Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a363030303a3a2f33352d3335203d3e20323635363232.roa
File:                     323830363a3361333a363030303a3a2f33352d3335203d3e20323635363232.roa (raw, json)
Hash identifier:          znokMV7NQkbh0nae9gHM3ew8RpaWikyAKTzh0ijNZLQ=
Subject key identifier:   42:F8:BC:85:86:C3:A0:D5:67:E3:FC:58:CF:13:00:09:A8:28:4D:E9
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       0A78D70D3C59B88517E272FACEAF1C89EADDE25B
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a363030303a3a2f33352d3335203d3e20323635363232.roa
Signing time:             Mon 13 May 2024 15:55:00 +0000
ROA not before:           Mon 13 May 2024 15:50:00 +0000
ROA not after:            Mon 12 May 2025 15:55:00 +0000
asID:                     265622
IP address blocks:        2806:3a3:6000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:78:d7:0d:3c:59:b8:85:17:e2:72:fa:ce:af:1c:89:ea:dd:e2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: May 13 15:50:00 2024 GMT
            Not After : May 12 15:55:00 2025 GMT
        Subject: CN=42F8BC8586C3A0D567E3FC58CF130009A8284DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4f:0c:ab:71:11:65:9a:71:78:d0:7e:3e:6f:
                    b1:39:37:f5:fd:c1:6c:4d:e6:d5:35:07:a5:59:76:
                    54:cc:a2:ac:24:cd:8e:48:92:41:0f:b5:f7:1e:4e:
                    29:ea:8c:a0:46:09:11:77:28:d1:be:9a:bb:64:ad:
                    58:34:84:ab:af:e8:e9:b9:8d:99:6c:f1:0e:2b:b1:
                    e6:85:b1:f2:2c:4b:47:de:1f:71:e9:c2:33:b3:48:
                    cf:7d:3d:6b:a9:28:ef:96:d7:98:b4:dd:d9:bd:72:
                    12:ba:4a:25:e1:c3:15:54:b7:d8:05:94:db:af:77:
                    68:6c:0f:ed:52:14:e1:ea:f3:f8:1a:d1:02:bf:9e:
                    69:44:f0:ee:db:c9:6b:66:95:61:c7:14:93:9f:59:
                    30:d3:2c:d1:6a:75:e4:a4:46:6b:14:49:d1:99:a5:
                    72:ae:85:54:96:e4:f4:cc:38:f1:17:2f:f4:e3:3d:
                    cd:9f:db:fe:83:61:27:19:fa:38:be:fc:bb:e8:0b:
                    54:f2:f5:b6:ba:01:c2:3c:8a:3b:44:b6:b7:66:1a:
                    82:c9:76:3a:d2:35:85:9d:fd:6c:a4:36:1c:8a:c8:
                    7a:9d:a5:fb:82:2e:86:60:a9:36:c3:c9:98:32:98:
                    a5:d2:27:85:6a:3f:9f:9e:7c:21:e8:ed:0d:65:7b:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:BC:85:86:C3:A0:D5:67:E3:FC:58:CF:13:00:09:A8:28:4D:E9
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a363030303a3a2f33352d3335203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         99:1f:8c:b5:bf:b6:33:33:db:25:bb:2d:45:e8:91:af:fa:9c:
         b7:ac:3b:c4:93:b1:3d:ed:88:ce:01:8d:1a:3a:bb:d9:50:23:
         4a:fd:27:41:79:14:9f:23:92:0a:9c:f5:0c:ec:6d:d9:a6:c4:
         ef:91:3d:06:a6:b8:42:35:6c:78:d4:96:bf:ac:6a:4e:1c:73:
         03:23:bf:37:a4:72:a6:50:a2:d2:e2:0a:64:6a:55:af:92:07:
         73:bb:15:1c:a4:bb:0d:04:9e:db:77:9d:5d:cf:ad:dc:6c:53:
         aa:33:ab:c8:68:38:84:06:2f:e9:a7:1b:9d:20:5e:46:b2:19:
         b0:da:96:33:01:4a:7d:e4:0c:58:4d:5d:0e:16:e7:d4:02:cb:
         44:ae:32:b3:7a:c8:37:b6:56:cf:de:ee:3c:2c:6a:28:0c:37:
         75:44:95:a5:81:a4:de:f2:2e:d5:20:e5:20:49:54:ff:7c:82:
         42:9f:0c:13:33:32:24:50:a0:66:e4:05:e0:b4:b9:c7:b3:a5:
         2f:1b:08:a9:6d:7c:42:24:33:a6:ab:70:50:72:b2:4c:64:ce:
         4d:62:c5:b2:51:4c:f0:f4:c9:62:d2:a7:51:b1:9b:7e:0a:15:
         bc:8b:5d:02:ee:80:22:24:22:a0:95:61:c8:ff:de:f1:8e:a1:
         f6:65:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org