3:b6:9d:72:be:85:1b:8e:08:3a:44:6e:bf:
         9a:3d:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:42:59 2025 by rpki-client on console.sobornost.net