Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/323830363a3265633a3a2f33322d3438203d3e20323635353631.roa
File:                     323830363a3265633a3a2f33322d3438203d3e20323635353631.roa (raw, json)
Hash identifier:          +1yMbdHpX9jyoQ++ZDMD/hJ9zJgB0xeKkyC2KVWFV3E=
Subject key identifier:   12:C8:C3:E6:6E:A3:DC:85:BC:88:BE:42:93:BF:A1:CA:36:1B:D0:C5
Certificate issuer:       /CN=F3DA76435F27BF1767EBDE8272C18338BE1596E1
Certificate serial:       73B3DB3DE3EF50A177F69EADDDFFAE88DB2B2B5E
Authority key identifier: F3:DA:76:43:5F:27:BF:17:67:EB:DE:82:72:C1:83:38:BE:15:96:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/323830363a3265633a3a2f33322d3438203d3e20323635353631.roa
Signing time:             Tue 05 Mar 2024 17:50:29 +0000
ROA not before:           Tue 05 Mar 2024 17:45:29 +0000
ROA not after:            Tue 04 Mar 2025 17:50:29 +0000
asID:                     265561
IP address blocks:        2806:2ec::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b3:db:3d:e3:ef:50:a1:77:f6:9e:ad:dd:ff:ae:88:db:2b:2b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DA76435F27BF1767EBDE8272C18338BE1596E1
        Validity
            Not Before: Mar  5 17:45:29 2024 GMT
            Not After : Mar  4 17:50:29 2025 GMT
        Subject: CN=12C8C3E66EA3DC85BC88BE4293BFA1CA361BD0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:47:04:64:b8:53:6e:07:8a:51:b4:47:12:77:
                    0d:49:ea:3f:d0:e4:5e:7b:5a:25:0b:56:6e:5b:49:
                    58:00:79:a2:a1:d0:f3:d6:94:63:26:57:3b:0c:b6:
                    d2:13:d6:5d:96:2f:b4:8f:8c:64:17:86:16:07:35:
                    dd:1d:ce:0f:8c:61:b5:b1:cf:99:d3:ab:7f:da:4c:
                    59:ef:b5:d1:62:5b:4e:be:27:80:c2:46:ab:7e:a3:
                    3d:09:82:d0:b0:6e:ee:f8:f0:b0:4d:e3:5b:8c:70:
                    7b:24:ca:8d:b7:35:57:cc:f7:88:69:3e:2b:aa:5c:
                    c6:88:cb:7e:2c:ea:f8:23:da:66:f4:96:e7:70:7a:
                    bd:05:95:3b:44:cf:35:5b:a3:9d:a2:37:fa:08:5f:
                    e1:f6:04:ec:cd:bb:e5:de:6d:22:ce:ff:1b:14:9a:
                    1d:e8:12:6a:ad:8f:dd:11:8f:45:b8:1c:5c:40:79:
                    70:5a:26:93:02:d4:b2:53:47:da:56:d2:b3:47:19:
                    a9:b2:33:c5:be:bc:3b:96:fd:fc:ad:9e:33:fb:c2:
                    8b:f0:c0:10:d5:62:5b:8c:6a:ba:e8:0a:83:97:35:
                    1f:5c:fa:b0:c8:76:d6:83:79:37:ec:a3:ac:cd:d0:
                    f7:8e:53:5f:00:44:06:87:cb:3b:83:7a:26:86:28:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C8:C3:E6:6E:A3:DC:85:BC:88:BE:42:93:BF:A1:CA:36:1B:D0:C5
            X509v3 Authority Key Identifier:
                keyid:F3:DA:76:43:5F:27:BF:17:67:EB:DE:82:72:C1:83:38:BE:15:96:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/323830363a3265633a3a2f33322d3438203d3e20323635353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:56:09:7e:ae:50:9e:3e:f1:cf:7a:a0:37:49:c7:25:ab:48:
         a1:44:2f:7f:5b:40:2d:6f:22:62:18:c3:a1:0c:9c:a1:a0:cb:
         83:47:5c:1c:d4:27:b0:a2:a2:52:61:a2:d4:78:d2:a1:5a:83:
         3d:29:5a:e8:a7:fb:10:ff:c8:e0:9c:d6:28:a9:03:18:43:e0:
         82:30:2b:1f:2c:3c:e9:67:73:7a:6d:2a:68:e0:05:2e:52:ae:
         51:dc:5f:7a:e1:ff:b1:f3:03:2c:cf:8c:cb:f0:95:62:8c:ea:
         c8:f4:d3:3c:0b:b9:06:05:f9:ea:eb:5f:cf:ae:d5:8c:f8:3c:
         68:30:3c:da:c1:2e:9a:4a:70:7f:97:0d:f4:d9:fb:eb:7d:38:
         c9:c1:fc:16:5d:0c:48:2a:1d:44:5b:16:db:91:6e:07:13:e4:
         f2:33:98:e4:a7:2f:ca:99:08:19:f0:90:ca:63:e7:62:1d:f4:
         26:50:e7:21:81:eb:d8:45:2c:06:15:e3:18:60:aa:48:be:a3:
         b2:04:20:a1:87:3b:90:73:1b:03:b5:e6:cf:cb:71:73:ae:0a:
         c6:3d:9a:a3:0d:da:77:04:07:92:45:78:73:06:79:1f:6c:9d:
         c3:71:09:9a:af:e9:8b:17:3b:a8:8b:1d:fa:a6:7a:13:62:ea:
         a4:6c:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org