Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313331.roa
File:                     323830363a3333663a3a2f33322d3332203d3e20323730313331.roa (raw, json)
Hash identifier:          4QCsfns2WcUVvFIqZlhTB0cchKgJ/grzeSWvgKOog8A=
Subject key identifier:   B7:4E:BA:02:E2:D3:52:21:3A:F5:FA:BF:2C:BD:AF:A6:1C:D8:62:98
Certificate issuer:       /CN=1253F5565479B7C7B04A2795544458932EC06F6C
Certificate serial:       5351A3B98937D0BC017C957B1DD4BD7716AD496E
Authority key identifier: 12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313331.roa
Signing time:             Tue 05 Mar 2024 17:57:16 +0000
ROA not before:           Tue 05 Mar 2024 17:52:16 +0000
ROA not after:            Tue 04 Mar 2025 17:57:16 +0000
asID:                     270131
IP address blocks:        2806:33f::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:51:a3:b9:89:37:d0:bc:01:7c:95:7b:1d:d4:bd:77:16:ad:49:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1253F5565479B7C7B04A2795544458932EC06F6C
        Validity
            Not Before: Mar  5 17:52:16 2024 GMT
            Not After : Mar  4 17:57:16 2025 GMT
        Subject: CN=B74EBA02E2D352213AF5FABF2CBDAFA61CD86298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:93:0b:9b:62:d7:fc:c8:dc:61:41:40:7c:
                    cd:99:f9:c8:82:0d:11:92:41:71:f4:02:30:0d:25:
                    c8:e2:d6:9d:2f:c4:e1:00:ed:94:df:42:59:da:e4:
                    ae:31:67:69:37:3c:b5:7a:c3:48:86:83:03:6d:f4:
                    b9:d3:25:7b:a0:b2:6a:db:15:3a:11:5d:0c:e4:e0:
                    91:24:83:2f:ab:f5:82:4d:4d:77:0f:f4:34:ef:44:
                    a7:2c:6f:15:6d:3d:18:dd:cc:88:5d:c2:91:f4:47:
                    a8:87:8d:c6:e6:f2:fb:f0:fd:ca:de:19:e8:09:44:
                    f7:2c:c6:16:ad:d2:53:9d:e3:20:a5:c4:87:30:ef:
                    f4:08:e5:cb:2f:b0:94:93:c5:e3:49:eb:ea:8a:23:
                    03:93:71:51:b9:f0:5e:17:eb:8a:95:1a:ec:89:17:
                    ad:1f:34:3e:9d:1a:38:42:05:43:8e:d2:ea:24:0e:
                    75:70:1e:4c:7d:ff:d3:f2:4c:99:0e:8a:4e:b7:94:
                    98:90:7d:e1:8f:7f:a0:15:6e:b9:ec:c8:a3:d5:87:
                    6e:53:ed:04:11:14:c9:8f:31:84:99:5e:ce:fa:04:
                    79:0a:80:9e:5c:76:b1:93:94:0a:1e:6d:99:23:5c:
                    ef:cd:83:9b:52:d2:39:50:4c:a3:02:c0:47:c4:35:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4E:BA:02:E2:D3:52:21:3A:F5:FA:BF:2C:BD:AF:A6:1C:D8:62:98
            X509v3 Authority Key Identifier:
                keyid:12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:33f::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:97:f6:e2:eb:e5:3e:6a:bb:aa:12:4f:23:c4:fb:5c:1c:da:
         56:e1:61:1f:94:ba:8f:c2:42:9f:1f:b3:eb:75:dd:63:19:fa:
         8a:a4:75:a6:6b:57:d4:f6:da:4a:7c:9f:ef:d6:6a:37:11:31:
         fb:bd:08:b0:5d:40:bb:77:e7:fc:39:4d:46:4d:f2:b4:fa:d1:
         59:b9:ef:a0:3d:6a:f8:84:75:40:27:a0:9a:c4:1f:8b:ae:d9:
         94:75:72:ae:00:3f:21:e7:55:cf:87:34:c8:cf:4e:15:12:3b:
         c7:f2:6e:85:0c:a2:01:76:05:c0:1f:f9:ce:1f:f8:c2:81:50:
         ec:96:5e:08:fd:95:77:1b:a4:31:9e:da:35:73:26:df:b0:1d:
         e5:be:cc:a7:f3:cc:ee:ad:a2:30:a5:68:6e:29:7d:ec:8e:be:
         5e:a2:ce:49:a9:15:6d:40:e9:26:d8:71:e6:72:06:8d:4f:6a:
         00:d5:52:bf:6b:2e:fa:d4:07:84:dc:83:03:5a:7c:87:82:80:
         28:2a:af:35:99:59:22:9d:64:7c:33:44:da:e9:03:4b:41:e3:
         ff:01:37:80:84:08:6b:49:57:c4:d0:49:57:14:6d:60:42:69:
         e7:6d:62:e2:0f:5d:4b:b2:20:c8:81:64:a5:f2:7c:52:d8:15:
         c2:f7:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org