Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
File:                     323830363a3231663a3a2f33322d3332203d3e20323635353034.roa (raw, json)
Hash identifier:          tlIQdgUXIjrWmkfgDt71r4yFVz6O6MIgLp1Oe0vIM3o=
Subject key identifier:   2E:0E:3D:C2:2E:9D:2D:82:38:A8:20:F5:0F:CA:C0:71:D2:2D:F0:33
Certificate issuer:       /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial:       32D23955F90C259701CBE251F2FDCDDD81C7D44E
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
Signing time:             Tue 05 Mar 2024 18:23:14 +0000
ROA not before:           Tue 05 Mar 2024 18:18:14 +0000
ROA not after:            Tue 04 Mar 2025 18:23:14 +0000
asID:                     265504
IP address blocks:        2806:21f::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
                          rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d2:39:55:f9:0c:25:97:01:cb:e2:51:f2:fd:cd:dd:81:c7:d4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
        Validity
            Not Before: Mar  5 18:18:14 2024 GMT
            Not After : Mar  4 18:23:14 2025 GMT
        Subject: CN=2E0E3DC22E9D2D8238A820F50FCAC071D22DF033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:2f:18:52:b1:4a:f5:23:33:9f:b0:86:61:
                    4c:9b:f7:c5:b7:7d:b4:06:15:a3:bb:2f:36:d8:58:
                    f3:07:c2:87:8a:a9:3f:66:72:7d:1b:0d:31:04:3d:
                    1a:bc:f7:e1:86:40:aa:2e:20:77:b5:9b:74:95:26:
                    65:a0:ce:31:2d:89:2a:9b:21:59:a2:8c:c7:0a:02:
                    db:4d:91:78:50:8e:ef:a3:fa:8c:e2:ae:a1:fe:c8:
                    aa:12:85:9e:1c:98:0f:06:ab:d7:02:01:e5:b4:01:
                    28:cb:47:d2:c3:7d:7e:2d:11:fc:eb:34:b3:21:f0:
                    cd:75:0f:2a:e7:16:5b:3d:47:89:43:8e:d0:10:37:
                    a3:c0:2d:c1:e1:4d:18:0f:ed:4a:fd:07:57:16:49:
                    35:4a:3a:83:71:de:76:a9:6f:6c:15:8f:d4:ec:81:
                    50:2e:18:06:1d:0b:ef:41:31:09:a7:4a:3e:0a:d7:
                    1a:f8:7b:7b:96:cb:96:e1:35:2a:e0:58:57:c5:da:
                    5a:45:50:58:3f:ae:ab:bf:55:38:b6:5b:fd:96:56:
                    40:eb:b6:12:6e:dd:43:ee:70:26:fe:4c:e1:0b:55:
                    4b:22:55:0d:60:85:5a:9a:c2:ed:4e:75:8e:a4:bc:
                    a4:7c:3a:21:c8:32:54:49:2f:ee:13:f5:ab:95:4d:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0E:3D:C2:2E:9D:2D:82:38:A8:20:F5:0F:CA:C0:71:D2:2D:F0:33
            X509v3 Authority Key Identifier:
                keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21f::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:f5:6b:3f:ff:ea:b8:ae:c4:af:ee:52:8d:55:b4:51:5a:69:
         ed:48:c1:98:0d:44:44:85:18:38:2a:c0:82:98:84:45:4a:b7:
         5b:5b:8b:f2:c7:20:cd:9a:35:fd:90:da:40:38:e2:9e:e1:9f:
         88:f0:13:7d:3f:f7:19:62:65:68:dd:e6:9f:02:0d:7e:94:78:
         df:7c:2c:b5:bb:6e:f5:7b:ad:ce:94:11:24:a6:08:30:aa:c9:
         93:04:dc:f8:7e:59:9f:ab:cb:ee:8f:d7:d4:72:ba:f0:6c:2f:
         90:92:2d:17:02:71:e1:00:49:40:7a:14:6a:ec:2b:40:e6:ee:
         7d:3e:fe:06:a2:7d:3e:34:9c:21:0e:58:d8:92:c2:d3:1c:ff:
         37:30:bf:96:2b:00:5d:eb:90:3a:0f:fb:f5:3e:41:d8:a9:88:
         48:4c:2e:1c:01:2a:40:63:37:ad:d9:ed:6f:3a:34:99:82:18:
         ab:6e:04:89:81:d5:75:53:34:26:64:39:0b:ab:0a:1d:78:99:
         8c:99:dc:fa:f8:e0:05:a1:ab:58:27:f5:75:9b:9f:8b:cc:6c:
         27:68:b3:98:96:c7:3c:4b:44:df:14:03:01:88:b8:72:ed:f9:
         b1:a3:44:dd:0b:8c:d6:7a:6b:3b:b8:df:3d:15:7b:b5:b3:14:
         b3:72:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org