Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3739383a3a2f35332d3533203d3e20323730313131.roa
File:                     323830363a3362323a3739383a3a2f35332d3533203d3e20323730313131.roa (raw, json)
Hash identifier:          Z2GuPk6dkO7+m3ej4g6fBLW1raqb/6+u0OXsf0VADCA=
Subject key identifier:   7A:D2:93:14:41:A9:64:2B:FE:29:48:A0:F3:26:5B:F0:25:91:5E:5E
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       19385788B81C875ABE03D6699AEEAC79BDD8262C
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3739383a3a2f35332d3533203d3e20323730313131.roa
Signing time:             Sun 20 Apr 2025 01:35:01 +0000
ROA not before:           Sun 20 Apr 2025 01:30:01 +0000
ROA not after:            Sun 19 Apr 2026 01:35:01 +0000
asID:                     270111
IP address blocks:        2806:3b2:798::/53 maxlen: 53

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:38:57:88:b8:1c:87:5a:be:03:d6:69:9a:ee:ac:79:bd:d8:26:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 20 01:30:01 2025 GMT
            Not After : Apr 19 01:35:01 2026 GMT
        Subject: CN=7AD2931441A9642BFE2948A0F3265BF025915E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fc:58:87:8c:f0:a3:87:0d:7b:bd:c4:05:65:
                    d4:4a:c2:13:bb:d6:79:0a:67:8d:b2:cc:65:2e:7b:
                    65:48:59:46:d7:9a:51:ea:fc:f2:d8:d3:3e:17:a2:
                    a1:5f:4a:ac:29:e9:d2:89:48:08:98:de:b2:b7:41:
                    51:20:aa:8b:01:6e:6a:91:f2:75:d2:9e:98:21:23:
                    60:54:6d:5e:51:5e:24:25:4c:a5:ff:dc:e6:d4:33:
                    c2:77:26:04:12:8e:64:65:f8:c2:81:58:32:65:94:
                    9a:15:bc:36:5c:3d:5a:9a:48:6b:75:5c:4d:d0:76:
                    fe:d5:22:b7:5f:b4:41:55:d7:13:f3:bb:71:b6:e2:
                    f4:c0:f4:8f:94:33:6e:66:a9:be:d6:91:a6:f8:32:
                    f0:48:d2:ef:44:d8:6b:80:aa:06:70:fc:32:92:3f:
                    a7:db:b7:44:8e:0d:92:5c:9b:bc:01:63:6b:a8:26:
                    ab:8d:a6:62:d8:43:96:f5:28:63:46:3b:68:13:ec:
                    a1:47:83:5a:37:49:1e:f0:9a:e7:15:41:46:8e:bd:
                    de:ba:4b:17:4e:70:89:fe:72:9c:9c:c4:7e:16:86:
                    2b:7c:f9:18:dc:89:d3:76:7a:20:bd:f5:ad:9e:b9:
                    5f:24:5c:77:ce:be:a6:da:57:56:1c:db:3b:dc:6b:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D2:93:14:41:A9:64:2B:FE:29:48:A0:F3:26:5B:F0:25:91:5E:5E
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3739383a3a2f35332d3533203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b2:798::/53

    Signature Algorithm: sha256WithRSAEncryption
         18:1b:2b:f8:f6:96:9e:bf:d2:e0:67:88:45:44:a2:97:39:9b:
         e4:7a:d0:f4:c7:5b:33:ed:12:ec:a6:30:36:2e:59:39:b9:4f:
