Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/323830363a3336373a3a2f33322d3438203d3e20323635363130.roa
File:                     323830363a3336373a3a2f33322d3438203d3e20323635363130.roa (raw, json)
Hash identifier:          lzGwQSDOqnsaHPhN+9mWPFoxUcV5raozhnylFR9urX8=
Subject key identifier:   6E:CA:82:63:EA:CA:D7:C6:5B:5B:AA:18:0A:06:1A:AC:54:C2:11:60
Certificate issuer:       /CN=B073DE428A660B4914AC48ECC20D3E70EE2C2B92
Certificate serial:       153CC530D7E70884B6AF69BE87E53A3F10FBA683
Authority key identifier: B0:73:DE:42:8A:66:0B:49:14:AC:48:EC:C2:0D:3E:70:EE:2C:2B:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/323830363a3336373a3a2f33322d3438203d3e20323635363130.roa
Signing time:             Tue 05 Mar 2024 17:47:37 +0000
ROA not before:           Tue 05 Mar 2024 17:42:37 +0000
ROA not after:            Tue 04 Mar 2025 17:47:37 +0000
asID:                     265610
IP address blocks:        2806:367::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3c:c5:30:d7:e7:08:84:b6:af:69:be:87:e5:3a:3f:10:fb:a6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B073DE428A660B4914AC48ECC20D3E70EE2C2B92
        Validity
            Not Before: Mar  5 17:42:37 2024 GMT
            Not After : Mar  4 17:47:37 2025 GMT
        Subject: CN=6ECA8263EACAD7C65B5BAA180A061AAC54C21160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:61:ba:00:83:84:78:0e:32:80:9a:3b:70:dc:
                    f2:db:5a:08:75:d0:04:66:3d:37:74:1c:d0:43:3f:
                    8e:67:44:1f:e1:f5:c3:13:f4:d3:68:bb:c3:16:71:
                    cd:44:2b:30:71:89:92:25:52:d4:a6:93:ba:21:18:
                    6c:53:bd:56:e6:c5:96:6f:16:c8:a7:72:a0:b2:08:
                    ba:f1:77:65:4a:59:69:10:31:c3:02:d2:29:16:64:
                    56:e8:0b:47:23:f7:fe:1a:02:43:c9:48:df:d2:de:
                    6c:23:3a:c8:09:6a:cc:fe:48:0a:2d:75:5e:cd:f1:
                    5a:f5:aa:e7:91:3c:dc:3a:88:a7:21:60:77:f3:3f:
                    03:16:6a:2e:df:d9:28:54:a4:d8:0d:a8:0f:19:81:
                    67:eb:8e:a4:58:d7:88:66:d7:74:7d:a9:11:4f:5e:
                    c8:36:ff:70:23:46:f9:61:02:b2:a3:32:98:5b:77:
                    ba:d9:1f:39:c3:53:97:4b:3f:28:78:c2:29:3a:92:
                    b6:92:12:7d:96:4b:e0:94:6e:1f:14:88:c1:33:f5:
                    4b:b3:b1:9f:f6:be:92:e3:28:f7:d0:62:4b:8a:dc:
                    a8:ab:35:78:27:8a:0a:be:48:ae:a2:b2:2a:54:a2:
                    ea:49:4e:1d:0f:1e:a3:d7:a0:ae:4a:90:30:56:81:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CA:82:63:EA:CA:D7:C6:5B:5B:AA:18:0A:06:1A:AC:54:C2:11:60
            X509v3 Authority Key Identifier:
                keyid:B0:73:DE:42:8A:66:0B:49:14:AC:48:EC:C2:0D:3E:70:EE:2C:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/323830363a3336373a3a2f33322d3438203d3e20323635363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:367::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:46:5f:cb:ef:28:04:4c:ac:08:19:58:73:47:32:2c:a1:9c:
         62:6a:c8:b0:8a:6c:ba:d7:e4:e5:42:7b:f9:fe:73:67:ff:7e:
         86:cf:a5:5c:67:c7:22:34:be:64:a4:f0:ef:b3:1c:d5:ce:2f:
         3e:d6:18:75:49:15:6e:91:c2:de:54:4a:c3:65:6f:e1:8f:f8:
         49:4a:ed:9d:0d:d9:07:d6:17:7b:b8:87:14:e9:56:3f:b6:8d:
         16:3d:81:3c:d4:71:e1:fb:64:44:0b:95:00:ad:b2:88:8b:1e:
         16:06:a9:c7:78:9d:b9:ca:8e:c7:e6:fb:a5:b3:ac:9c:5b:7c:
         9b:9d:39:81:c5:16:97:07:e8:53:22:39:46:4b:49:31:47:f7:
         18:c4:4d:78:f5:6e:8f:b1:31:16:00:13:c2:0a:60:be:a1:6b:
         ef:f6:cf:3e:d1:63:6c:df:90:53:53:99:af:2d:50:12:5e:b0:
         11:c1:75:0f:26:eb:7f:60:24:d7:67:9d:32:0f:8f:92:12:45:
         0b:f9:d9:de:21:f4:c9:a4:7b:e8:dd:84:d0:b2:e9:3d:77:81:
         56:e0:07:4c:86:af:32:13:09:60:8c:ff:db:2c:a8:02:49:1c:
         6e:a7:88:ad:8f:ec:13:c3:77:d0:35:c1:72:6e:3a:0b:ff:65:
         37:62:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 02:22:19 2024 by rpki-client on console-fra.rpki-client.org