Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/323830363a3333383a3a2f33322d3438203d3e20323635353833.roa
File:                     323830363a3333383a3a2f33322d3438203d3e20323635353833.roa (raw, json)
Hash identifier:          jg/AWTlAV+sbrfzP2d2KguPpbL927eFSjg8l2E9n//g=
Subject key identifier:   74:16:5E:19:4A:E2:F6:D3:45:BC:E2:0C:03:BC:3C:8C:0E:5E:27:C7
Certificate issuer:       /CN=37778FB3BBBCADF08682A83B0412FC276F4AEE14
Certificate serial:       261805E97706DD0E68E436B45271385E827EEA7A
Authority key identifier: 37:77:8F:B3:BB:BC:AD:F0:86:82:A8:3B:04:12:FC:27:6F:4A:EE:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/323830363a3333383a3a2f33322d3438203d3e20323635353833.roa
Signing time:             Tue 05 Mar 2024 17:42:16 +0000
ROA not before:           Tue 05 Mar 2024 17:37:16 +0000
ROA not after:            Tue 04 Mar 2025 17:42:16 +0000
asID:                     265583
IP address blocks:        2806:338::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:18:05:e9:77:06:dd:0e:68:e4:36:b4:52:71:38:5e:82:7e:ea:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37778FB3BBBCADF08682A83B0412FC276F4AEE14
        Validity
            Not Before: Mar  5 17:37:16 2024 GMT
            Not After : Mar  4 17:42:16 2025 GMT
        Subject: CN=74165E194AE2F6D345BCE20C03BC3C8C0E5E27C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:04:2f:47:6a:58:87:0b:90:48:4c:dd:2d:
                    be:1b:7b:cc:1d:cb:c6:4a:b6:72:5d:31:8d:93:04:
                    ee:0f:5f:35:e9:38:6b:87:75:af:78:95:89:e9:b9:
                    93:88:38:76:4c:4a:1f:fe:6a:81:f5:c6:2a:5f:de:
                    b8:2b:57:df:74:3d:89:d6:d6:d3:13:b9:d7:73:14:
                    cb:a5:2c:67:71:71:87:bf:6e:9a:ab:a7:42:00:5e:
                    e7:60:99:d8:e9:ac:0a:cc:63:bb:f6:39:ff:89:f4:
                    de:17:90:f4:ca:20:a6:dc:48:3f:bc:ff:a8:5f:35:
                    7f:56:39:ac:10:6f:90:80:76:2e:46:11:86:8e:c6:
                    e3:d8:63:38:6b:33:42:02:34:9c:58:75:99:87:14:
                    d1:de:b8:30:3c:c7:30:da:26:9f:6d:88:03:6a:ae:
                    ea:42:c7:3d:ba:c9:64:04:54:e7:72:9f:b9:bd:b5:
                    15:70:4e:85:80:04:3a:9f:99:83:c5:f1:90:6c:71:
                    87:b9:1f:9d:d7:52:98:37:11:db:60:51:6c:62:3f:
                    83:5f:79:24:f4:93:e5:29:73:46:99:98:83:d1:ec:
                    51:f6:f2:e6:3d:da:71:bd:2a:46:d9:71:d6:07:e2:
                    f5:10:d0:6a:87:46:8f:b0:0a:d2:ea:b1:57:dc:61:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:16:5E:19:4A:E2:F6:D3:45:BC:E2:0C:03:BC:3C:8C:0E:5E:27:C7
            X509v3 Authority Key Identifier:
                keyid:37:77:8F:B3:BB:BC:AD:F0:86:82:A8:3B:04:12:FC:27:6F:4A:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/323830363a3333383a3a2f33322d3438203d3e20323635353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:338::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:7a:5f:ad:c7:b0:dd:2a:e9:09:bd:79:10:ce:34:08:ec:2c:
         cf:22:61:22:cd:e5:cf:9a:f5:a3:7f:72:33:e1:39:3f:5c:42:
         27:ac:04:5b:ba:e4:93:ca:1c:01:49:a4:eb:45:f1:fa:39:4c:
         34:59:3b:19:5f:9f:31:26:dd:97:0e:47:c2:87:c7:e3:6b:9d:
         0d:13:50:7a:fc:2e:14:bd:10:df:53:65:38:24:8f:31:dd:6f:
         86:76:63:ad:46:34:c2:df:cb:f5:9e:02:a7:f5:b5:4e:cb:9f:
         e4:3c:5e:82:2f:67:e6:6c:6f:ee:ac:17:01:78:36:82:b3:f2:
         6a:2f:52:a6:e6:a5:c7:31:ed:26:1c:7a:5f:37:61:d5:eb:24:
         59:bd:fb:a0:47:d3:0b:9b:90:c5:08:0d:9e:0b:f1:13:a5:b5:
         28:0c:27:f6:de:fb:3e:ff:f7:f4:9f:3d:df:07:c4:6b:4a:08:
         ab:cb:a6:12:c8:ec:48:d4:13:3c:9a:e9:66:79:16:75:15:a3:
         49:41:2c:3e:99:54:66:2b:58:9a:ca:b3:e0:f7:57:40:d4:95:
         db:67:ba:72:04:15:dd:6d:a1:99:ac:99:70:9e:c8:c3:93:f1:
         81:47:fc:93:be:67:3a:0c:32:28:e5:83:7f:fe:3b:1a:38:68:
         30:6b:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:55 2024 by rpki-client on console-fra.rpki-client.org