Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/323830363a3361633a3a2f33322d3430203d3e20323635363036.roa
File:                     323830363a3361633a3a2f33322d3430203d3e20323635363036.roa (raw, json)
Hash identifier:          ANZP2f5Rqw/QoSq/k2kzsWmMDxaKnO/2Bc3WYhRiGOI=
Subject key identifier:   BF:40:77:C4:43:23:18:1E:42:1F:AE:B7:56:8E:2E:BD:02:46:F2:18
Certificate issuer:       /CN=C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6
Certificate serial:       02669AF1B0B25924C2634B564C29F138E9D7F446
Authority key identifier: C6:40:51:3C:AB:89:8A:7B:4B:1C:A0:EA:B7:CA:AB:03:5A:E5:85:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/323830363a3361633a3a2f33322d3430203d3e20323635363036.roa
Signing time:             Tue 05 Mar 2024 18:19:57 +0000
ROA not before:           Tue 05 Mar 2024 18:14:57 +0000
ROA not after:            Tue 04 Mar 2025 18:19:57 +0000
asID:                     265606
IP address blocks:        2806:3ac::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:66:9a:f1:b0:b2:59:24:c2:63:4b:56:4c:29:f1:38:e9:d7:f4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6
        Validity
            Not Before: Mar  5 18:14:57 2024 GMT
            Not After : Mar  4 18:19:57 2025 GMT
        Subject: CN=BF4077C44323181E421FAEB7568E2EBD0246F218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:44:8d:ac:cf:85:09:b8:39:20:f5:af:37:
                    e9:96:22:14:ed:87:0a:c1:3d:af:0b:dc:25:ec:50:
                    e1:36:68:64:f3:41:9e:63:fa:ae:82:ef:cd:55:32:
                    9b:fc:49:ff:1d:55:5e:9b:a9:a2:e2:f9:ea:85:4e:
                    ff:ad:eb:56:5f:a4:00:39:22:d1:c0:a2:d5:f3:d6:
                    2f:70:81:12:96:8a:f3:91:67:01:5a:58:c5:17:7d:
                    6e:f4:b7:28:1f:27:76:31:d9:5d:45:e0:da:ff:0c:
                    99:15:19:6e:94:41:9f:d5:00:37:78:5c:7f:5c:d2:
                    ac:1c:0d:77:28:df:e9:81:6d:44:d1:f2:3e:56:79:
                    c1:07:a8:71:bc:bb:a7:30:86:b3:87:74:39:ec:be:
                    a1:99:b1:72:bb:bd:30:19:fb:f5:29:bf:ab:d4:40:
                    3d:92:20:cf:bc:bc:8a:8a:63:ef:a3:6a:b6:19:be:
                    be:b9:bc:c8:d9:59:1e:c1:dc:0d:1d:52:f6:9b:0b:
                    7c:91:96:d4:45:25:20:4a:87:d3:94:39:65:1c:b1:
                    f7:9d:2f:a0:38:46:76:df:2b:5e:b3:f4:d3:f1:10:
                    f0:87:72:e2:da:1f:83:62:e8:8b:e3:38:de:f8:6a:
                    7c:61:7e:36:0b:9c:57:31:90:a9:3a:3c:6e:41:4b:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:40:77:C4:43:23:18:1E:42:1F:AE:B7:56:8E:2E:BD:02:46:F2:18
            X509v3 Authority Key Identifier:
                keyid:C6:40:51:3C:AB:89:8A:7B:4B:1C:A0:EA:B7:CA:AB:03:5A:E5:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/323830363a3361633a3a2f33322d3430203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:81:ad:21:0d:bf:ed:ae:b5:6c:29:9a:be:84:14:bf:99:0d:
         49:2f:41:fd:80:e3:65:ab:d3:17:6e:ad:8b:b3:83:93:d4:d2:
         2d:ec:44:f0:bb:06:f6:82:89:ea:c9:bc:85:6b:10:10:4d:3f:
         af:f4:91:9a:7d:4d:13:e0:95:6e:1f:61:52:d6:11:49:9b:fd:
         7a:0a:ed:cb:e1:33:2e:c3:03:c8:bb:a7:05:e9:8e:80:b6:5e:
         f9:f5:c5:4b:de:ad:ee:1d:a8:64:70:28:8a:01:b8:a5:68:e8:
         d4:62:05:b6:6b:1e:41:9c:19:d6:92:8e:6b:d7:ae:6b:36:fa:
         90:eb:16:73:24:d3:f6:73:e8:8f:e3:80:72:28:41:04:43:75:
         fb:7f:c4:bb:62:98:e4:9e:6c:a2:61:fb:37:58:48:a4:50:b8:
         95:eb:b4:9d:c1:25:72:75:c7:0e:04:ab:62:f0:f1:e1:ff:3e:
         47:3e:c0:dc:a3:e4:fa:27:ca:94:bb:3a:ce:ce:11:ce:ae:40:
         5d:01:69:a0:11:09:87:41:c2:4a:02:c4:5b:48:16:7a:50:46:
         15:d1:0a:ab:a6:14:b5:a4:f3:7b:78:62:0f:5b:d4:fb:db:d4:
         8f:d8:44:e0:73:d0:b1:a7:8e:82:b1:d0:df:63:49:f3:a6:74:
         e0:93:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:05 2024 by rpki-client on console-fra.rpki-client.org