Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa
File:                     323830363a3330303a3a2f33322d3438203d3e203238333837.roa (raw, json)
Hash identifier:          vjzzGYnYkO1fKyQRjTWY6vKB69TAxO60v83MW//QYSI=
Subject key identifier:   6D:A9:D1:B5:97:41:89:6D:4D:D4:7F:78:AC:E9:BE:EE:2E:C0:75:8D
Certificate issuer:       /CN=F120FD76709C67C88845B1BB9132720E6262A870
Certificate serial:       4D5F3C942479D01E398BCFEDAC07212B5B7D4DA6
Authority key identifier: F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa
Signing time:             Mon 07 Apr 2025 15:14:07 +0000
ROA not before:           Mon 07 Apr 2025 15:09:07 +0000
ROA not after:            Mon 06 Apr 2026 15:14:07 +0000
asID:                     28387
IP address blocks:        2806:300::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5f:3c:94:24:79:d0:1e:39:8b:cf:ed:ac:07:21:2b:5b:7d:4d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F120FD76709C67C88845B1BB9132720E6262A870
        Validity
            Not Before: Apr  7 15:09:07 2025 GMT
            Not After : Apr  6 15:14:07 2026 GMT
        Subject: CN=6DA9D1B59741896D4DD47F78ACE9BEEE2EC0758D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:33:b0:a6:b1:26:76:8e:fa:b1:93:c2:88:
                    90:f2:b6:d9:b0:f1:e2:da:4c:c2:d4:5b:4a:69:dc:
                    37:bd:fe:09:0e:9e:50:a8:10:b9:8b:37:7d:57:d1:
                    28:47:9d:e3:af:0a:27:b3:85:01:aa:22:a8:c2:91:
                    a8:e8:f7:0f:c1:ec:60:76:1f:ea:d0:4d:3f:08:96:
                    4e:c0:ed:47:0d:dc:81:52:8e:ea:09:02:c3:8c:e0:
                    5b:f9:02:76:c2:23:80:d0:d7:ea:d5:27:d7:95:7c:
                    8a:3e:46:13:03:07:24:ee:40:5f:8b:2f:c7:32:4e:
                    9f:f3:d1:5a:a1:e4:31:6a:6c:df:e1:d5:87:1d:57:
                    38:02:0e:48:7e:32:d2:da:15:a4:ec:a4:87:10:f5:
                    9a:43:4d:65:ce:87:5b:f7:4d:eb:a9:49:fb:56:df:
                    c5:e5:07:47:34:ef:28:25:33:6c:fb:d0:b1:0f:c8:
                    f2:ff:60:68:7f:f9:fa:b4:bd:28:ad:b4:b2:ac:98:
                    a4:c0:03:de:dd:d4:09:b9:25:47:fa:47:b9:db:d7:
                    e5:58:ca:d8:e8:de:5c:61:6f:e1:49:e0:bf:8f:dc:
                    10:86:6d:e5:06:7d:5c:52:09:36:35:d2:41:b4:01:
                    7b:4a:ce:57:01:98:12:89:51:66:0e:6e:63:b3:47:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:D1:B5:97:41:89:6D:4D:D4:7F:78:AC:E9:BE:EE:2E:C0:75:8D
            X509v3 Authority Key Identifier:
                keyid:F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:f1:8b:ac:aa:d2:15:2b:ee:21:92:bb:35:7c:12:63:4b:61:
         e5:6b:b7:95:0b:82:a2:60:be:39:52:a5:42:df:b3:64:de:9c:
