Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/323830363a3336623a3a2f33322d3438203d3e20323635363134.roa
File:                     323830363a3336623a3a2f33322d3438203d3e20323635363134.roa (raw, json)
Hash identifier:          IlTX+vzZMgKnzcR/wutIzUc1xcq5qhZimflGgb8ZvZE=
Subject key identifier:   53:2C:87:04:E0:E7:E8:27:0A:61:73:F6:DE:4A:B0:A0:D5:2A:C2:7D
Certificate issuer:       /CN=BC628CE1C3E1DDD106402753F9498886591C9394
Certificate serial:       66401655515BA612BC90920E2C7E39FBC0A0AD05
Authority key identifier: BC:62:8C:E1:C3:E1:DD:D1:06:40:27:53:F9:49:88:86:59:1C:93:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC628CE1C3E1DDD106402753F9498886591C9394.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/323830363a3336623a3a2f33322d3438203d3e20323635363134.roa
Signing time:             Tue 05 Mar 2024 17:56:57 +0000
ROA not before:           Tue 05 Mar 2024 17:51:57 +0000
ROA not after:            Tue 04 Mar 2025 17:56:57 +0000
asID:                     265614
IP address blocks:        2806:36b::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/BC628CE1C3E1DDD106402753F9498886591C9394.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/BC628CE1C3E1DDD106402753F9498886591C9394.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC628CE1C3E1DDD106402753F9498886591C9394.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:40:16:55:51:5b:a6:12:bc:90:92:0e:2c:7e:39:fb:c0:a0:ad:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC628CE1C3E1DDD106402753F9498886591C9394
        Validity
            Not Before: Mar  5 17:51:57 2024 GMT
            Not After : Mar  4 17:56:57 2025 GMT
        Subject: CN=532C8704E0E7E8270A6173F6DE4AB0A0D52AC27D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:66:17:83:bd:0d:33:88:20:49:52:e2:5d:
                    97:fe:33:22:60:4f:e4:65:9a:85:18:11:67:24:03:
                    76:1e:59:ea:f0:4a:23:07:9e:f6:c1:f0:b4:1c:c5:
                    bc:07:48:fc:b9:8e:1d:38:15:ae:0e:cf:d7:18:49:
                    4b:d7:3f:22:c1:0e:01:5d:44:3d:c6:03:bf:be:2e:
                    88:c6:a4:09:99:66:88:9b:16:37:6b:64:76:82:28:
                    fd:47:e1:1d:47:c1:8b:ce:e7:7f:b3:b7:52:de:f7:
                    1e:9b:8c:b5:47:17:36:43:7e:0f:0c:36:2a:cc:ca:
                    5f:4b:21:6f:86:f2:4a:80:05:fb:23:b8:45:55:f7:
                    8a:5d:43:45:f4:dc:67:da:94:e3:9d:2e:7e:93:1c:
                    af:0a:90:5f:04:b0:2f:2c:42:e1:87:1d:1b:77:49:
                    bc:08:9a:64:45:63:97:71:ab:f7:b4:65:ed:e2:cb:
                    45:b6:4f:8f:05:23:8f:98:cd:74:10:17:ff:af:c0:
                    f8:e0:c8:0f:99:4f:3d:43:4f:da:b3:ed:cd:e0:f3:
                    35:b3:3f:f6:dc:89:32:fc:0e:ab:6e:53:4b:bc:c1:
                    a0:77:9c:7d:60:e0:ee:f3:38:a9:2b:41:c6:c3:4e:
                    6d:e4:de:38:49:71:ed:6d:10:c9:c4:6b:80:3f:21:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2C:87:04:E0:E7:E8:27:0A:61:73:F6:DE:4A:B0:A0:D5:2A:C2:7D
            X509v3 Authority Key Identifier:
                keyid:BC:62:8C:E1:C3:E1:DD:D1:06:40:27:53:F9:49:88:86:59:1C:93:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/BC628CE1C3E1DDD106402753F9498886591C9394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC628CE1C3E1DDD106402753F9498886591C9394.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0A5290FCB537F0A1341A99BAC6EA25F8C252F65F81CD5662AA4738D27E77A14/0/323830363a3336623a3a2f33322d3438203d3e20323635363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:36b::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:a0:88:a8:e8:77:e9:e4:56:8c:22:0d:c4:95:a7:f8:b7:98:
         ea:a1:24:62:90:3b:69:55:a9:31:a8:50:55:20:d7:a9:e6:7a:
         b0:72:48:4e:72:a0:8c:02:ab:b4:92:1a:74:3a:96:5b:15:14:
         99:4a:8a:db:85:cb:72:5e:57:5a:ec:30:11:0e:1c:88:c2:a7:
         ac:c8:d7:2e:c4:28:02:3d:5b:60:1b:5e:8e:f8:66:e5:2c:a7:
         ae:49:0a:85:fb:08:10:b4:74:42:2e:45:55:3a:5b:ca:b2:6a:
         52:80:00:90:e4:58:cc:b7:48:9a:d6:63:e1:c6:81:9b:5d:39:
         36:f7:d6:70:b6:e6:f2:e2:13:14:80:3c:1a:08:bb:e9:76:08:
         a9:bd:cd:56:3f:61:06:5f:dd:5b:5d:99:41:1c:5d:1f:42:74:
         9b:6e:52:b5:54:52:0e:ff:03:f2:38:4d:c2:cf:a3:d8:f2:c2:
         18:0a:9c:90:8d:05:95:5b:be:17:a5:b4:f4:c7:61:e9:25:9d:
         24:23:66:a2:31:53:0c:9b:aa:c4:4a:09:73:f3:ea:e3:51:ce:
         3f:05:24:2e:52:35:5d:33:87:3e:2a:bf:ff:f6:19:1e:50:da:
         31:74:01:d1:a2:ab:c0:5e:be:55:96:cb:54:ea:9b:40:cf:10:
         70:82:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 20:14:10 2024 by rpki-client on console-fra.rpki-client.org