Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa
File:                     323830363a3231623a3a2f33322d3438203d3e203139333332.roa (raw, json)
Hash identifier:          UnDqBdL+MPCn017+coDApykG3PKdJMZIYm37LnObSD0=
Subject key identifier:   69:E6:85:9C:83:CB:1B:99:DB:88:0F:09:60:E0:1B:47:8E:9A:37:67
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       07F0B4F5E737A3D5ADF558F9E676825600F5045A
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa
Signing time:             Tue 05 Mar 2024 18:05:42 +0000
ROA not before:           Tue 05 Mar 2024 18:00:42 +0000
ROA not after:            Tue 04 Mar 2025 18:05:42 +0000
asID:                     19332
IP address blocks:        2806:21b::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:b4:f5:e7:37:a3:d5:ad:f5:58:f9:e6:76:82:56:00:f5:04:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Mar  5 18:00:42 2024 GMT
            Not After : Mar  4 18:05:42 2025 GMT
        Subject: CN=69E6859C83CB1B99DB880F0960E01B478E9A3767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:20:27:05:44:1d:1f:e8:93:fb:f9:fd:5a:
                    d5:1a:77:ca:5b:06:58:54:c8:98:d6:c4:38:cc:b5:
                    a2:94:66:3a:64:9a:a5:39:32:b1:b5:50:5b:d9:51:
                    9d:00:74:ad:a9:c1:2f:72:8a:e5:95:34:88:be:e4:
                    69:55:ea:d3:7a:d3:d9:cc:42:b4:33:89:6a:34:c8:
                    13:03:9a:b3:87:0b:43:d2:e5:c5:c6:53:3b:90:8b:
                    c1:c1:13:a8:f4:84:99:ff:f2:1c:24:70:45:da:2f:
                    a7:c2:50:d6:9f:ca:34:58:c7:6c:e4:38:49:d7:90:
                    9e:19:d4:83:14:77:a4:ea:bd:e8:a6:eb:c4:c0:75:
                    40:65:4d:64:39:0f:7c:d3:45:22:67:e9:4e:30:9d:
                    4e:bd:83:57:26:6d:d2:17:66:9b:12:0d:81:4b:27:
                    c9:41:73:f6:0d:0d:f8:e1:81:b6:1e:d7:e5:da:ad:
                    97:51:da:25:6a:c0:67:d0:cb:5b:02:1f:88:15:5a:
                    1b:38:18:d2:32:ba:59:52:59:cb:69:10:8d:54:d1:
                    ed:30:cc:22:25:c3:cf:2f:d5:0b:e6:5e:54:41:13:
                    d5:ab:67:4a:4b:98:b5:fa:87:ca:21:cf:0e:c0:64:
                    b0:d5:b0:ce:ca:89:19:c9:89:22:6d:38:ef:10:2c:
                    81:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E6:85:9C:83:CB:1B:99:DB:88:0F:09:60:E0:1B:47:8E:9A:37:67
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21b::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:25:f9:9f:da:46:7e:97:97:75:91:27:fd:3b:8e:e1:12:07:
         7a:42:b4:96:a7:a2:fb:d8:0e:89:02:5b:ad:a5:6f:93:de:42:
         ca:f9:66:de:ad:e2:e3:92:cc:6b:44:b8:2a:e2:b4:fa:d2:93:
         6b:4b:34:b1:d8:b0:a0:fb:22:fc:ef:4f:73:a6:0c:b7:44:ea:
         a7:35:2e:7c:20:9e:2b:b2:8b:c5:d3:8e:80:1f:06:34:5e:b2:
         c3:9b:f4:73:4b:62:e1:38:c8:ce:b2:05:11:4d:4e:5a:ff:d3:
         0a:77:6b:ed:8b:b4:95:ea:ea:d6:0d:90:4a:43:84:1a:2a:ab:
         95:63:dd:48:87:7b:56:48:ef:bb:d1:b0:60:0f:50:7e:97:e1:
         dc:36:14:24:a0:51:f2:1e:16:72:60:42:90:f2:85:c1:70:f7:
         42:ba:c7:3f:c3:4d:65:b9:0b:90:5a:49:f0:1b:d0:93:02:e8:
         a0:fb:d7:dd:18:12:a3:cc:0c:10:ba:f7:f5:11:ac:ce:45:3a:
         fc:12:9e:30:2b:9a:8e:4f:b6:38:cb:29:3b:81:fe:51:c0:ec:
         ca:5f:73:09:53:48:00:fc:5a:db:13:e5:c1:3e:29:52:78:9b:
         81:00:28:7a:b0:c7:15:d2:a0:15:ee:b3:bf:83:18:4d:56:a4:
         b1:ef:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org