Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/323830363a3331353a3a2f33322d3438203d3e20323635353635.roa
File:                     323830363a3331353a3a2f33322d3438203d3e20323635353635.roa (raw, json)
Hash identifier:          7VtIVDqy8RtLpNI9b6b+Q61VqO+4HZFT0zlDqScCxgc=
Subject key identifier:   0C:7B:73:18:A9:F8:D2:53:64:55:70:41:B0:59:B4:87:69:DB:D2:82
Certificate issuer:       /CN=119B7B5F0187CFCFD24CA5A7035670D2F09936C2
Certificate serial:       73A4BF9EFF865778D4A119B3825FE1928CEDEBFE
Authority key identifier: 11:9B:7B:5F:01:87:CF:CF:D2:4C:A5:A7:03:56:70:D2:F0:99:36:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/323830363a3331353a3a2f33322d3438203d3e20323635353635.roa
Signing time:             Thu 29 Aug 2024 21:45:00 +0000
ROA not before:           Thu 29 Aug 2024 21:40:00 +0000
ROA not after:            Thu 28 Aug 2025 21:45:00 +0000
asID:                     265565
IP address blocks:        2806:315::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a4:bf:9e:ff:86:57:78:d4:a1:19:b3:82:5f:e1:92:8c:ed:eb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119B7B5F0187CFCFD24CA5A7035670D2F09936C2
        Validity
            Not Before: Aug 29 21:40:00 2024 GMT
            Not After : Aug 28 21:45:00 2025 GMT
        Subject: CN=0C7B7318A9F8D25364557041B059B48769DBD282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c7:40:9f:c9:e0:e2:59:30:47:26:1f:5d:96:
                    a4:ab:a1:4c:49:84:26:8a:2f:67:2f:4b:71:4e:71:
                    e2:fd:59:6b:75:e1:ba:3e:ce:0e:73:6c:c2:12:c2:
                    da:68:d7:eb:2b:75:e1:9d:b5:14:42:ee:28:e7:57:
                    75:8f:e8:8a:a2:ab:74:fe:8f:3c:5c:3e:3b:7c:3c:
                    2e:80:87:61:27:59:89:8b:d7:a1:78:cc:ef:27:30:
                    06:41:4f:72:3b:6e:b2:e8:83:e5:96:42:a5:9c:d2:
                    19:1f:4a:79:8a:98:ef:f1:69:f8:b9:99:29:06:82:
                    81:60:36:03:ea:e9:44:91:11:fe:a9:52:eb:7d:92:
                    00:53:1e:ea:43:e8:6b:9c:d2:7e:d2:47:75:81:ed:
                    07:2f:3c:78:6c:de:17:32:61:11:00:6d:8a:40:8b:
                    12:96:43:38:58:ac:f2:50:68:ce:b4:9a:29:4e:df:
                    7f:3a:70:e7:f8:ac:6c:1c:08:da:39:7e:7a:06:19:
                    80:32:bf:57:42:20:3e:e2:f1:fb:a9:b0:bb:6f:b6:
                    3f:f4:56:0f:d3:56:4c:84:76:b2:5b:31:cf:b8:c5:
                    47:96:22:9c:fe:c8:fb:f7:83:5d:48:0d:2f:a2:12:
                    e5:32:07:f5:60:cf:90:c3:14:1f:c3:d5:eb:47:1b:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7B:73:18:A9:F8:D2:53:64:55:70:41:B0:59:B4:87:69:DB:D2:82
            X509v3 Authority Key Identifier:
                keyid:11:9B:7B:5F:01:87:CF:CF:D2:4C:A5:A7:03:56:70:D2:F0:99:36:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/323830363a3331353a3a2f33322d3438203d3e20323635353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:315::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:9c:c0:ae:b6:04:75:b8:ba:2b:65:5d:bc:36:22:8b:dd:a3:
         20:e8:6b:26:df:6f:1a:37:37:ff:72:b1:7b:d6:1d:d6:e6:10:
         cf:e6:b1:6f:e7:fc:f3:14:8f:ec:16:49:df:50:a2:7c:df:74:
         0c:38:1e:2b:75:d7:54:83:77:31:e7:7b:8e:1b:2f:ad:9c:86:
         ae:26:36:e4:3a:c9:a0:03:d2:5f:20:6b:ce:53:a1:24:c9:9f:
         a8:63:42:94:3f:20:3f:7f:e8:86:b9:79:b6:a1:23:cd:be:98:
         d1:96:18:85:5e:20:db:a0:fb:9c:56:1a:2d:db:21:04:8d:ac:
         b8:d0:8a:2d:93:73:00:13:e9:fa:43:98:cb:c3:4e:aa:77:5e:
         34:dd:f0:da:2a:44:9c:33:89:dd:11:35:7a:62:8a:bf:b8:03:
         34:a9:a8:a2:93:8c:86:a3:5c:dd:22:47:d5:8f:aa:18:2b:85:
         16:06:e1:5e:13:4c:4e:83:ea:01:60:c2:0a:2c:40:9c:d3:09:
         f2:6c:03:31:fd:e3:b6:53:c8:83:95:b4:c5:a9:a9:65:bb:6e:
         2c:82:23:1f:cd:e0:88:f8:41:67:69:5a:b7:9e:66:11:90:4f:
         b6:a1:0e:1e:63:3b:9d:50:30:98:d1:44:7e:b7:51:62:e8:04:
         fa:ec:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org