Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237393836.roa
File:                     323830303a3333303a3a2f33322d3434203d3e203237393836.roa (raw, json)
Hash identifier:          //J23GzENNgj6TMvSlRPLtxyRUBv+Ud9KKcqmIGyS5Q=
Subject key identifier:   63:05:14:E6:A2:FA:A4:44:52:C8:92:32:BA:94:25:B3:03:03:C1:E8
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       502670AD55928F6679BE44746D2395E67CD374F4
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237393836.roa
Signing time:             Tue 05 Mar 2024 18:17:37 +0000
ROA not before:           Tue 05 Mar 2024 18:12:37 +0000
ROA not after:            Tue 04 Mar 2025 18:17:37 +0000
asID:                     27986
IP address blocks:        2800:330::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 May 2024 15:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:26:70:ad:55:92:8f:66:79:be:44:74:6d:23:95:e6:7c:d3:74:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:37 2024 GMT
            Not After : Mar  4 18:17:37 2025 GMT
        Subject: CN=630514E6A2FAA44452C89232BA9425B30303C1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:ea:1e:c2:8a:ab:57:9f:32:98:e2:c6:2d:
                    84:34:8d:1b:48:70:c9:46:35:e2:c1:84:60:52:f7:
                    5e:e9:0c:58:ce:b0:cf:da:69:cf:7a:16:c1:a8:89:
                    9b:ac:24:c0:4b:67:f4:1c:95:ac:87:ce:6d:d6:79:
                    90:82:2f:e9:78:93:7d:09:9a:6b:91:35:7c:6d:74:
                    a4:8e:06:27:6b:5a:71:8e:08:50:56:5f:30:9e:52:
                    34:fe:cb:ee:ab:b2:c3:6f:30:f4:c8:44:4b:44:2f:
                    d7:89:96:7c:e6:42:9a:c8:dc:72:47:7b:ff:f6:0f:
                    98:fe:0d:f7:1a:a1:1b:90:a3:7f:c5:9b:ed:b5:e5:
                    e8:f9:60:99:2f:3f:e8:9e:65:e8:28:dd:59:6f:7c:
                    58:0d:39:5c:cb:ca:89:c7:cc:58:82:0f:27:67:de:
                    de:d4:41:1d:c9:73:7c:fd:50:c9:13:96:c6:c4:24:
                    f7:45:6d:4c:8e:88:09:ee:9d:d6:c2:fd:e2:3b:25:
                    37:50:65:3a:0a:d0:97:0a:8c:49:63:93:3c:ab:c5:
                    3f:8e:79:03:8f:f0:20:58:79:47:5f:e2:9a:63:4f:
                    47:80:04:ae:99:4a:82:40:d8:57:92:58:cd:16:a0:
                    ce:17:71:4d:d1:b0:73:f1:8a:67:98:d8:5e:a1:c6:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:05:14:E6:A2:FA:A4:44:52:C8:92:32:BA:94:25:B3:03:03:C1:E8
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:330::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:24:64:16:21:2d:dd:78:4b:02:e4:1b:6a:72:0f:90:e7:aa:
         3e:06:04:a0:e3:87:3d:9f:e2:19:74:5f:5d:e5:75:6b:59:d6:
         93:13:35:8b:0f:a6:7a:74:f5:04:a7:e0:af:1f:92:3d:29:4e:
         ee:96:7f:1e:b5:45:e5:e0:07:b5:7f:de:65:9b:ef:01:d6:02:
         f9:27:6a:bf:f2:77:bd:2c:23:e0:a6:3d:fc:3b:c4:22:a5:f2:
         ec:e4:40:59:15:a7:d1:0a:12:4e:be:0c:9c:8f:db:65:aa:a3:
         23:38:8a:9f:97:a8:b3:88:2b:c8:6c:33:c1:34:24:03:25:ac:
         64:20:6f:69:1f:93:2d:3a:e4:23:c6:17:52:05:c8:ba:45:55:
         cb:35:35:f9:4c:0f:00:5e:c7:05:29:11:6c:b9:55:92:f8:80:
         75:ac:bd:6b:24:47:4a:7c:fe:e5:9c:b5:29:60:e8:eb:fe:b7:
         9c:23:26:ea:0f:0c:11:23:37:39:e1:0f:d8:93:af:43:b9:47:
         f5:ae:59:8c:b4:a5:81:33:28:33:4d:0a:c5:06:81:2d:3b:6a:
         34:5b:32:d3:54:45:45:ae:8d:dc:5e:96:e9:c3:36:fe:5a:71:
         28:fb:f5:2a:28:94:9c:fa:01:d1:b2:c5:d9:59:b4:aa:70:a5:
         4f:c1:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:53:46 2024 by rpki-client on console-fra.rpki-client.org