Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/323830363a3332623a3a2f33322d3438203d3e203238333837.roa
File:                     323830363a3332623a3a2f33322d3438203d3e203238333837.roa (raw, json)
Hash identifier:          /cYMoOGTdPoOPAxqQc6pn/F6UlrvvoqjLdBxCGmgAds=
Subject key identifier:   6E:5E:98:86:E5:D2:A0:54:B5:A6:45:A2:8E:29:88:34:A9:57:EB:CC
Certificate issuer:       /CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
Certificate serial:       32D461A40F12ACD7B97E3138DE94E9CCDE7E6EA6
Authority key identifier: A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/323830363a3332623a3a2f33322d3438203d3e203238333837.roa
Signing time:             Wed 08 May 2024 16:00:00 +0000
ROA not before:           Wed 08 May 2024 15:55:00 +0000
ROA not after:            Wed 07 May 2025 16:00:00 +0000
asID:                     28387
IP address blocks:        2806:32b::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d4:61:a4:0f:12:ac:d7:b9:7e:31:38:de:94:e9:cc:de:7e:6e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
        Validity
            Not Before: May  8 15:55:00 2024 GMT
            Not After : May  7 16:00:00 2025 GMT
        Subject: CN=6E5E9886E5D2A054B5A645A28E298834A957EBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:db:3e:b1:19:26:94:17:28:c7:ef:4c:2f:
                    f9:f3:70:ae:5f:8f:72:dc:10:8c:12:42:07:70:9e:
                    db:b1:39:3e:8a:be:36:90:1a:df:d8:b5:22:3e:a4:
                    97:24:30:17:5b:f1:09:2a:d1:9b:c0:bf:a7:c7:b7:
                    68:a2:5c:f3:02:41:86:5b:62:53:c6:26:4c:a2:20:
                    17:91:15:2c:4e:2d:74:be:2f:03:98:9e:50:62:3a:
                    b6:ac:9b:9c:57:56:35:69:3e:67:1c:65:7b:cd:ad:
                    08:f8:ef:87:88:e9:f3:10:83:9e:af:93:d7:42:21:
                    bc:ee:4b:51:7e:63:0c:49:ba:fb:75:89:d6:91:7e:
                    9d:95:30:fc:69:7d:15:b4:a8:b3:e7:95:0f:ee:4f:
                    f9:0a:45:aa:d6:a7:26:79:22:64:e3:b9:64:65:44:
                    1e:49:92:66:8b:12:ca:31:5a:28:da:b0:fb:24:ef:
                    91:61:3b:99:7f:00:b1:75:09:b7:84:1c:6e:a9:40:
                    10:7e:6b:b8:e9:06:9e:13:c0:0f:bb:bf:38:82:74:
                    29:36:87:ef:d9:cb:f7:44:71:68:32:03:96:59:6f:
                    37:17:18:d7:29:7f:e7:c7:12:c3:42:87:80:b6:7f:
                    a8:db:47:b7:f9:f2:d3:76:81:d1:88:c8:47:1e:f4:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:98:86:E5:D2:A0:54:B5:A6:45:A2:8E:29:88:34:A9:57:EB:CC
            X509v3 Authority Key Identifier:
                keyid:A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/323830363a3332623a3a2f33322d3438203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32b::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:17:4f:a5:22:ce:f2:dc:10:1f:87:ab:1b:65:3a:dd:27:9a:
