Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa
File:                     323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (raw, json)
Hash identifier:          Ww8Z3jSheGqTG4qdgMsE/dMX1PN+b0x8QpIXxQAmp9Y=
Subject key identifier:   95:B9:EA:D5:67:9D:B8:71:B0:48:2E:26:6F:C7:58:C4:B8:52:42:57
Certificate issuer:       /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial:       77CB7A83C017097F2BFEF2CD1A0AD3BE348BACEC
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa
Signing time:             Tue 05 Mar 2024 17:46:00 +0000
ROA not before:           Tue 05 Mar 2024 17:41:00 +0000
ROA not after:            Tue 04 Mar 2025 17:46:00 +0000
asID:                     265598
IP address blocks:        2806:348::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cb:7a:83:c0:17:09:7f:2b:fe:f2:cd:1a:0a:d3:be:34:8b:ac:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
        Validity
            Not Before: Mar  5 17:41:00 2024 GMT
            Not After : Mar  4 17:46:00 2025 GMT
        Subject: CN=95B9EAD5679DB871B0482E266FC758C4B8524257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:de:07:d8:99:3f:b0:64:62:89:fd:36:e6:
                    24:8f:81:45:e8:93:ff:b9:3f:68:f4:33:1b:01:13:
                    99:d9:58:d4:fb:12:16:98:d9:ef:26:76:89:c4:ef:
                    a1:d5:ed:41:9f:38:00:c2:ea:47:37:e4:b1:41:c4:
                    1f:48:17:fb:54:4e:eb:b6:f4:6f:67:13:88:d3:4f:
                    ff:73:86:98:60:86:b7:6c:0f:69:9d:5c:57:e6:cb:
                    84:22:ad:58:66:f8:64:cb:a8:07:c0:b1:b4:dc:b0:
                    b7:e4:16:7c:70:5b:27:60:a2:19:c1:b6:7c:37:f9:
                    c4:bf:44:01:3f:af:76:60:f1:bf:24:25:a6:6b:d5:
                    7b:b5:29:85:8c:b8:9f:fe:75:60:c0:21:21:31:fe:
                    0b:e5:5e:f8:ac:e4:d3:f5:a4:66:da:cd:ca:2b:ab:
                    07:c9:3c:d9:50:1b:a5:20:c9:6e:32:cf:2d:f0:e1:
                    91:a1:0d:08:8d:3d:59:12:a8:03:46:51:87:de:87:
                    43:af:7a:41:08:13:fb:cc:85:e9:c2:42:c6:c7:2a:
                    66:11:f5:94:90:29:27:38:0f:15:3d:e0:54:c3:71:
                    2d:e8:28:0a:c9:03:c2:95:f7:12:de:99:d8:5d:e9:
                    5d:11:3f:0b:52:ae:97:5b:49:f5:27:09:b9:f6:30:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:EA:D5:67:9D:B8:71:B0:48:2E:26:6F:C7:58:C4:B8:52:42:57
            X509v3 Authority Key Identifier:
                keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:f6:7b:54:62:13:73:4b:4a:7e:80:f8:1a:fd:d7:b4:af:
         9b:69:99:48:f2:a8:0e:84:eb:1a:41:90:d8:e7:73:93:c2:5b:
         54:45:60:98:ac:d3:5d:fb:23:34:83:0b:bb:d8:a0:40:6d:27:
         de:5e:d1:e9:90:89:d9:06:37:e9:12:bb:01:f6:15:ee:0e:4e:
         a5:95:39:33:30:f5:14:05:85:59:25:90:bb:c9:73:c6:00:bd:
         4a:17:75:b6:a1:83:1f:d1:05:75:b8:a3:9f:1c:c2:bd:0f:12:
         dd:eb:0a:1e:a4:2b:02:f8:5c:08:21:f9:b3:c0:56:d5:27:f4:
         2a:f0:67:bc:44:b5:d2:a0:5d:9a:e9:a5:d9:26:2a:1e:54:95:
         20:3b:34:be:e0:97:bf:fc:78:49:8b:4e:e7:4c:0a:28:89:02:
         31:c5:60:8b:06:58:c2:bd:a3:56:1e:83:52:3f:5d:7a:d8:7c:
         61:40:ad:76:3e:ec:70:27:7e:3a:7c:d0:7b:e8:a7:10:6a:ea:
         71:c8:c2:03:39:fe:f6:9e:66:5d:29:e6:b0:db:91:5f:c2:00:
         7f:5a:69:2b:32:7d:96:2b:fc:f8:d3:60:0e:ff:95:1e:40:20:
         d6:ee:c2:9e:49:b2:14:e9:e7:cd:c1:47:72:4c:0f:de:75:aa:
         9f:58:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:50:27 2024 by rpki-client on console-fra.rpki-client.org