Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/323830363a3361613a3a2f33322d3438203d3e20323635363237.roa
File:                     323830363a3361613a3a2f33322d3438203d3e20323635363237.roa (raw, json)
Hash identifier:          hnZd97k0Dy2fufhEVDqmqXiEhwWwf4Y8G03BqDKDmSE=
Subject key identifier:   F8:2C:28:6F:2B:75:89:A1:02:81:BB:60:36:25:CF:B6:79:8D:4C:5C
Certificate issuer:       /CN=0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C
Certificate serial:       72BBCA6AE6E4FEE66F6022D04F07880494D080D3
Authority key identifier: 0C:AB:CA:4D:4E:DD:FC:E1:85:5F:D6:1D:DC:E6:7F:98:96:09:E7:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/323830363a3361613a3a2f33322d3438203d3e20323635363237.roa
Signing time:             Tue 05 Mar 2024 17:40:48 +0000
ROA not before:           Tue 05 Mar 2024 17:35:48 +0000
ROA not after:            Tue 04 Mar 2025 17:40:48 +0000
asID:                     265627
IP address blocks:        2806:3aa::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bb:ca:6a:e6:e4:fe:e6:6f:60:22:d0:4f:07:88:04:94:d0:80:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C
        Validity
            Not Before: Mar  5 17:35:48 2024 GMT
            Not After : Mar  4 17:40:48 2025 GMT
        Subject: CN=F82C286F2B7589A10281BB603625CFB6798D4C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:25:f1:e7:a2:e3:b2:dc:ca:22:f4:3d:f1:
                    07:a2:16:ed:b7:77:93:26:ea:d2:ec:48:2b:2d:7f:
                    12:63:6e:85:3e:30:c8:a3:1a:92:02:2c:24:76:40:
                    8d:85:e7:9d:0f:10:2b:61:1b:bf:77:93:ec:d9:16:
                    ba:23:44:14:d8:2d:d5:94:8d:64:e4:62:8c:00:a0:
                    12:e1:59:b8:19:c6:9e:f0:9c:49:4b:9b:2a:13:b0:
                    40:30:61:87:9b:4d:aa:87:34:8c:30:69:09:bc:4e:
                    f3:74:f3:db:57:26:b8:bd:90:be:cd:7b:7c:e8:bc:
                    6a:80:f5:6e:66:17:86:4b:56:a6:53:68:5a:76:5d:
                    17:bf:b6:8b:1b:7e:7f:93:29:86:60:86:05:6c:64:
                    5f:32:72:80:ce:f9:10:21:59:e2:bb:5d:c2:24:1a:
                    01:de:2e:1d:7c:e8:97:3d:06:c3:e1:e2:24:b4:1e:
                    2c:e0:70:8d:2b:89:5a:85:02:30:8d:9b:9e:03:23:
                    78:7d:c6:21:c4:75:b2:ab:2d:68:6c:e4:8f:02:a4:
                    60:37:6d:9d:2a:28:e6:e6:4c:80:75:d9:e4:a6:33:
                    f0:61:ba:82:4a:5d:36:2c:59:99:a3:73:04:c3:78:
                    29:dd:a5:a2:df:1c:8c:e9:67:81:c2:9b:05:4f:b3:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2C:28:6F:2B:75:89:A1:02:81:BB:60:36:25:CF:B6:79:8D:4C:5C
            X509v3 Authority Key Identifier:
                keyid:0C:AB:CA:4D:4E:DD:FC:E1:85:5F:D6:1D:DC:E6:7F:98:96:09:E7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/323830363a3361613a3a2f33322d3438203d3e20323635363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3aa::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:fd:53:89:8b:c6:a4:ce:15:41:c6:06:69:04:10:82:e9:
         5c:ff:08:14:2a:9f:34:94:3d:b5:f9:29:0d:5a:15:c7:58:5f:
         92:e0:09:83:0b:b8:3a:60:a3:5b:96:b2:a4:fa:41:de:d2:3d:
         d0:eb:ef:ab:7e:9d:62:f5:bc:83:93:68:dd:69:21:2e:48:75:
         68:b5:1d:50:26:6c:3f:33:54:f5:53:c3:ac:9a:66:b4:7f:06:
         45:a4:45:93:89:23:33:85:36:e7:9a:12:4a:e7:30:b1:91:a7:
         1f:ba:c4:e1:fc:bd:a9:93:79:ff:32:78:98:68:0c:9b:f3:9e:
         0f:6c:9e:b8:45:27:9d:72:74:ff:fb:8d:67:8b:47:0e:67:4d:
         59:41:e0:2b:7d:10:3a:54:c6:8d:48:82:89:86:89:e4:59:50:
         60:ea:e0:82:27:54:6a:72:1d:9d:03:ac:c1:21:89:0f:ae:65:
         03:1a:f8:75:16:1e:4a:50:3d:a7:d7:14:94:86:13:b3:5a:23:
         bf:85:74:85:64:d4:6b:0b:3f:e1:0d:21:b5:3b:e9:63:25:25:
         3a:50:f9:79:6a:39:d2:bc:d9:17:c5:62:d4:5f:2c:c8:08:d6:
         6d:b2:5e:4b:83:83:eb:4e:8b:44:e8:9c:a5:ff:f1:e3:90:b3:
         37:1e:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 21:08:04 2024 by rpki-client on console-ams.rpki-client.org