Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/323830363a3366363a3a2f33322d3332203d3e203238343437.roa
File:                     323830363a3366363a3a2f33322d3332203d3e203238343437.roa (raw, json)
Hash identifier:          pJ8XYDDL3WtHD9XdLTHdhPq2bv5T/+1mHibSmD9zfgk=
Subject key identifier:   86:92:7F:7D:82:5C:21:20:CD:BC:43:0B:C6:7E:D9:19:B8:95:45:F3
Certificate issuer:       /CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
Certificate serial:       1CEBCB8CBB99BD25F6AFF158CE72BDB38DB87456
Authority key identifier: E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/323830363a3366363a3a2f33322d3332203d3e203238343437.roa
Signing time:             Thu 20 Mar 2025 02:12:33 +0000
ROA not before:           Thu 20 Mar 2025 02:07:33 +0000
ROA not after:            Thu 19 Mar 2026 02:12:33 +0000
asID:                     28447
IP address blocks:        2806:3f6::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:eb:cb:8c:bb:99:bd:25:f6:af:f1:58:ce:72:bd:b3:8d:b8:74:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
        Validity
            Not Before: Mar 20 02:07:33 2025 GMT
            Not After : Mar 19 02:12:33 2026 GMT
        Subject: CN=86927F7D825C2120CDBC430BC67ED919B89545F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fa:42:83:42:4c:f8:3a:5a:a3:8e:e3:36:88:
                    6f:5b:bb:a3:4a:af:f7:02:ed:39:dc:b7:0a:61:27:
                    3d:50:2e:25:1a:d1:52:61:52:31:1e:e1:d4:2b:69:
                    e1:dd:1b:38:03:9c:4f:3e:91:4e:7b:c6:9e:c7:0e:
                    a7:06:c2:fe:32:58:dc:42:79:67:cf:f3:66:67:fe:
                    53:0d:b0:a3:55:07:b8:a1:dd:cf:9b:c0:b3:60:2e:
                    5a:0c:5f:44:ac:68:cf:47:60:7d:b5:fe:2c:6b:f1:
                    d5:a9:30:f5:3c:58:22:b9:f4:97:c7:56:2e:b0:1e:
                    fc:49:a1:34:9b:42:75:68:ad:d1:66:f2:ee:53:96:
                    cc:a3:f1:e1:cc:dc:1f:42:b9:f5:54:e4:09:58:6a:
                    e6:9d:13:bd:79:7c:6c:92:10:3e:f8:21:37:57:7d:
                    11:8c:0c:6c:f5:9e:5c:e5:9c:9e:f0:2d:4a:4d:f9:
                    0e:b1:bd:41:b8:2b:2f:69:c6:55:5b:0a:02:fc:e1:
                    c2:ec:50:3f:21:30:be:65:32:b2:67:84:67:d7:dc:
                    57:29:e8:27:21:a0:b2:65:9b:f4:c0:e0:ef:e0:2c:
                    42:82:a3:c6:ec:ff:83:cf:3e:c4:54:a6:a1:3d:07:
                    a2:41:2a:f1:54:37:73:96:83:d9:b2:a8:b1:d1:49:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:92:7F:7D:82:5C:21:20:CD:BC:43:0B:C6:7E:D9:19:B8:95:45:F3
            X509v3 Authority Key Identifier:
                keyid:E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/323830363a3366363a3a2f33322d3332203d3e203238343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f6::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:74:26:c4:a1:d4:a9:b9:48:8e:34:da:e4:4a:16:2d:9a:
