Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/807914E14E9C5958B107DB95196ACC8D207E47C6AD63F722C3A514D0B4EA3CB3/0/323830363a3361653a3a2f33322d3332203d3e20323635353837.roa
File:                     323830363a3361653a3a2f33322d3332203d3e20323635353837.roa (raw, json)
Hash identifier:          Ydh9OKl/85npMlE3kP2iAVWW0hWduK1AYGfrsHl8j5o=
Subject key identifier:   16:F2:42:65:F6:97:03:A9:08:86:D0:A6:E9:35:1D:10:E6:DB:D3:EA
Certificate issuer:       /CN=E5D7C1AD004D577C7F3BA88C6F4EC93B85B253C6
Certificate serial:       19D090519CD20239222CB165A2A7EDFDEA876DBE
Authority key identifier: E5:D7:C1:AD:00:4D:57:7C:7F:3B:A8:8C:6F:4E:C9:3B:85:B2:53:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5D7C1AD004D577C7F3BA88C6F4EC93B85B253C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/807914E14E9C5958B107DB95196ACC8D207E47C6AD63F722C3A514D0B4EA3CB3/0/323830363a3361653a3a2f33322d3332203d3e20323635353837.roa
Signing time:             Tue 05 Mar 2024 18:00:48 +0000
ROA not before:           Tue 05 Mar 2024 17:55:48 +0000
ROA not after:            Tue 04 Mar 2025 18:00:48 +0000
asID:                     265587
IP address blocks:        2806:3ae::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/807914E14E9C5958B107DB95196ACC8D207E47C6AD63F722C3A514D0B4EA3CB3/0/E5D7C1AD004D577C7F3BA88C6F4EC93B85B253C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/807914E14E9C5958B107DB95196ACC8D207E47C6AD63F722C3A514D0B4EA3CB3/0/E5D7C1AD004D577C7F3BA88C6F4EC93B85B253C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5D7C1AD004D577C7F3BA88C6F4EC93B85B253C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d0:90:51:9c:d2:02:39:22:2c:b1:65:a2:a7:ed:fd:ea:87:6d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D7C1AD004D577C7F3BA88C6F4EC93B85B253C6
        Validity
            Not Before: Mar  5 17:55:48 2024 GMT
            Not After : Mar  4 18:00:48 2025 GMT
        Subject: CN=16F24265F69703A90886D0A6E9351D10E6DBD3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:52:cb:4d:8e:ef:1a:08:75:a3:b4:e7:9d:
                    11:02:ee:a6:ce:5b:95:21:4b:fb:42:38:2f:61:d6:
                    14:9a:23:b7:30:8a:61:85:8b:c3:37:3e:6a:16:8c:
                    6f:ee:b5:d3:ea:6d:4d:fd:b1:ce:25:58:9f:b1:7b:
                    1e:0f:5c:34:8f:5d:3e:2a:dd:87:ea:95:69:09:d3:
                    c5:3a:78:d7:df:a4:3c:75:f0:cb:8f:b6:0e:ef:88:
                    9a:90:8d:fc:f3:63:38:ea:84:34:f1:b7:71:d6:eb:
                    0c:b7:83:6c:fc:f1:44:58:83:60:a8:a3:e4:12:1a:
                    3f:65:67:75:4b:bf:02:0b:31:c0:23:62:48:b8:65:
                    14:ad:98:4b:46:04:2f:98:85:72:7e:6d:9c:6a:72:
                    0d:5d:8d:e8:be:2d:c9:08:20:c0:65:a0:92:41:f5:
                    0b:6f:d3:77:30:82:8b:bf:c0:76:8a:ad:32:21:23:
                    8f:79:ec:5d:4c:65:a5:1d:d1:e2:9b:61:bc:4a:f3:
                    25:95:f5:90:1f:15:53:f8:3e:57:22:4e:6a:a4:cc:
                    c4:b9:03:5a:26:ba:7c:9f:db:a6:4d:ad:7c:be:f9:
                    bc:11:f6:a0:49:56:6d:ca:24:41:76:96:16:c7:6f:
                    38:71:9f:19:fb:a4:ef:9a:f3:ba:3b:23:aa:ed:19:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:42:65:F6:97:03:A9:08:86:D0:A6:E9:35:1D:10:E6:DB:D3:EA
            X509v3 Authority Key Identifier:
                keyid:E5:D7:C1:AD:00:4D:57:7C:7F:3B:A8:8C:6F:4E:C9:3B:85:B2:53:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/807914E14E9C5958B107DB95196ACC8D207E47C6AD63F722C3A514D0B4EA3CB3/0/E5D7C1AD004D577C7F3BA88C6F4EC93B85B253C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5D7C1AD004D577C7F3BA88C6F4EC93B85B253C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/807914E14E9C5958B107DB95196ACC8D207E47C6AD63F722C3A514D0B4EA3CB3/0/323830363a3361653a3a2f33322d3332203d3e20323635353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ae::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:f8:d0:34:e1:bb:e1:35:27:cb:a4:f4:ef:06:16:b0:30:47:
         6e:97:cb:bd:c2:73:90:0f:7b:d6:b0:38:c4:c0:b4:ba:ab:5b:
         d3:11:8e:8a:16:71:d3:ce:e2:1b:b1:a8:47:1a:6f:db:8d:36:
         ee:d8:fd:4b:09:c7:f8:75:75:11:ec:fb:61:21:be:40:5b:32:
         62:43:93:ee:c8:bb:02:83:70:50:43:a5:98:50:64:04:f2:8b:
         16:ff:d9:ac:d7:5e:84:fd:0c:a6:bb:18:fd:db:36:17:2d:3d:
         d3:35:8b:69:be:98:91:70:0b:03:cc:33:33:7e:47:80:50:35:
         cd:f4:dc:45:f2:72:0e:8e:4a:73:8d:35:f4:8f:81:1b:5c:c6:
         ed:38:c0:27:fa:c9:90:30:1d:8a:bb:d1:76:92:56:42:f3:09:
         0a:8a:6f:de:aa:91:54:bb:d8:05:59:f7:23:0d:ad:0e:44:59:
         c9:76:07:b5:0c:1c:62:96:ae:be:84:9a:1f:14:fd:d5:93:14:
         3c:9c:be:0a:be:8a:ce:70:74:8d:6a:ac:33:25:b0:e0:94:b7:
         30:b6:b2:e9:32:48:be:93:a3:0e:3b:09:63:c3:35:de:e5:82:
         8a:56:96:19:68:6d:de:c4:f0:ff:3f:9f:e7:c3:6b:81:5e:82:
         4b:3f:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 12:31:26 2024 by rpki-client on console-ams.rpki-client.org