Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/323830303a6136303a3a2f33322d3332203d3e203631343636.roa
File:                     323830303a6136303a3a2f33322d3332203d3e203631343636.roa (raw, json)
Hash identifier:          JGct0Vc8Hjeg1NSZvI4zm5+qPbWMQGmjPa7dRbeMy6Y=
Subject key identifier:   2C:18:B2:8F:33:FE:73:D6:10:4A:E2:C2:8F:FA:4E:CD:80:25:51:2C
Certificate issuer:       /CN=B3AC8703592539ADD492A1BDC08E997B67459567
Certificate serial:       4F0442C528A822D8B55E57A3C5ECEDCC2CE3772B
Authority key identifier: B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/323830303a6136303a3a2f33322d3332203d3e203631343636.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     61466
IP address blocks:        2800:a60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:04:42:c5:28:a8:22:d8:b5:5e:57:a3:c5:ec:ed:cc:2c:e3:77:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AC8703592539ADD492A1BDC08E997B67459567
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=2C18B28F33FE73D6104AE2C28FFA4ECD8025512C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:b0:90:36:c8:8a:77:02:ab:0e:92:06:b4:
                    d8:06:2c:87:30:78:c8:25:41:dd:c0:0b:95:0b:91:
                    8e:b4:1a:ed:4c:e1:a0:11:3f:a1:2f:68:54:84:a9:
                    63:37:2c:87:18:25:dc:0e:85:7a:45:27:5e:b7:07:
                    1b:1c:3d:74:1a:ab:4e:d6:eb:03:27:a2:fe:fa:aa:
                    3f:c1:dc:41:d1:d1:02:9b:c3:cb:9b:68:49:cb:5b:
                    12:fc:77:55:a2:3d:a7:ab:f2:84:71:38:a6:8b:d4:
                    6e:39:73:75:4f:d4:5f:81:44:68:7c:4a:4c:22:47:
                    70:c6:a2:b0:fb:db:04:1e:fc:22:4c:6e:8f:7f:95:
                    34:fe:af:95:0a:f5:83:6e:86:7f:9f:e5:df:d5:67:
                    b8:9d:77:f9:7f:28:f6:75:2f:16:4a:21:76:df:59:
                    c5:02:dc:98:a8:1c:fe:12:7b:15:17:6f:89:a6:f1:
                    f1:67:46:fe:8f:a1:a0:ef:cb:37:64:d1:b7:f7:7d:
                    3b:0b:06:24:31:f7:8a:2c:4d:8a:bd:75:61:b0:0f:
                    1c:95:2a:10:c1:75:fd:9c:b5:51:49:29:32:74:f7:
                    f3:f8:c8:0f:61:69:1c:5e:a7:c3:8f:bb:d3:f2:3a:
                    e8:ca:52:1a:46:aa:ab:8a:b3:82:28:17:a9:e6:1a:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:18:B2:8F:33:FE:73:D6:10:4A:E2:C2:8F:FA:4E:CD:80:25:51:2C
            X509v3 Authority Key Identifier:
                keyid:B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/323830303a6136303a3a2f33322d3332203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:20:d9:3c:94:f6:b7:88:ef:a0:b4:bd:6e:49:bb:aa:d1:
         bd:91:e0:9e:21:8e:ff:94:bf:ec:ca:68:6d:98:d6:2a:9b:52:
         23:d9:dc:10:49:60:9b:f6:6e:ef:d2:fc:70:40:aa:89:8f:d5:
         0e:37:d6:f6:d6:8e:2e:0e:60:4b:ba:03:53:3f:ad:6d:fc:92:
         fa:2b:0f:4f:da:3c:70:92:be:24:df:e5:bd:2f:bb:65:30:1c:
         ef:2f:c4:1d:9a:df:a8:4b:96:da:f8:5f:78:01:f8:9b:03:42:
         f0:04:7c:82:f2:3d:40:22:64:2d:68:25:1b:ef:d1:56:71:c8:
         c1:09:25:43:b6:90:d2:16:58:8c:a1:86:6e:a3:c8:14:c6:e5:
         5f:35:c0:a4:97:ba:72:5a:20:50:1a:d9:29:c4:65:38:db:0a:
         a8:0d:0a:6a:6a:4a:b4:ee:56:79:c8:9c:40:30:07:d0:f5:e1:
         98:90:41:7f:47:3e:13:21:66:c3:40:d4:93:c6:e9:5d:20:12:
         00:76:ff:75:b2:2c:56:e9:c6:e3:19:72:42:75:92:d1:4b:26:
         d2:87:55:47:fd:77:c6:d2:74:ec:85:8f:67:d0:a1:bc:8c:7a:
         39:29:28:f9:87:7a:e1:a5:31:c6:67:35:69:da:bb:59:6a:10:
         c7:00:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 14:04:30 2024 by rpki-client on console-fra.rpki-client.org