Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a343a3a2f34362d3438203d3e203238343538.roa
File:                     323830363a3230323a343a3a2f34362d3438203d3e203238343538.roa (raw, json)
Hash identifier:          5zYFuF+5t4tJ00F48GqwIRJcA7zIsQeFk2BHUe1nmdI=
Subject key identifier:   F3:AD:CD:56:2E:09:74:F0:99:AC:3F:56:12:6E:5E:A0:C9:58:7A:CA
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       62001AC2A968549B452F4C0E3350290D81C8FF26
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a343a3a2f34362d3438203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 18:09:52 +0000
ROA not before:           Tue 05 Mar 2024 18:04:52 +0000
ROA not after:            Tue 04 Mar 2025 18:09:52 +0000
asID:                     28458
IP address blocks:        2806:202:4::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:00:1a:c2:a9:68:54:9b:45:2f:4c:0e:33:50:29:0d:81:c8:ff:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Mar  5 18:04:52 2024 GMT
            Not After : Mar  4 18:09:52 2025 GMT
        Subject: CN=F3ADCD562E0974F099AC3F56126E5EA0C9587ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:d8:33:98:51:ad:24:77:33:ab:45:bf:3e:
                    b5:13:bc:fd:67:98:e4:d2:fa:13:9a:d7:eb:d8:07:
                    fd:30:9e:6a:69:d0:e1:4f:a3:ed:16:23:52:72:1a:
                    a6:fe:fc:fb:7a:c9:3d:ec:6b:e9:a7:41:2e:36:68:
                    1a:e0:71:d5:6f:96:7d:a6:d2:6d:17:79:c4:ea:29:
                    b6:24:d6:61:a1:8f:ed:62:9f:90:e5:34:1b:a9:3f:
                    ad:36:65:5c:14:0f:4e:92:ed:a1:a1:9e:2d:96:37:
                    a6:79:83:41:ea:bf:3c:c7:e3:12:66:c6:2e:e0:7f:
                    77:ce:ad:2a:5a:fc:4c:33:9e:d6:e4:44:0d:b1:ac:
                    67:fd:26:06:87:f2:a7:93:91:af:aa:d2:db:62:16:
                    83:5c:2e:40:ac:9e:d7:0b:7b:c2:ac:09:76:1e:35:
                    c7:bc:c2:45:5d:fb:31:ea:62:e5:9e:19:21:46:11:
                    d6:ec:c5:f5:53:7b:e1:09:ec:66:c5:f1:51:fa:86:
                    f7:50:e3:85:eb:a6:4f:6e:25:26:d1:14:2d:9c:94:
                    db:d1:89:fe:5e:80:90:36:f7:e6:65:13:91:05:a7:
                    1c:99:79:aa:9f:1c:b0:d6:0f:7d:1f:73:2a:98:50:
                    52:79:3c:1f:63:31:29:95:0a:c0:5f:e2:d5:08:d7:
                    70:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AD:CD:56:2E:09:74:F0:99:AC:3F:56:12:6E:5E:A0:C9:58:7A:CA
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a343a3a2f34362d3438203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         44:e3:20:f9:28:b6:cb:84:c7:25:91:d6:e7:9c:d9:f3:43:66:
         b9:5e:31:2a:b6:19:e9:5c:85:85:cd:e3:57:08:16:c6:e7:32:
         a5:8c:61:5f:08:7c:be:ea:44:d9:dd:e4:40:3e:2a:ab:22:ea:
         97:69:4d:db:03:f9:75:fc:d8:0f:e3:75:97:e6:72:4d:d8:ac:
         4c:60:44:82:2c:0e:dd:be:38:84:e7:26:aa:ba:c6:b3:6b:f8:
         21:8f:bc:a3:70:4b:6b:2d:59:6d:27:c9:d2:ef:7e:73:c5:ad:
         9c:34:7d:c5:64:a4:46:a9:1f:e5:21:91:86:1d:1d:bb:58:95:
         8b:08:68:e9:c8:94:f3:f4:f8:8f:75:33:1b:f8:3e:bf:f4:3f:
         56:7a:c4:1b:c3:3b:b4:57:78:07:8b:a9:20:e7:d4:7d:e5:a7:
         ad:8c:90:f7:7f:32:1d:4b:aa:41:aa:8d:90:94:f1:7e:20:21:
         a5:bc:33:c6:77:46:e1:65:da:c8:c8:3a:54:fa:63:5d:cc:9b:
         7b:1c:ec:3a:37:70:c9:15:8d:c2:db:d8:22:06:36:77:00:e7:
         15:73:2f:e8:3e:ed:88:dd:31:1b:47:db:19:0d:32:4d:4e:eb:
         6d:17:03:71:36:5f:00:84:a7:c6:6f:ac:36:6f:99:ca:fa:65:
         73:e6:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:50 2024 by rpki-client on console-fra.rpki-client.org