Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/323830363a3330353a3a2f33322d3332203d3e203238353339.roa
File:                     323830363a3330353a3a2f33322d3332203d3e203238353339.roa (raw, json)
Hash identifier:          /lEv5eFPnaQG80mvoctl9DC3j7CmW8k0YKr0KnOKCaQ=
Subject key identifier:   8E:07:A5:85:B0:DD:DB:29:12:79:D1:CA:76:08:75:F5:CF:8A:1E:B5
Certificate issuer:       /CN=D8C73AFFF65A3252BF36F686F6347E33163EC8EE
Certificate serial:       61E7650C5FC7D1429F14FEF0023B83560FF810ED
Authority key identifier: D8:C7:3A:FF:F6:5A:32:52:BF:36:F6:86:F6:34:7E:33:16:3E:C8:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/323830363a3330353a3a2f33322d3332203d3e203238353339.roa
Signing time:             Tue 18 Jun 2024 01:25:00 +0000
ROA not before:           Tue 18 Jun 2024 01:20:00 +0000
ROA not after:            Tue 17 Jun 2025 01:25:00 +0000
asID:                     28539
IP address blocks:        2806:305::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Jun 2024 03:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e7:65:0c:5f:c7:d1:42:9f:14:fe:f0:02:3b:83:56:0f:f8:10:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8C73AFFF65A3252BF36F686F6347E33163EC8EE
        Validity
            Not Before: Jun 18 01:20:00 2024 GMT
            Not After : Jun 17 01:25:00 2025 GMT
        Subject: CN=8E07A585B0DDDB291279D1CA760875F5CF8A1EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:16:e1:39:c3:e0:06:4a:94:56:01:82:9f:
                    56:6d:ed:22:10:a0:e9:73:78:a9:5c:19:e0:c9:60:
                    27:45:28:79:f0:d3:51:a2:46:b4:e9:b1:70:d3:c7:
                    80:00:e5:b8:98:92:09:99:14:4a:4c:05:1e:78:82:
                    a4:bb:b0:51:9c:bb:ce:90:fc:14:d2:95:40:bf:8a:
                    2e:7c:11:d9:f1:45:ac:ad:a4:d8:32:5a:4f:40:33:
                    8f:e8:59:38:57:8a:a5:e8:9a:eb:87:6a:33:f0:b0:
                    28:88:c5:a8:4c:ba:c4:da:8d:2f:0b:b1:c6:86:88:
                    b1:dd:1c:23:9a:6f:c2:89:e9:28:54:41:4d:56:32:
                    76:b0:b0:21:5d:cd:9e:e8:3d:9e:b5:5a:37:ec:d0:
                    fe:9a:93:25:aa:c5:99:aa:41:0e:13:59:ff:d0:5a:
                    99:11:7c:1d:78:9f:e8:ab:d7:4c:d6:ee:fe:37:b7:
                    f2:46:bc:b5:e6:6f:c1:c4:7a:0c:b4:ee:f9:e9:62:
                    f6:31:95:4e:58:b3:d6:f4:19:0b:a4:f1:9f:58:e7:
                    2e:1f:9d:35:23:7c:65:53:bd:ba:39:b7:f8:49:2a:
                    cf:72:bb:6b:ad:e7:8f:df:80:51:25:2a:b7:8e:70:
                    fb:b7:4a:94:05:f8:ff:c4:2c:9a:e4:fc:2c:f7:4b:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:A5:85:B0:DD:DB:29:12:79:D1:CA:76:08:75:F5:CF:8A:1E:B5
            X509v3 Authority Key Identifier:
                keyid:D8:C7:3A:FF:F6:5A:32:52:BF:36:F6:86:F6:34:7E:33:16:3E:C8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/323830363a3330353a3a2f33322d3332203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:305::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:54:7f:fc:4d:19:5e:d3:ab:2c:6d:a3:7e:aa:22:27:5c:
         a0:ad:26:8f:eb:4c:fe:99:66:a1:b5:24:e3:60:d5:42:16:4b:
         0d:99:32:b8:fc:6a:18:d0:bd:77:e3:d7:14:26:e1:73:8a:de:
         64:8e:ef:1f:57:08:40:d8:2f:63:5c:10:a1:4f:4c:28:a0:78:
         71:10:8b:b7:f2:56:7d:dd:f9:66:f2:cb:07:91:6e:c4:06:28:
         59:7f:5d:ef:be:3f:ca:44:07:1c:2a:08:30:9c:ff:c6:d2:48:
         3f:1f:5c:ee:75:80:81:0c:40:57:f5:08:b0:87:46:19:4d:ec:
         bb:11:fc:3a:d2:bb:c4:41:c2:11:07:04:f7:9c:89:29:2c:5d:
         9b:2d:34:bf:ed:26:72:76:bf:75:99:01:34:fc:95:7c:81:9a:
         1f:84:df:37:8b:96:64:af:98:53:5b:5a:4d:6c:2d:cb:ad:84:
         c8:ab:b6:c6:2c:bc:bf:01:27:71:13:21:3c:f5:e0:4d:50:90:
         fc:c9:e1:cf:6c:94:46:36:97:44:50:76:13:ef:62:c4:28:58:
         8a:25:37:94:8d:39:87:01:b3:fe:b7:1e:4a:54:d3:33:01:13:
         e5:dd:db:94:b8:3c:66:cb:dc:87:95:68:3b:76:b9:cf:2e:33:
         6a:d4:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 03:20:20 2024 by rpki-client on console.sobornost.net