Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa
File:                     323830363a3361643a3a2f33322d3438203d3e20323635353836.roa (raw, json)
Hash identifier:          /PwiWesvrLc9PGv0ietFeW+Vt4aGnEtvGScwFDLaSCQ=
Subject key identifier:   3F:CE:CA:DD:60:3C:A6:0F:9B:59:4B:BD:F4:CF:6F:A7:C3:77:79:28
Certificate issuer:       /CN=0064A500360F990C57B314989FD548943A9832EF
Certificate serial:       12B48AA5255C0F9D9C916C028D5F8B2831479F62
Authority key identifier: 00:64:A5:00:36:0F:99:0C:57:B3:14:98:9F:D5:48:94:3A:98:32:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0064A500360F990C57B314989FD548943A9832EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa
Signing time:             Tue 05 Mar 2024 18:13:29 +0000
ROA not before:           Tue 05 Mar 2024 18:08:29 +0000
ROA not after:            Tue 04 Mar 2025 18:13:29 +0000
asID:                     265586
IP address blocks:        2806:3ad::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/0064A500360F990C57B314989FD548943A9832EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/0064A500360F990C57B314989FD548943A9832EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0064A500360F990C57B314989FD548943A9832EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b4:8a:a5:25:5c:0f:9d:9c:91:6c:02:8d:5f:8b:28:31:47:9f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0064A500360F990C57B314989FD548943A9832EF
        Validity
            Not Before: Mar  5 18:08:29 2024 GMT
            Not After : Mar  4 18:13:29 2025 GMT
        Subject: CN=3FCECADD603CA60F9B594BBDF4CF6FA7C3777928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:00:c1:bc:99:a4:17:be:b6:ab:d9:f0:bd:
                    d5:75:cf:6c:f3:df:be:80:6e:09:a0:cc:2c:ba:be:
                    f5:3c:71:e3:f8:38:72:f7:48:32:39:0f:17:3e:b5:
                    a7:88:ea:c8:c6:5f:fa:ba:61:6d:3b:b1:b6:ab:62:
                    51:fd:ee:21:3c:34:ed:11:e4:06:e3:5c:69:e1:ad:
                    51:f5:e5:05:bf:b3:86:3d:78:eb:e7:24:4e:2e:8a:
                    e9:3a:38:3f:c9:d0:56:20:19:31:2e:66:28:50:8a:
                    aa:e9:e9:aa:b3:ba:bc:38:ae:cc:6c:37:15:cf:9a:
                    67:9a:a0:5c:6a:a8:81:a1:90:03:65:88:0c:f0:9f:
                    4a:1c:ea:31:8d:98:5a:c2:e7:7f:de:17:fb:94:dd:
                    30:a5:3d:26:b7:8c:01:c1:19:a0:95:94:d7:24:82:
                    72:92:ed:3f:d3:b2:92:70:19:bd:c5:39:1a:51:33:
                    66:78:7d:5b:6f:1b:c6:88:09:f0:9b:20:27:fd:da:
                    df:59:b2:70:c4:56:ad:41:ee:b1:1f:f8:c1:f2:56:
                    4d:d1:8e:a0:9b:ee:2a:72:98:65:70:8b:b4:9d:30:
                    f1:35:c2:85:47:e7:31:26:bc:38:27:6f:59:b9:82:
                    82:5e:df:34:3d:82:f8:a2:3e:14:23:b9:3a:63:26:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CE:CA:DD:60:3C:A6:0F:9B:59:4B:BD:F4:CF:6F:A7:C3:77:79:28
            X509v3 Authority Key Identifier:
                keyid:00:64:A5:00:36:0F:99:0C:57:B3:14:98:9F:D5:48:94:3A:98:32:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/0064A500360F990C57B314989FD548943A9832EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0064A500360F990C57B314989FD548943A9832EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ad::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:ba:6a:26:41:95:3b:43:ee:89:67:8b:b7:88:36:95:bb:
         cc:25:b0:c0:d7:f4:fd:d5:46:c0:fc:92:29:06:7d:ca:a6:49:
         49:24:54:27:18:0c:3d:ac:e7:76:de:cb:4b:ec:16:eb:a6:55:
         00:f9:06:64:24:d8:b5:6d:e9:fd:35:d6:dd:2b:2a:18:29:a7:
         50:8b:3a:73:13:1a:60:b1:30:fd:45:21:1e:f5:cc:39:8c:5f:
         ce:94:86:08:f8:0c:6c:6e:f9:49:c9:bb:74:f7:71:bd:01:44:
         18:27:05:b7:41:e3:0a:ff:1f:61:5d:17:c8:cf:a6:93:b8:68:
         51:38:0f:ca:f1:40:84:12:e6:0c:c4:5e:6d:ea:02:0e:d0:fd:
         aa:f8:06:e2:0f:40:29:34:75:55:44:d8:80:04:9c:f9:f4:1d:
         59:88:2b:93:6c:15:a0:09:04:2a:34:2d:ee:34:31:82:8a:48:
         5e:73:89:fe:92:b3:3b:8d:34:cc:94:6d:0c:65:2b:ab:8e:77:
         d8:53:63:78:00:f4:39:d3:b5:20:f5:6f:7b:bc:38:e8:be:b9:
         e4:04:70:46:78:e0:e3:5e:91:c7:52:ce:ee:a6:33:da:20:7d:
         3a:3f:65:e8:72:6c:61:cd:cc:5a:a5:2c:21:86:76:46:ab:f9:
         a0:cb:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org