Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/323830363a3332613a3a2f33322d3438203d3e20323635353734.roa
File:                     323830363a3332613a3a2f33322d3438203d3e20323635353734.roa (raw, json)
Hash identifier:          SspuLHkVvAuzsyVsMDqhZ3efTYDKCu4Lpp+MXX2XtDc=
Subject key identifier:   4E:1E:52:56:42:46:3D:B1:04:AA:3C:C8:35:63:29:07:4A:57:8B:D6
Certificate issuer:       /CN=E7FC6D52B827804FAD0CF07C69DA6E0832E81C60
Certificate serial:       718F0A52EB7D41CA9DD6844D190B8F9BD92DD8AC
Authority key identifier: E7:FC:6D:52:B8:27:80:4F:AD:0C:F0:7C:69:DA:6E:08:32:E8:1C:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/323830363a3332613a3a2f33322d3438203d3e20323635353734.roa
Signing time:             Tue 05 Mar 2024 17:44:06 +0000
ROA not before:           Tue 05 Mar 2024 17:39:06 +0000
ROA not after:            Tue 04 Mar 2025 17:44:06 +0000
asID:                     265574
IP address blocks:        2806:32a::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:0a:52:eb:7d:41:ca:9d:d6:84:4d:19:0b:8f:9b:d9:2d:d8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7FC6D52B827804FAD0CF07C69DA6E0832E81C60
        Validity
            Not Before: Mar  5 17:39:06 2024 GMT
            Not After : Mar  4 17:44:06 2025 GMT
        Subject: CN=4E1E525642463DB104AA3CC8356329074A578BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:ca:ff:c7:e4:31:06:38:fa:2b:ab:c2:aa:
                    dc:e5:f9:fc:77:13:49:43:d7:fa:4d:87:47:a3:3f:
                    17:03:de:99:f8:60:ce:63:66:b4:5e:c6:c5:ec:7a:
                    75:f3:6f:92:a4:64:89:94:67:63:c8:b1:fa:f5:e6:
                    f1:a8:f7:ee:34:f3:50:65:d8:fc:f9:3e:10:d4:49:
                    0e:a9:34:a0:01:eb:d7:0e:3b:79:0c:4e:1e:fe:48:
                    12:f5:8d:14:46:e1:0b:aa:a7:85:ea:1e:3a:cf:e9:
                    2f:fb:b8:92:5a:a0:fc:6d:ae:c1:7d:80:11:ee:25:
                    8d:a3:d8:aa:02:93:ab:4b:a1:8a:f9:d6:f4:0d:7b:
                    c9:1f:7a:f5:a7:da:06:c8:2a:fc:7f:7a:27:6b:4f:
                    6d:db:59:79:98:2d:a3:1c:98:6f:32:dd:b0:07:9b:
                    9f:8c:e8:99:5a:ca:b1:61:16:6d:37:cc:bb:bd:cc:
                    87:d3:b4:e5:b4:f7:9b:d0:24:85:bb:ab:2d:2c:01:
                    14:71:e3:d6:b7:f4:91:0c:4c:b4:d8:c5:bf:17:58:
                    14:89:e2:ee:ba:a9:39:11:1f:7d:aa:db:44:b2:77:
                    8c:ef:dd:0c:8d:5c:96:60:c6:d9:f5:3c:1e:ec:d3:
                    5a:1f:72:20:28:de:5c:9e:86:70:d1:3a:c1:cd:9b:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1E:52:56:42:46:3D:B1:04:AA:3C:C8:35:63:29:07:4A:57:8B:D6
            X509v3 Authority Key Identifier:
                keyid:E7:FC:6D:52:B8:27:80:4F:AD:0C:F0:7C:69:DA:6E:08:32:E8:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/323830363a3332613a3a2f33322d3438203d3e20323635353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32a::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:6b:b9:2e:01:1d:e0:85:6d:44:ca:ec:a4:c9:87:bd:75:a9:
         e3:e6:b6:19:d0:c9:ed:ab:ea:b5:ca:42:19:b3:b6:01:36:e9:
         05:46:8c:ad:53:f0:e8:d4:de:3f:76:26:16:43:13:df:3a:54:
         12:62:14:87:25:32:b9:86:6d:54:fd:72:72:41:3f:73:60:d1:
         e5:09:de:99:3f:d5:30:ed:80:21:3d:15:d4:29:68:c7:31:a5:
         3f:5c:ed:25:f4:f1:1e:97:29:8e:87:62:a3:eb:8d:1e:ce:bf:
         3e:cf:f7:8b:6c:f0:2b:b3:3c:2c:72:2d:3c:42:1c:b0:7e:1a:
         a6:b9:8c:c0:b9:bb:91:6e:ca:ff:99:87:fc:f8:13:cb:2c:c9:
         17:7b:f0:f8:1f:90:64:7d:b1:51:56:ac:c2:73:4a:42:c0:ad:
         fe:04:e2:da:fa:6f:75:47:14:8f:88:5c:c5:54:49:4f:50:54:
         70:77:59:34:cb:c7:43:2b:3f:30:95:b4:c9:23:ac:15:d6:d2:
         20:6e:99:8e:e5:04:fe:f9:c1:95:67:17:1f:d3:28:01:bf:23:
         0a:88:e8:9b:03:99:d0:d9:ae:4f:e1:54:ab:5d:96:a1:13:d7:
         24:9d:a3:34:e0:3a:0e:7b:5b:4f:6c:e0:54:c1:84:df:e2:25:
         35:7f:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:20 2024 by rpki-client on console-fra.rpki-client.org