         4f:ad:f3:54:ae:22:c3:d3:57:3f:4b:3f:81:2e:26:61:da:5e:
         49:21:b6:8a:31:ae:88:d6:bf:d1:8b:da:e5:9f:4c:2b:9c:b3:
         1f:d4:61:48:a0:ef:fb:82:2f:e9:e5:64:5c:22:84:79:5f:c4:
         27:d8:12:e2:f2:ca:01:c3:2e:ca:ed:0c:6a:6c:74:f4:91:c5:
         dc:e6:be:c7:ef:aa:65:1e:86:eb:af:5f:70:84:d1:b3:c9:da:
         ef:84:15:66:c4:c6:af:0b:c1:24:fa:b2:de:63:b8:a4:31:20:
         bc:83:3a:9e:79:0b:1f:17:50:5f:fa:c5:e6:42:4d:08:7c:bc:
         16:30:62:89:e8:87:78:1c:bc:bb:9c:41:5e:09:bc:79:c8:da:
         0e:d0:d2:86:9c:24:85:8f:a6:44:c4:a3:4d:37:5d:5e:69:b2:
         15:d4:de:04:56:d6:77:c7:7e:f8:40:29:00:e1:e3:09:8d:99:
         dc:11:ca:f0:85:fa:64:7a:36:6f:a3:71:08:15:9c:3e:10:4a:
         ef:22:3d:6b:99:a8:70:a5:8a:50:01:84:78:85:44:43:d4:09:
         56:6a:5e:77:bb:af:82:6f:f5:6e:4f:40:0d:12:6a:06:10:5d:
         86:1e:85:23
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUHOvLjLuZvSX2r/FYznK9s424dFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4NTg1NUFFNTcyNDBCMkZCREQ1N0NEQkE3NzgyQkYz
QzBBMUQ1MzAeFw0yNTAzMjAwMjA3MzNaFw0yNjAzMTkwMjEyMzNaMDMxMTAvBgNV
BAMTKDg2OTI3RjdEODI1QzIxMjBDREJDNDMwQkM2N0VEOTE5Qjg5NTQ1RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv+kKDQkz4OlqjjuM2iG9bu6NK
r/cC7TnctwphJz1QLiUa0VJhUjEe4dQraeHdGzgDnE8+kU57xp7HDqcGwv4yWNxC
eWfP82Zn/lMNsKNVB7ih3c+bwLNgLloMX0SsaM9HYH21/ixr8dWpMPU8WCK59JfH
Vi6wHvxJoTSbQnVordFm8u5Tlsyj8eHM3B9CufVU5AlYauadE715fGySED74ITdX
fRGMDGz1nlzlnJ7wLUpN+Q6xvUG4Ky9pxlVbCgL84cLsUD8hML5lMrJnhGfX3Fcp
6CchoLJlm/TA4O/gLEKCo8bs/4PPPsRUpqE9B6JBKvFUN3OWg9myqLHRSffJAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUhpJ/fYJcISDNvEMLxn7ZGbiVRfMwHwYDVR0j
BBgwFoAU54WFWuVyQLL73VfNuneCvzwKHVMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMEFFQ0E0OEM1MThBQjI4REEzMzRGNTg0OTY4NEMyQzYx
RDdFQTEzMTA0RTJDMjc3MTc1MTg4MkQ5QzRCQjIzLzAvRTc4NTg1NUFFNTcyNDBC
MkZCREQ1N0NEQkE3NzgyQkYzQzBBMUQ1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzg1ODU1QUU1NzI0MEIyRkJE
RDU3Q0RCQTc3ODJCRjNDMEExRDUzLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTBBRUNBNDhDNTE4QUIyOERBMzM0RjU4NDk2ODRDMkM2MUQ3RUExMzEw
NEUyQzI3NzE3NTE4ODJEOUM0QkIyMy8wLzMyMzgzMDM2M2EzMzY2MzYzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM4MzQzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD9jANBgkq
hkiG9w0BAQsFAAOCAQEATLJ0JsSh1Km5SI402uRKFi2aT63zVK4iw9NXP0s/gS4m
YdpeSSG2ijGuiNa/0Yva5Z9MK5yzH9RhSKDv+4Iv6eVkXCKEeV/EJ9gS4vLKAcMu
yu0Mamx09JHF3Oa+x++qZR6G669fcITRs8na74QVZsTGrwvBJPqy3mO4pDEgvIM6
nnkLHxdQX/rF5kJNCHy8FjBiieiHeBy8u5xBXgm8ecjaDtDShpwkhY+mRMSjTTdd
XmmyFdTeBFbWd8d++EApAOHjCY2Z3BHK8IX6ZHo2b6NxCBWcPhBK7yI9a5mocKWK
UAGEeIVEQ9QJVmped7uvgm/1bk9ADRJqBhBdhh6FIw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:28 2025 by rpki-client on console.sobornost.net