Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/323830363a3336323a3a2f33322d3430203d3e20323635363036.roa
File:                     323830363a3336323a3a2f33322d3430203d3e20323635363036.roa (raw, json)
Hash identifier:          5kBCWF7aQHxLZ+C3U2Sr3laonW4gBpfEYO1ifTZ7mD0=
Subject key identifier:   15:D8:41:98:7C:47:1F:C4:69:2C:B8:ED:37:9A:C8:38:EE:1E:56:79
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       687E9A6EC60C1E40B3746E49693AFFDA35664A
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/323830363a3336323a3a2f33322d3430203d3e20323635363036.roa
Signing time:             Tue 05 Mar 2024 17:57:45 +0000
ROA not before:           Tue 05 Mar 2024 17:52:45 +0000
ROA not after:            Tue 04 Mar 2025 17:57:45 +0000
asID:                     265606
IP address blocks:        2806:362::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7e:9a:6e:c6:0c:1e:40:b3:74:6e:49:69:3a:ff:da:35:66:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Mar  5 17:52:45 2024 GMT
            Not After : Mar  4 17:57:45 2025 GMT
        Subject: CN=15D841987C471FC4692CB8ED379AC838EE1E5679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:a4:b7:93:1e:ee:f6:b8:71:cd:c5:fd:23:
                    99:3d:cf:01:98:24:b4:23:fe:db:eb:ee:18:60:53:
                    39:79:14:fa:cb:08:a6:6b:46:71:92:36:a5:ef:85:
                    5b:f5:9b:8e:6a:3d:e7:4f:d5:51:73:39:bb:c7:c6:
                    80:ad:62:57:45:ba:a8:73:52:3a:cf:ca:33:e6:79:
                    22:69:d0:7f:16:ba:95:cb:74:03:36:85:9c:79:5c:
                    13:a8:dc:5a:ad:8f:03:29:aa:a6:ee:51:05:a4:fe:
                    cd:2a:e1:bc:f4:57:04:6f:2c:bf:fe:d5:4d:2f:ca:
                    1e:db:fe:89:cc:49:8f:d6:ad:47:c9:cc:09:d1:9c:
                    87:28:02:d6:e2:57:37:4f:f3:e6:45:13:33:07:ca:
                    e5:25:9f:29:34:25:fe:4b:aa:ed:86:4a:14:85:66:
                    74:5a:42:b6:86:a6:c9:c9:8b:8e:48:30:48:f1:c4:
                    9a:92:1d:35:07:b3:13:c5:68:83:b3:13:2e:e2:b3:
                    21:76:dc:de:28:04:29:52:bc:2c:01:24:e3:47:62:
                    c3:78:5e:a7:35:d0:a7:fe:b7:f0:5e:47:1d:4c:5c:
                    b6:49:f3:48:70:4c:43:f3:8a:5e:b2:2c:c2:db:56:
                    7a:5d:73:19:cb:0c:d7:ad:06:cc:71:aa:42:32:fb:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D8:41:98:7C:47:1F:C4:69:2C:B8:ED:37:9A:C8:38:EE:1E:56:79
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/323830363a3336323a3a2f33322d3430203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:362::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:c5:92:bd:85:f1:cd:69:bf:6b:db:17:3e:ae:54:00:14:b7:
         b5:ad:51:e5:54:5c:14:6b:db:77:b8:1a:03:28:3b:8a:7e:d7:
         c2:58:a4:13:28:0f:da:eb:96:bd:2f:19:3b:a4:6c:c2:6e:3e:
         aa:0b:67:5a:70:f0:23:3f:8c:17:46:4b:77:ea:3a:2e:b3:97:
         d5:3f:39:62:d4:e8:d5:a4:2c:08:ec:cd:e9:e9:82:53:83:00:
         41:56:c3:12:96:cb:af:3f:25:56:8f:90:97:46:ae:d6:3b:96:
         c3:10:11:f9:0f:5f:8e:87:59:1c:3b:b1:67:67:0a:76:6a:5a:
         88:b7:18:be:16:52:8a:58:57:18:ec:41:44:79:ab:f7:db:32:
         7c:90:d1:7b:f4:b9:1f:d0:66:4a:52:7b:94:4b:5b:dc:8f:a4:
         95:43:a8:47:c4:34:56:55:2b:58:fc:20:b7:7f:b1:78:dd:0e:
         57:b0:8d:64:5c:a0:e7:a4:e0:8f:9d:92:e1:ed:ef:9d:8f:9c:
         23:58:02:c4:5e:69:ff:5b:49:40:7d:b7:6d:f0:41:74:9e:17:
         fc:e4:1e:4e:1b:ea:cd:03:c6:36:2b:a4:5b:83:4a:c0:a0:3e:
         84:85:62:c0:fc:22:d8:5f:ac:f3:f7:6d:7e:2b:2f:a1:30:3c:
         ff:68:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org