Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313232.roa
File:                     323830363a3362323a3a2f33322d3332203d3e20323730313232.roa (raw, json)
Hash identifier:          3GxgEvTVFGdr+P8b0y9MtM8joVocvYUZEDOdcG81644=
Subject key identifier:   0D:4C:D1:50:02:30:8B:04:B0:6D:24:BD:F8:8D:FB:A3:66:C5:0E:03
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       6BC21495C4FC43406A7B4B07CD615E2A4C79E4D7
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313232.roa
Signing time:             Fri 25 Apr 2025 13:25:01 +0000
ROA not before:           Fri 25 Apr 2025 13:20:01 +0000
ROA not after:            Fri 24 Apr 2026 13:25:01 +0000
asID:                     270122
IP address blocks:        2806:3b2::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c2:14:95:c4:fc:43:40:6a:7b:4b:07:cd:61:5e:2a:4c:79:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 25 13:20:01 2025 GMT
            Not After : Apr 24 13:25:01 2026 GMT
        Subject: CN=0D4CD15002308B04B06D24BDF88DFBA366C50E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:8b:b6:67:b2:8e:a5:31:6a:2b:5c:2d:4f:
                    a2:80:8b:5f:07:bb:98:48:46:e3:55:06:dd:25:70:
                    fa:34:61:49:86:cd:a5:f2:e0:d3:fc:0a:e7:f2:2c:
                    72:cf:3b:c3:da:7d:f1:5e:10:35:2d:63:4a:fe:06:
                    3e:f9:6e:d3:d9:dd:1b:55:b0:6c:7b:5a:c8:b3:10:
                    72:be:3c:66:5a:fc:1e:f0:1c:98:4b:9e:10:9f:67:
                    0a:41:e7:0a:21:4e:92:db:36:c3:8c:57:d4:80:b1:
                    99:67:01:a7:57:5c:53:39:70:4f:9f:83:14:c4:29:
                    29:24:e0:88:80:55:12:6f:5d:06:19:4f:35:4a:d5:
                    ef:5d:ac:41:24:03:2e:69:32:5a:e4:06:1e:c5:56:
                    63:4c:94:0f:74:69:bd:fd:90:3c:30:d6:09:ec:50:
                    82:06:c9:29:52:7d:10:be:9f:d7:1e:ed:fc:4b:fd:
                    a6:89:ba:3d:e7:9f:ae:2f:97:e6:21:89:d2:93:4a:
                    26:cd:31:98:45:a8:8c:25:2c:17:db:11:8c:06:ca:
                    a5:cd:8a:d5:c6:0f:51:9a:d7:7c:a2:07:c7:a7:f2:
                    40:a3:61:1f:6d:90:4c:cc:5f:32:0b:1c:9a:bb:aa:
                    ee:6b:ac:00:86:9e:2b:3d:23:33:b1:8b:6a:03:e8:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:D1:50:02:30:8B:04:B0:6D:24:BD:F8:8D:FB:A3:66:C5:0E:03
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b2::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:53:f1:5b:a6:04:d7:10:58:35:ee:65:5f:c5:e1:38:47:f0:
         17:61:fd:2f:ac:df:0f:f1:5e:fd:a8:5d:d7:4b:6a:02:c4:e1:
         48:2c:5b:49:85:3e:ac:df:a8:48:0e:c1:f8:a6:ae:65:fb:35:
         3b:a4:8d:5d:9b:8e:fd:d2:30:77:0e:b5:47:55:e7:ab:9c:6f:
         1e:96:32:24:7e:45:46:29:c7:06:90:3f:67:ac:b1:c9:7d:b7:
         7d:85:70:26:33:a2:94:7e:39:24:ff:fd:5c:b7:f0:31:e1:c6:
         89:f0:3e:75:ae:2e:f4:18:b0:bc:38:1f:c8:ac:ce:0f:67:be:
         8f:25:64:33:78:63:ab:9b:9b:34:a0:de:3e:f0:96:0f:75:76:
         30:8f:6f:db:78:5f:05:33:be:dd:26:07:7d:3e:4c:d9:36:e7:
         f0:77:62:46:4f:a4:0e:d7:ee:76:87:c2:03:7f:71:4f:5a:35:
         f9:10:48:f5:54:5b:6f:ee:7d:66:34:49:c6:b1:2b:53:6f:7c:
         e7:7f:34:9d:d7:df:11:9b:5e:8a:2b:a0:38:ea:3b:40:25:89:
         c4:68:b6:71:c5:7c:d4:f9:e4:d8:2d:bb:18:63:69:ed:e5:86:
         79:c8:a2:87:88:cb:bc:38:74:61:f0:90:bd:0a:ca:08:bb:74:
         32:0c:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net