Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/323830363a3336633a3a2f33322d3332203d3e20323635363135.roa
File:                     323830363a3336633a3a2f33322d3332203d3e20323635363135.roa (raw, json)
Hash identifier:          fysiQLm/Nri/+R5eD6rRWU6qj1jVpLJacikvpp04pCg=
Subject key identifier:   08:0F:65:B2:B9:87:27:71:68:D8:91:C5:23:FB:66:49:68:69:97:06
Certificate issuer:       /CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
Certificate serial:       2529EE34F42E2DE12F9A663CDCABA955966C071B
Authority key identifier: B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/323830363a3336633a3a2f33322d3332203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:45:29 +0000
ROA not before:           Tue 05 Mar 2024 17:40:29 +0000
ROA not after:            Tue 04 Mar 2025 17:45:29 +0000
asID:                     265615
IP address blocks:        2806:36c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:29:ee:34:f4:2e:2d:e1:2f:9a:66:3c:dc:ab:a9:55:96:6c:07:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
        Validity
            Not Before: Mar  5 17:40:29 2024 GMT
            Not After : Mar  4 17:45:29 2025 GMT
        Subject: CN=080F65B2B987277168D891C523FB664968699706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:b6:e8:0c:11:70:ef:20:2f:69:24:14:ad:
                    c0:dd:38:a4:15:c6:de:dd:10:2b:71:dc:08:59:ee:
                    d0:09:63:b9:fb:2d:6b:0b:81:de:b6:e1:6f:e4:88:
                    6e:76:ef:5e:61:51:1c:1e:07:c7:d2:ed:6e:4c:6f:
                    a0:33:6e:ab:05:45:e0:2c:f9:07:e5:ab:04:b5:3d:
                    11:60:ae:5e:53:d6:bb:f6:18:2f:d7:27:70:98:fd:
                    49:b0:1b:99:5a:32:2c:67:06:2d:7d:c2:9a:b0:25:
                    b9:29:6f:08:1b:37:dc:11:c4:85:5b:27:be:b2:6c:
                    f0:96:58:2d:33:5a:0a:e6:9e:c7:10:fb:52:28:99:
                    2c:f3:e7:08:c7:78:70:82:89:c4:2e:e8:74:24:50:
                    28:64:24:5b:1e:8c:96:86:03:f9:82:5d:91:5a:31:
                    37:68:a6:d3:62:eb:91:66:dd:89:7f:a3:cc:d1:9a:
                    d5:7b:8a:79:a1:41:0e:0a:c3:3c:3a:c7:de:e2:86:
                    68:43:e2:69:b5:7f:e5:9c:53:44:83:d9:04:79:6b:
                    6e:d2:e0:0f:0e:8b:a3:ab:a3:34:3b:a4:ad:8c:fe:
                    b3:69:f4:c4:26:b7:6c:a3:d8:bb:1e:4a:42:a7:9e:
                    bf:35:b0:0c:df:15:b8:3b:b7:0a:66:62:02:34:43:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:65:B2:B9:87:27:71:68:D8:91:C5:23:FB:66:49:68:69:97:06
            X509v3 Authority Key Identifier:
                keyid:B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/323830363a3336633a3a2f33322d3332203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:36c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:96:5e:2c:ae:3d:fa:56:80:48:44:12:c2:ff:ac:a4:55:90:
         80:7f:40:d3:29:c2:69:4e:7b:3b:b8:e1:32:8d:1d:4c:68:ce:
         b8:8e:4d:e8:2b:4c:10:f7:8f:15:ff:d6:8a:ee:12:a4:2f:8a:
         08:14:17:2b:aa:2d:9b:c6:fa:fb:5f:1b:12:08:89:56:74:86:
         c8:ab:d3:45:b5:17:c1:de:68:3d:5f:de:7d:e6:cb:9e:2f:9c:
         b6:95:8d:f6:ed:cb:93:c5:a2:1e:7c:e4:fd:54:d8:af:e6:37:
         b2:29:6b:de:3f:38:fc:57:0e:16:7d:cf:24:d9:3a:08:19:5a:
         a6:5a:6b:06:98:6d:65:16:a0:95:ef:fc:95:a7:c5:d2:d7:e8:
         4e:99:4b:1d:e7:f0:6f:34:dc:9f:c5:f5:70:e1:7b:57:d8:c4:
         dc:30:db:84:70:4d:17:a8:e1:1c:3e:d8:36:91:14:66:f4:87:
         ff:5d:51:3e:1c:6c:91:32:3a:a5:95:b7:e4:47:68:d1:5b:ba:
         a6:ec:a1:14:19:9d:70:17:87:ab:56:26:4c:31:9c:83:eb:fd:
         f3:73:ee:6d:ac:27:01:0e:31:7f:06:85:94:75:6a:21:3a:39:
         20:ed:32:ca:c6:0f:d7:77:01:95:2f:e7:5d:fe:56:32:e3:f6:
         6f:58:67:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org