Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237363531.roa
File:                     323830303a3333303a3a2f33322d3434203d3e203237363531.roa (raw, json)
Hash identifier:          GBiGRCZKiYZlSQQLogKFnQSDX4aCUlYrO2Fh2w6a49w=
Subject key identifier:   6D:53:C4:A6:AF:39:CF:E3:43:DD:A9:9D:AC:A8:97:93:26:85:E1:32
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       706FFA3ABC54F3466605D91F16EED6D4AB93B1AC
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:17:42 +0000
ROA not before:           Tue 05 Mar 2024 18:12:42 +0000
ROA not after:            Tue 04 Mar 2025 18:17:42 +0000
asID:                     27651
IP address blocks:        2800:330::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6f:fa:3a:bc:54:f3:46:66:05:d9:1f:16:ee:d6:d4:ab:93:b1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:42 2024 GMT
            Not After : Mar  4 18:17:42 2025 GMT
        Subject: CN=6D53C4A6AF39CFE343DDA99DACA897932685E132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:98:34:34:06:bd:2f:99:a3:6b:7b:3c:f3:
                    f4:9b:e6:3f:78:9c:ca:72:58:3d:18:30:62:63:82:
                    b4:ad:8d:46:c7:37:d8:34:59:00:c4:79:9b:e7:d8:
                    5b:4d:94:1e:89:70:3d:fe:d0:31:3e:57:d9:aa:70:
                    d3:1f:f1:95:a2:32:52:76:7b:a7:c9:11:23:7b:fb:
                    60:93:16:70:7c:f2:a1:a3:4e:4e:4a:a6:5a:e7:44:
                    8a:97:81:31:9c:19:bf:26:75:c6:ec:78:a6:4d:85:
                    aa:ea:85:0f:07:76:10:a2:ce:e3:58:3c:4f:63:a1:
                    6d:23:a0:26:87:63:c3:5c:0d:65:f4:dd:46:28:d8:
                    d2:57:dc:c6:a7:08:a0:3a:f6:12:74:ab:e9:66:ec:
                    c5:ab:cf:65:dd:d9:0f:03:9a:02:11:8f:e3:dc:ba:
                    b7:cf:d1:90:d5:c2:ce:78:14:4e:54:f7:45:81:f3:
                    de:34:f9:d1:d6:c3:44:93:c3:62:e8:dc:7b:92:1a:
                    84:3c:19:04:be:6f:a0:9f:02:31:52:3d:c8:76:af:
                    27:e5:87:b6:5e:12:19:47:05:cc:65:ae:50:a0:ec:
                    57:c6:d8:3e:c2:3d:cb:75:48:ea:1a:9c:65:b0:40:
                    bc:33:cf:7d:71:0f:01:03:7e:3c:70:a6:e9:0f:29:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:C4:A6:AF:39:CF:E3:43:DD:A9:9D:AC:A8:97:93:26:85:E1:32
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:330::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:1f:2d:e1:9b:f6:b1:19:5e:37:5b:16:02:b6:95:dc:b0:
         71:56:94:25:0b:96:ce:9b:91:b5:d4:f2:81:11:3d:31:c9:54:
         02:3e:71:ce:4e:b4:4c:63:d0:15:04:d1:89:d3:7d:2e:a4:66:
         99:be:65:ab:79:7c:46:8f:92:52:0d:c7:d1:a6:5d:5c:34:d7:
         b7:e6:eb:ab:e1:8f:f8:0b:b6:ea:4d:d0:57:45:ec:f4:63:4a:
         6c:73:03:b0:6d:b8:ab:f3:60:53:0d:ce:36:71:3c:60:0b:fa:
         88:17:3a:33:9e:48:95:5b:cd:2b:51:74:c0:eb:df:a5:ea:22:
         ae:1e:6c:b0:21:b2:bd:bd:24:21:9b:ed:4c:21:f6:69:18:1a:
         b6:4c:d1:63:f2:40:73:86:0e:7b:4b:9c:b9:bf:cf:82:00:14:
         a2:83:ca:84:36:b6:f5:cf:f6:e6:73:eb:ee:e8:ca:b3:fb:07:
         78:cd:e5:0f:ef:21:57:1e:a0:b8:fc:f5:41:6a:49:d8:ad:29:
         92:b0:c0:0b:76:81:dd:a3:06:77:6e:e4:c3:9a:ae:35:94:94:
         6d:ea:37:2d:2b:31:37:f4:da:10:b9:d9:3b:c2:1a:da:6f:02:
         cc:8b:06:79:4a:18:52:b1:7b:b1:45:fa:fe:18:d2:05:19:74:
         3e:c1:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org