         39:50:f1:76:4c:25:e1:47:80:cb:39:0c:a9:57:29:73:11:a9:
         53:ec:d1:52:76:10:08:aa:2b:da:09:04:8a:bf:00:d0:e4:09:
         93:d7:ff:5b:37:46:12:04:24:49:64:74:04:6c:48:6b:6c:41:
         f9:59:43:2c:eb:6f:1e:33:dd:4d:ef:ab:1c:03:00:08:ce:9b:
         4c:5b:10:68:4d:bb:2a:2f:c4:36:38:c1:22:f1:7e:5a:85:23:
         4f:5f:44:0a:c8:31:1d:0f:9e:69:6e:92:0a:fb:c9:d1:be:62:
         41:d0:c0:d8:a8:64:86:91:28:91:9b:26:90:65:3c:a6:44:7c:
         4e:6a:b6:2e:3d:74:a8:79:84:a1:f1:16:26:2e:67:94:dd:e1:
         99:ea:e4:de:11:10:36:25:1b:a1:b3:e4:37:23:9f:08:9b:e4:
         6a:c1:ad:49:f5:05:b5:1c:30:ab:f8:fc:4a:a3:8a:fa:6a:04:
         dd:21:5d:b6:99:10:2b:d6:b4:e6:0e:05:0f:1a:bf:9b:39:4d:
         5e:dc:16:ca:dc:1b:02:da:3a:58:79:70:66:8a:a8:57:64:8b:
         9d:c3:f2:57
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUTV88lCR50B45i8/trAchK1t9TaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEyMEZENzY3MDlDNjdDODg4NDVCMUJCOTEzMjcyMEU2
MjYyQTg3MDAeFw0yNTA0MDcxNTA5MDdaFw0yNjA0MDYxNTE0MDdaMDMxMTAvBgNV
BAMTKDZEQTlEMUI1OTc0MTg5NkQ0REQ0N0Y3OEFDRTlCRUVFMkVDMDc1OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZDOwprEmdo76sZPCiJDyttmw
8eLaTMLUW0pp3De9/gkOnlCoELmLN31X0ShHneOvCiezhQGqIqjCkajo9w/B7GB2
H+rQTT8Ilk7A7UcN3IFSjuoJAsOM4Fv5AnbCI4DQ1+rVJ9eVfIo+RhMDByTuQF+L
L8cyTp/z0Vqh5DFqbN/h1YcdVzgCDkh+MtLaFaTspIcQ9ZpDTWXOh1v3TeupSftW
38XlB0c07yglM2z70LEPyPL/YGh/+fq0vSittLKsmKTAA97d1Am5JUf6R7nb1+VY
ytjo3lxhb+FJ4L+P3BCGbeUGfVxSCTY10kG0AXtKzlcBmBKJUWYObmOzR9EfAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUbanRtZdBiW1N1H94rOm+7i7AdY0wHwYDVR0j
BBgwFoAU8SD9dnCcZ8iIRbG7kTJyDmJiqHAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQzA5OUEwMjVERjI0RUIxQjg1MTkwRkY1RkMwMjVBNDNB
RjMxNjlCMzM4QjJDNTMxQkFGNzJGQkY4RjY5MUQ4LzAvRjEyMEZENzY3MDlDNjdD
ODg4NDVCMUJCOTEzMjcyMEU2MjYyQTg3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTIwRkQ3NjcwOUM2N0M4ODg0
NUIxQkI5MTMyNzIwRTYyNjJBODcwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkMwOTlBMDI1REYyNEVCMUI4NTE5MEZGNUZDMDI1QTQzQUYzMTY5QjMz
OEIyQzUzMUJBRjcyRkJGOEY2OTFEOC8wLzMyMzgzMDM2M2EzMzMwMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM4MzMzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYDADANBgkq
hkiG9w0BAQsFAAOCAQEAjfGLrKrSFSvuIZK7NXwSY0th5Wu3lQuComC+OVKlQt+z
ZN6cOVDxdkwl4UeAyzkMqVcpcxGpU+zRUnYQCKor2gkEir8A0OQJk9f/WzdGEgQk
SWR0BGxIa2xB+VlDLOtvHjPdTe+rHAMACM6bTFsQaE27Ki/ENjjBIvF+WoUjT19E
CsgxHQ+eaW6SCvvJ0b5iQdDA2KhkhpEokZsmkGU8pkR8Tmq2Lj10qHmEofEWJi5n
lN3hmerk3hEQNiUbobPkNyOfCJvkasGtSfUFtRwwq/j8SqOK+moE3SFdtpkQK9a0
5g4FDxq/mzlNXtwWytwbAto6WHlwZoqoV2SLncPyVw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:13 2025 by rpki-client on console.sobornost.net