Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a323030303a3a2f33352d3335203d3e20323635363232.roa
File:                     323830363a3361333a323030303a3a2f33352d3335203d3e20323635363232.roa (raw, json)
Hash identifier:          YylgJEmyLEOZZ6YepaG7kqchdLY68E80XTl9s1vZeNk=
Subject key identifier:   BA:F8:09:5D:19:FB:BA:82:8C:62:1C:F5:04:49:17:86:05:D0:BB:C4
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       1A585833B35A4CE9C4BEA714561A3EE00658E63B
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a323030303a3a2f33352d3335203d3e20323635363232.roa
Signing time:             Mon 13 May 2024 15:55:00 +0000
ROA not before:           Mon 13 May 2024 15:50:00 +0000
ROA not after:            Mon 12 May 2025 15:55:00 +0000
asID:                     265622
IP address blocks:        2806:3a3:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:58:58:33:b3:5a:4c:e9:c4:be:a7:14:56:1a:3e:e0:06:58:e6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: May 13 15:50:00 2024 GMT
            Not After : May 12 15:55:00 2025 GMT
        Subject: CN=BAF8095D19FBBA828C621CF50449178605D0BBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:6b:97:d5:77:cd:cc:fa:3c:fe:7b:0b:dd:
                    e5:7f:a8:cc:a7:51:46:e2:0d:8c:b2:07:8b:99:1b:
                    22:bd:f7:37:e3:44:93:fc:08:51:24:fd:07:c5:b5:
                    41:b1:43:b7:39:64:1d:ce:1e:49:fc:49:08:f5:6c:
                    2c:ca:57:ca:f7:99:90:9b:ed:a2:e1:4f:78:33:cb:
                    f8:3a:4a:dc:0d:44:04:f5:fd:8f:e6:1e:1c:21:19:
                    92:0a:1c:8a:c9:7f:f7:52:89:cc:e8:98:2a:6e:e0:
                    36:98:7e:15:be:c2:a2:a4:75:1f:a9:0e:d1:1f:12:
                    52:2a:aa:01:35:61:eb:03:49:d3:3e:2c:aa:f8:72:
                    27:a0:88:e2:82:fd:b8:15:b8:37:dd:3c:72:80:d1:
                    db:dd:94:fc:ad:1c:59:ba:ee:8b:2b:e4:1a:0c:17:
                    47:96:36:7a:ba:7d:19:1f:5a:42:b1:3b:50:cd:04:
                    7c:27:5b:c7:fc:4a:0f:65:e2:9e:e4:a1:1b:58:bc:
                    56:44:33:93:6c:f5:18:fc:27:58:62:a1:0f:92:48:
                    56:4d:06:e9:3f:5f:de:f1:40:55:fe:e5:48:38:8f:
                    f4:9f:00:a7:bf:12:04:a0:0f:3c:23:17:11:cd:97:
                    fb:1c:45:85:8f:57:96:3a:ba:a9:d7:49:c9:72:6d:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:09:5D:19:FB:BA:82:8C:62:1C:F5:04:49:17:86:05:D0:BB:C4
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a323030303a3a2f33352d3335203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         35:03:f0:c4:fd:83:f3:a4:e8:26:bb:9f:4d:aa:9f:87:e0:d0:
         f3:58:44:8d:fa:66:ff:b1:af:40:fa:99:d1:e6:4f:4f:73:a1:
         71:39:bf:07:32:fc:85:2b:b4:d9:00:5d:9c:3a:45:db:d5:de:
         c1:4c:2f:1e:b7:74:e1:62:ed:42:04:86:4b:88:95:53:0d:a3:
         9e:d2:e9:75:9c:81:26:7e:5d:de:33:fb:d7:cd:8f:4b:dc:7c:
         7f:87:f2:44:c9:ad:cd:7e:f0:6a:5e:71:b7:fa:24:1f:85:56:
         e5:b9:05:32:c4:01:3f:87:59:c3:a3:ac:9c:3b:5d:ce:84:4c:
         37:74:79:03:7a:db:d7:93:15:3f:b8:e2:c2:85:16:56:79:83:
         9e:23:3b:ff:73:bc:c2:3f:32:c4:ca:f6:fa:61:a3:24:d7:01:
         01:ad:5c:47:66:60:c9:a2:49:c2:d8:63:39:7b:13:ce:e7:e5:
         81:02:b2:16:ec:08:d7:ef:c4:dc:ad:7f:14:8f:e4:7f:10:9d:
         ef:73:9f:4b:07:8c:83:72:e7:55:1d:78:d2:5b:a2:26:85:e9:
         a6:4f:3b:3a:71:6b:48:bc:74:38:cf:cc:df:36:e5:00:92:08:
         09:25:f9:4e:59:b1:5e:45:29:e2:a0:a0:39:a7:94:98:74:84:
         30:cb:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org