Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa
File:                     323830363a3230633a3a2f33322d3332203d3e20323635353137.roa (raw, json)
Hash identifier:          tNGsGESrFxz2XhniYKgDXumzyvuwiYvTWjyRaXkiMXY=
Subject key identifier:   60:B0:71:09:BA:18:B0:15:9F:33:04:23:11:5C:44:27:52:BE:0D:56
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       5C79170CCFC6A3BFD270194759FBA7FACA51F46D
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa
Signing time:             Mon 06 May 2024 16:45:00 +0000
ROA not before:           Mon 06 May 2024 16:40:00 +0000
ROA not after:            Mon 05 May 2025 16:45:00 +0000
asID:                     265517
IP address blocks:        2806:20c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:79:17:0c:cf:c6:a3:bf:d2:70:19:47:59:fb:a7:fa:ca:51:f4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: May  6 16:40:00 2024 GMT
            Not After : May  5 16:45:00 2025 GMT
        Subject: CN=60B07109BA18B0159F330423115C442752BE0D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:a3:84:be:40:cd:88:93:ff:ad:57:34:0d:
                    82:e0:ad:ff:fb:66:38:f2:e7:57:ae:d5:75:cd:fa:
                    cb:e4:9a:ed:6a:89:0c:4f:05:26:59:d4:3c:a5:94:
                    a2:69:b6:f2:80:00:9c:6a:70:9b:8e:80:5f:fc:a2:
                    92:9e:8c:95:d0:c8:d2:7b:15:6a:ce:35:d6:e2:6d:
                    54:ab:fd:52:a3:79:ee:3a:b1:e0:7e:03:d0:93:95:
                    83:13:4e:26:c8:ef:61:50:8f:37:05:17:3d:b7:cc:
                    be:be:62:d5:23:98:87:ca:b1:27:72:31:65:04:12:
                    87:ff:ec:29:e9:79:68:1f:61:64:1e:9c:10:e2:14:
                    ea:16:42:f5:1b:da:3b:c1:60:a8:33:81:93:e8:ec:
                    68:a5:98:9b:d8:09:62:b0:7e:64:f5:72:25:92:45:
                    18:47:a9:c0:54:ab:d4:fc:7f:4c:58:69:7d:b9:f3:
                    6a:97:6e:d6:e3:08:d1:70:69:27:b5:e5:0f:d8:62:
                    64:06:1d:ab:b3:0f:7f:f6:49:82:2e:95:fd:a6:a8:
                    46:dd:c1:5f:34:e3:5f:e6:49:2c:f5:7b:e9:3b:56:
                    16:11:0f:bc:66:32:51:c8:9e:0a:ec:61:90:23:7f:
                    1b:7c:9d:45:8a:70:d9:13:b4:2d:eb:cb:f9:ff:c2:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B0:71:09:BA:18:B0:15:9F:33:04:23:11:5C:44:27:52:BE:0D:56
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:20c::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:88:69:e7:bc:eb:ea:66:e1:0a:cd:50:f4:22:c4:6e:b5:27:
         67:3c:18:c1:b6:20:db:72:08:ff:01:1a:56:d8:27:f4:09:29:
         9f:ce:8c:f7:dd:9d:c3:e1:25:bf:22:49:a6:54:c7:77:2f:4c:
         cf:c9:55:de:c3:1e:bd:bc:15:7b:94:3f:c4:ce:11:40:3d:3d:
         7f:5b:dd:9d:64:bc:93:a8:0f:67:e0:a0:b0:e4:6f:78:8e:e8:
         75:44:58:ff:58:8a:d6:86:c0:d4:1a:f2:6f:14:39:e3:8a:d7:
         d1:fd:9d:4c:e8:56:57:3e:b6:3f:b8:b5:1e:6f:07:b2:d5:81:
         0c:c8:c1:3e:90:d5:91:b0:30:8f:2d:50:bc:a7:1a:73:c4:6b:
         e1:30:6b:8a:78:e6:34:ee:30:a7:b3:43:4d:12:6d:09:70:64:
         ce:9e:a6:a7:5f:e5:a2:7a:df:52:d4:01:77:46:29:68:76:e1:
         c7:bf:84:17:36:19:3e:f6:44:9c:fb:20:88:89:54:08:1e:a1:
         af:b8:a1:c0:48:87:e5:0a:9c:9e:fb:4a:8d:c5:90:18:d3:42:
         8f:a6:d3:3c:1f:d0:17:8a:44:de:94:c3:e5:6a:34:4e:fb:bc:
         00:96:b3:34:c7:bf:45:63:8a:83:07:f6:a9:7c:44:93:d0:84:
         f9:4e:04:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org