         83:48:d2:87:f1:f7:fb:8a:6d:c1:87:6c:d8:fb:70:eb:6a:43:
         c0:1d:ef:0e:4a:0b:41:80:3b:37:89:ed:f4:7e:1e:cd:99:2d:
         32:91:da:af:a9:30:a8:6c:fe:52:1e:b0:b4:12:fd:86:cd:79:
         1a:50:7f:7f:f3:bd:23:6b:ca:68:b2:7d:9a:7d:c5:23:3b:91:
         78:d5:b4:78:69:8b:1d:bf:e7:7a:2e:f8:a7:13:ff:cf:a2:0f:
         e5:8d:61:28:59:0d:f6:ce:50:06:af:48:5e:c3:be:3c:17:43:
         49:3a:de:cb:a0:ce:df:a1:5f:13:f7:4a:d4:03:cb:e1:a2:bd:
         c8:1b:47:78:be:b4:76:1b:cd:b8:65:62:0b:dd:0b:02:ba:91:
         52:43:58:09:a8:be:73:4e:02:c7:8a:4c:14:bf:a5:f8:84:ec:
         99:59:c6:d7:6a:da:5b:bf:3f:30:b3:bf:57:45:99:0f:69:77:
         05:60:80:77:4a:63:cc:a3:82:3c:1a:26:98:8a:22:58:ba:bc:
         de:63:2b:ea:a5:03:28:03:45:55:94:7b:11:e1:33:67:6d:1f:
         93:9c:2c:e6:89:23:c5:a1:c3:2a:88:c4:b1:f0:fb:96:cc:1a:
         d0:88:8e:8f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUMtRhpA8SrNe5fjE43pTpzN5+bqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRCMjk4NkY3QThDQzExNEVGQjAwRTRBM0Y0QzVGNkY0
QTY5MEQxMzAeFw0yNDA1MDgxNTU1MDBaFw0yNTA1MDcxNjAwMDBaMDMxMTAvBgNV
BAMTKDZFNUU5ODg2RTVEMkEwNTRCNUE2NDVBMjhFMjk4ODM0QTk1N0VCQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNds+sRkmlBcox+9ML/nzcK5f
j3LcEIwSQgdwntuxOT6KvjaQGt/YtSI+pJckMBdb8Qkq0ZvAv6fHt2iiXPMCQYZb
YlPGJkyiIBeRFSxOLXS+LwOYnlBiOrasm5xXVjVpPmccZXvNrQj474eI6fMQg56v
k9dCIbzuS1F+YwxJuvt1idaRfp2VMPxpfRW0qLPnlQ/uT/kKRarWpyZ5ImTjuWRl
RB5JkmaLEsoxWijasPsk75FhO5l/ALF1CbeEHG6pQBB+a7jpBp4TwA+7vziCdCk2
h+/Zy/dEcWgyA5ZZbzcXGNcpf+fHEsNCh4C2f6jbR7f58tN2gdGIyEce9NfVAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUbl6YhuXSoFS1pkWijimINKlX68wwHwYDVR0j
BBgwFoAUpLKYb3qMwRTvsA5KP0xfb0ppDRMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjEwQzU4NTE5QzU0MkFFQUE4N0NDQzRCNUYxQUVBRjRB
QUQwNjNBQjNFMUY1MjFGMkVBNjI0REMwRkE5MkI2LzAvQTRCMjk4NkY3QThDQzEx
NEVGQjAwRTRBM0Y0QzVGNkY0QTY5MEQxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEIyOTg2RjdBOENDMTE0RUZC
MDBFNEEzRjRDNUY2RjRBNjkwRDEzLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODIxMEM1ODUxOUM1NDJBRUFBODdDQ0M0QjVGMUFFQUY0QUFEMDYzQUIz
RTFGNTIxRjJFQTYyNERDMEZBOTJCNi8wLzMyMzgzMDM2M2EzMzMyNjIzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM4MzMzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYDKzANBgkq
hkiG9w0BAQsFAAOCAQEAURdPpSLO8twQH4erG2U63Seag0jSh/H3+4ptwYds2Ptw
62pDwB3vDkoLQYA7N4nt9H4ezZktMpHar6kwqGz+Uh6wtBL9hs15GlB/f/O9I2vK
aLJ9mn3FIzuReNW0eGmLHb/nei74pxP/z6IP5Y1hKFkN9s5QBq9IXsO+PBdDSTre
y6DO36FfE/dK1APL4aK9yBtHeL60dhvNuGViC90LArqRUkNYCai+c04Cx4pMFL+l
+ITsmVnG12raW78/MLO/V0WZD2l3BWCAd0pjzKOCPBommIoiWLq83mMr6qUDKANF
VZR7EeEzZ20fk5ws5okjxaHDKojEsfD7lswa0IiOjw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org