         54:fb:68:2e:88:17:32:3c:31:ff:e3:cc:cc:1f:cf:7d:7a:bc:
         b6:60:d2:2f:7b:f6:e4:86:b2:1d:d3:f1:18:9a:18:a8:c5:66:
         e6:17:26:4a:82:58:39:89:17:a8:b3:34:53:8c:12:31:79:12:
         18:bc:6f:65:da:78:26:5a:2e:dc:93:74:ca:db:89:49:e2:83:
         af:c6:66:e0:09:51:2d:0d:c3:f3:64:74:9e:10:24:92:3e:64:
         b8:fb:b4:db:36:7f:02:15:aa:d2:09:94:83:aa:11:a5:0e:c7:
         5a:6b:77:50:cd:34:0c:da:6f:a1:77:dc:b0:9d:79:e1:90:d6:
         59:4c:b0:80:1d:b9:8c:d3:db:71:86:ed:ba:ac:80:6f:13:e2:
         8c:31:a7:8f:dd:b8:4a:ce:cc:9c:73:4e:30:ba:ad:7c:09:16:
         a9:be:0b:b0:00:31:58:c6:19:9c:2d:a7:e9:e5:ed:af:99:fb:
         a8:83:04:5a:e7:f5:ac:bb:99:79:46:41:7c:c5:68:95:aa:83:
         4b:df:e9:08:d1:dd:18:92:6b:1f:15:8d:f7:af:29:17:f3:a6:
         8f:60:e7:99
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUGThXiLgch1q+A9Zpmu6seb3YJiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVBRjg2MzBDNzI4MjM1RDZEMkM1MTlGMjA3MTJDRURB
RDlFNUI2QjAeFw0yNTA0MjAwMTMwMDFaFw0yNjA0MTkwMTM1MDFaMDMxMTAvBgNV
BAMTKDdBRDI5MzE0NDFBOTY0MkJGRTI5NDhBMEYzMjY1QkYwMjU5MTVFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp/FiHjPCjhw17vcQFZdRKwhO7
1nkKZ42yzGUue2VIWUbXmlHq/PLY0z4XoqFfSqwp6dKJSAiY3rK3QVEgqosBbmqR
8nXSnpghI2BUbV5RXiQlTKX/3ObUM8J3JgQSjmRl+MKBWDJllJoVvDZcPVqaSGt1
XE3Qdv7VIrdftEFV1xPzu3G24vTA9I+UM25mqb7Wkab4MvBI0u9E2GuAqgZw/DKS
P6fbt0SODZJcm7wBY2uoJquNpmLYQ5b1KGNGO2gT7KFHg1o3SR7wmucVQUaOvd66
SxdOcIn+cpycxH4Whit8+RjcidN2eiC99a2euV8kXHfOvqbaV1Yc2zvca5J7AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUetKTFEGpZCv+KUig8yZb8CWRXl4wHwYDVR0j
BBgwFoAUxa+GMMcoI11tLFGfIHEs7a2eW2swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjQyMDVGRTYyQUVGMjE0MDQ4RTREN0M0RjU5QjI2NDUz
QjhFQjU0OUY0M0Y5OEJGNTNGM0Q0NDJFNkJFNTIyLzAvQzVBRjg2MzBDNzI4MjM1
RDZEMkM1MTlGMjA3MTJDRURBRDlFNUI2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNUFGODYzMEM3MjgyMzVENkQy
QzUxOUYyMDcxMkNFREFEOUU1QjZCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkI0MjA1RkU2MkFFRjIxNDA0OEU0RDdDNEY1OUIyNjQ1M0I4RUI1NDlG
NDNGOThCRjUzRjNENDQyRTZCRTUyMi8wLzMyMzgzMDM2M2EzMzYyMzIzYTM3Mzkz
ODNhM2EyZjM1MzMyZDM1MzMyMDNkM2UyMDMyMzczMDMxMzEzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAjBggrBgEFBQcBBwEB/wQUMBIwEAQCAAIwCgMI
AygGA7IHmAAwDQYJKoZIhvcNAQELBQADggEBABgbK/j2lp6/0uBniEVEopc5m+R6
0PTHWzPtEuymMDYuWTm5T1T7aC6IFzI8Mf/jzMwfz316vLZg0i979uSGsh3T8Ria
GKjFZuYXJkqCWDmJF6izNFOMEjF5Ehi8b2XaeCZaLtyTdMrbiUnig6/GZuAJUS0N
w/NkdJ4QJJI+ZLj7tNs2fwIVqtIJlIOqEaUOx1prd1DNNAzab6F33LCdeeGQ1llM
sIAduYzT23GG7bqsgG8T4owxp4/duErOzJxzTjC6rXwJFqm+C7AAMVjGGZwtp+nl
7a+Z+6iDBFrn9ay7mXlGQXzFaJWqg0vf6QjR3RiSax8VjfevKRfzpo9g55k=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net