Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/323830363a3366393a383030303a3a2f33332d3333203d3e203238343531.roa
File:                     323830363a3366393a383030303a3a2f33332d3333203d3e203238343531.roa (raw, json)
Hash identifier:          tXaZN+JE/x6KLTtmxlQ/94UIS4BUBpahQnoU2GxvE6E=
Subject key identifier:   5A:76:B0:4F:D9:10:66:F8:EE:80:57:54:A9:43:2B:44:99:5B:FD:7A
Certificate issuer:       /CN=44E64485724E968388B6E813B4E688D91A27BC21
Certificate serial:       41875E211367C931C6C6CBACA2F2A7494CBE120B
Authority key identifier: 44:E6:44:85:72:4E:96:83:88:B6:E8:13:B4:E6:88:D9:1A:27:BC:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44E64485724E968388B6E813B4E688D91A27BC21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/323830363a3366393a383030303a3a2f33332d3333203d3e203238343531.roa
Signing time:             Tue 05 Mar 2024 17:57:52 +0000
ROA not before:           Tue 05 Mar 2024 17:52:52 +0000
ROA not after:            Tue 04 Mar 2025 17:57:52 +0000
asID:                     28451
IP address blocks:        2806:3f9:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/44E64485724E968388B6E813B4E688D91A27BC21.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/44E64485724E968388B6E813B4E688D91A27BC21.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44E64485724E968388B6E813B4E688D91A27BC21.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:87:5e:21:13:67:c9:31:c6:c6:cb:ac:a2:f2:a7:49:4c:be:12:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E64485724E968388B6E813B4E688D91A27BC21
        Validity
            Not Before: Mar  5 17:52:52 2024 GMT
            Not After : Mar  4 17:57:52 2025 GMT
        Subject: CN=5A76B04FD91066F8EE805754A9432B44995BFD7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:ed:94:9f:4b:ba:4a:01:2e:ce:af:65:cc:
                    bb:0d:76:be:4d:5f:b4:79:ee:57:b4:44:fb:71:33:
                    57:b3:18:45:01:b8:e8:47:2f:1f:74:b8:13:22:0c:
                    f3:0c:76:db:b3:cd:7b:5f:7c:f5:74:e0:a1:14:cd:
                    f3:9d:8c:b2:1b:d3:b8:fb:22:e8:42:c5:0c:44:e4:
                    60:15:b9:cb:c6:99:d5:7f:8e:45:66:47:58:5f:25:
                    7e:6d:ac:fd:e8:50:40:81:43:1e:40:ba:d3:c3:d3:
                    6c:5d:99:c1:c8:d9:93:88:f4:41:2d:ef:51:5c:64:
                    6d:bd:ba:cc:d6:ed:99:fb:b4:df:ad:fd:80:26:67:
                    f2:db:f1:04:8b:1b:0f:a5:2a:d2:f9:45:c0:64:ef:
                    62:58:bd:7a:42:89:f6:d9:a8:14:d4:7b:ab:1b:27:
                    85:04:b0:00:cb:b2:c7:02:86:c2:24:5b:84:20:33:
                    f6:3c:54:4d:96:21:11:40:5e:36:01:a1:ed:51:31:
                    95:8c:0b:ce:24:c1:25:7c:d8:27:3c:b5:9d:7e:ee:
                    bf:03:20:3b:fa:bf:3f:34:c7:c0:8c:90:ab:b7:cc:
                    41:7c:6b:35:4b:90:94:61:05:c5:ea:0b:1a:ae:16:
                    f9:54:0e:46:e3:32:b1:c1:49:a0:62:b7:10:a6:e4:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:76:B0:4F:D9:10:66:F8:EE:80:57:54:A9:43:2B:44:99:5B:FD:7A
            X509v3 Authority Key Identifier:
                keyid:44:E6:44:85:72:4E:96:83:88:B6:E8:13:B4:E6:88:D9:1A:27:BC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/44E64485724E968388B6E813B4E688D91A27BC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44E64485724E968388B6E813B4E688D91A27BC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/323830363a3366393a383030303a3a2f33332d3333203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:2a:bb:8d:3b:c5:47:00:38:2c:c4:68:33:5b:f7:3d:7d:8b:
         73:22:3b:b8:df:ae:72:dd:1a:76:aa:3e:e7:cc:77:8f:c3:33:
         ef:cc:01:2f:c2:33:78:3d:2c:4d:1b:31:83:0e:f5:11:a1:18:
         11:bd:a9:e0:80:bd:14:9e:2c:f1:5f:9a:d1:e0:8a:24:ff:94:
         e8:59:d0:30:5f:66:96:b1:46:9e:aa:82:62:f9:03:36:02:e6:
         34:b8:03:86:16:02:ec:af:bd:0d:63:fe:98:ed:20:96:02:65:
         80:6f:b7:1a:e8:9c:05:cd:4c:68:22:75:ac:25:ab:bc:22:73:
         5e:e8:7c:f6:c9:19:90:2f:86:65:f6:67:08:81:5c:af:39:90:
         c1:cb:e7:08:6e:f3:c3:75:a6:b4:b4:6a:48:a1:12:e3:5f:28:
         2a:13:ef:47:b7:c6:47:fa:e7:8e:6d:2f:55:e9:0b:79:56:b3:
         ed:49:c2:b0:fd:4a:41:0f:25:76:79:77:8b:78:0c:1f:23:bd:
         88:ac:bc:58:d1:62:3a:f7:55:78:b3:8e:db:fe:4e:ce:e7:cd:
         84:30:ae:11:04:8f:b5:89:3c:d6:a4:a2:e1:3a:30:dc:d9:3f:
         8f:41:cf:e3:1f:85:e7:97:59:55:80:fa:cb:5f:98:2e:98:6c:
         ca:8e:1e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org