Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a363030303a3a2f33362d3336203d3e20323730323137.roa
File:                     323830363a3430303a363030303a3a2f33362d3336203d3e20323730323137.roa (raw, json)
Hash identifier:          zN+a5o0wYMOLqm4zLfIMpFuy6sTzBOJfDCoK3wUoG4I=
Subject key identifier:   7B:A7:C7:D5:AD:11:8B:24:0F:77:D8:AE:90:01:13:4E:66:0A:64:8D
Certificate issuer:       /CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
Certificate serial:       5C2AB8434722A487B7E45D364BED8E590E1DA834
Authority key identifier: D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a363030303a3a2f33362d3336203d3e20323730323137.roa
Signing time:             Thu 03 Apr 2025 14:13:45 +0000
ROA not before:           Thu 03 Apr 2025 14:08:45 +0000
ROA not after:            Thu 02 Apr 2026 14:13:45 +0000
asID:                     270217
IP address blocks:        2806:400:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2a:b8:43:47:22:a4:87:b7:e4:5d:36:4b:ed:8e:59:0e:1d:a8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
        Validity
            Not Before: Apr  3 14:08:45 2025 GMT
            Not After : Apr  2 14:13:45 2026 GMT
        Subject: CN=7BA7C7D5AD118B240F77D8AE9001134E660A648D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ff:d6:23:f7:d5:28:12:2e:dc:58:26:d9:0d:
                    b9:70:5e:01:15:e3:00:17:f8:55:da:20:d5:df:f6:
                    e2:9e:78:41:cd:d8:0e:8f:7f:d7:8f:04:e5:17:6b:
                    42:4d:4a:c0:2f:3b:a3:3a:90:cf:60:db:4c:a6:9f:
                    c4:c5:12:d1:ee:81:f4:f7:d0:e3:67:1b:cf:c0:fb:
                    be:91:22:b0:78:30:9d:91:76:3f:c1:87:77:74:97:
                    af:f2:de:0e:4c:b4:1d:02:0c:c6:5f:5c:e3:2a:fd:
                    09:17:9a:eb:c6:92:2d:c7:3e:3d:f7:f4:79:4a:d8:
                    05:d6:86:7b:a3:cf:3c:3b:99:a5:6c:fe:69:0c:28:
                    72:bb:3a:a7:69:7a:d4:36:6d:4f:d3:a7:ce:0e:f5:
                    16:ed:a7:75:cf:35:d4:94:a7:01:b4:0c:39:a9:8a:
                    a1:29:fe:75:58:6a:21:3f:55:39:f2:cc:56:e3:a6:
                    ba:0b:d5:45:6e:b2:a0:3d:08:05:36:15:25:66:42:
                    cd:97:26:33:db:8e:ce:37:36:c8:a6:33:cc:98:70:
                    81:ed:8f:a1:6b:dc:02:20:4c:fc:6f:48:57:e8:7d:
                    8b:69:85:36:3a:87:d9:de:b9:b6:cf:1f:e5:f9:8a:
                    13:5d:77:cd:91:a9:89:60:44:2f:dc:d9:18:ff:19:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A7:C7:D5:AD:11:8B:24:0F:77:D8:AE:90:01:13:4E:66:0A:64:8D
            X509v3 Authority Key Identifier:
                keyid:D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a363030303a3a2f33362d3336203d3e20323730323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:400:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:90:e5:13:d9:e6:86:b4:a5:f0:83:16:af:b5:4d:0f:76:
         f3:f7:4e:ef:90:d8:4a:0e:7a:61:30:89:01:42:7f:ef:63:b1:
         b3:55:df:0f:64:a6:f6:4e:3c:46:59:78:0d:cd:42:01:37:ae:
         84:f9:24:10:b3:f3:79:34:df:86:90:d1:94:a3:b7:48:29:dd:
         e3:5c:25:63:43:d7:25:c5:e4:3f:3d:89:8b:d7:56:a8:e5:48:
         c0:ec:f6:9c:1b:a2:2e:19:40:ae:40:a1:58:e3:8b:d8:83:b2:
         c6:f8:1c:eb:04:d6:46:4d:b9:9c:24:a6:e6:d6:69:22:5b:93:
         e7:4e:b0:f9:ae:7b:03:41:5a:e2:41:3b:b9:bb:80:04:06:4f:
         86:a2:62:af:03:19:ac:31:c6:6f:43:eb:b2:74:e7:8b:d5:b2:
         85:ff:a4:3a:52:bd:cc:80:40:72:fe:f9:14:33:d5:12:52:ab:
         9f:b5:8f:8c:bd:8b:33:4a:83:b6:ce:0c:27:19:5b:3e:72:db:
         0b:39:fb:f2:ae:b5:d9:a6:6c:1a:fa:fb:67:2b:d7:a4:da:b6:
         b6:16:bf:93:a4:42:b5:75:86:65:4d:74:47:e5:8d:d4:f9:20:
         7d:a1:8a:d2:6b:6e:4e:d2:db:22:1b:6f:ee:6f:ad:34:64:01:
         ed:dd:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:13 2025 by rpki-client on console.sobornost.net