Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d313238203d3e20323632313936.roa
File:                     323830303a6162303a3a2f33322d313238203d3e20323632313936.roa (raw, json)
Hash identifier:          99H/WdutEA5HqTzIAa7GhM8ZH7iKN7nz/D6cKpivkwM=
Subject key identifier:   C0:15:71:2A:03:21:3B:3A:25:F5:72:8E:89:28:9A:B6:E5:AE:5C:7F
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       1A571FF3008ADEA500709483E0F31CAFC4BCF6DB
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d313238203d3e20323632313936.roa
Signing time:             Tue 05 Mar 2024 17:53:36 +0000
ROA not before:           Tue 05 Mar 2024 17:48:36 +0000
ROA not after:            Tue 04 Mar 2025 17:53:36 +0000
asID:                     262196
IP address blocks:        2800:ab0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:57:1f:f3:00:8a:de:a5:00:70:94:83:e0:f3:1c:af:c4:bc:f6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Mar  5 17:48:36 2024 GMT
            Not After : Mar  4 17:53:36 2025 GMT
        Subject: CN=C015712A03213B3A25F5728E89289AB6E5AE5C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:94:2c:aa:89:68:e2:32:6e:bb:88:64:51:
                    65:0c:de:88:f7:ec:2f:ef:13:0b:47:6c:03:cc:17:
                    bf:16:4b:bc:5e:b1:ac:28:ba:d9:d4:3c:c8:33:73:
                    fd:32:09:17:05:a5:05:1f:3e:54:3a:21:d3:99:be:
                    a7:a8:bf:5d:fb:6b:a8:28:58:2b:fb:56:02:42:d1:
                    48:7e:b7:62:1e:de:69:95:29:84:77:53:46:15:0d:
                    0f:83:19:34:71:4e:61:b6:d1:47:e0:13:8a:f1:16:
                    1b:0d:92:b6:92:5c:c8:e6:a3:49:49:08:31:ef:95:
                    44:9d:3b:29:28:b6:46:52:89:59:3b:b0:d9:8b:d4:
                    2e:8b:87:f6:b4:34:c7:83:9b:ef:e8:09:90:89:57:
                    aa:d7:4c:5b:14:dd:42:16:89:b5:b3:b6:e1:4b:c9:
                    86:80:04:f2:7c:f0:c7:22:e5:d5:4d:a6:3c:ac:91:
                    18:25:83:af:19:cb:b3:a9:53:e8:ad:4e:3e:e5:0e:
                    b9:28:13:f3:33:98:d6:3e:1b:a1:51:d5:d2:7a:94:
                    82:16:0d:9f:bc:c5:33:81:d8:6d:5e:ee:04:ec:64:
                    93:61:05:4d:c9:70:55:b3:b7:f4:80:fe:fe:bd:fa:
                    41:2f:d2:46:cf:c1:e5:c8:84:e6:28:29:23:3e:b5:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:15:71:2A:03:21:3B:3A:25:F5:72:8E:89:28:9A:B6:E5:AE:5C:7F
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d313238203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:74:1e:50:5d:dc:fd:90:f9:f2:7f:f7:e4:79:86:67:6c:f6:
         eb:36:66:65:98:c8:c2:ca:65:82:2c:83:11:41:5e:7d:62:9c:
         b3:2b:f5:0c:68:13:b0:e0:eb:6b:c2:30:ee:e7:29:74:4c:3b:
         87:c6:f0:ed:14:7c:24:f8:5b:75:06:45:76:98:b8:db:dc:52:
         bc:14:a4:a5:6b:d7:35:d4:6d:b8:86:aa:29:4a:53:fe:01:fb:
         1f:ef:43:8e:a9:6b:37:6c:18:49:b2:74:5a:6f:2e:5b:38:59:
         58:e3:e7:0d:fc:ba:fe:67:d8:af:d9:88:ac:70:36:af:e0:ca:
         17:cb:a2:8e:6e:d8:88:fb:d1:77:8f:dc:18:8c:da:0f:4b:3e:
         96:61:b7:34:b4:f2:40:6c:01:92:0c:69:b3:79:31:d4:8d:ba:
         b4:b9:4e:93:c3:ba:f9:fe:f5:20:8a:04:8c:10:54:8a:1b:dc:
         78:ad:d4:46:6f:cb:b8:83:e2:b0:63:bb:14:ef:97:bc:78:08:
         56:d4:a3:83:6c:16:01:d8:97:b9:73:d5:23:c9:9f:0c:be:ce:
         bd:02:64:d4:92:33:7e:38:a2:74:b1:3c:de:06:6d:83:85:63:
         ef:2c:43:eb:1d:1b:0e:22:a9:a7:96:d5:71:1f:e2:68:e0:da:
         62:ab:cd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:49:13 2024 by rpki-client on console-fra.rpki-client.org