Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/323830363a3362363a3a2f33322d3438203d3e203238333934.roa
File:                     323830363a3362363a3a2f33322d3438203d3e203238333934.roa (raw, json)
Hash identifier:          HqhBShuXHGMHTxe8F+NoAbQLdJX4MyDlSgYzmBwoyzs=
Subject key identifier:   1A:12:55:9B:5B:E6:3B:78:CF:83:49:31:E5:2C:3C:AE:20:11:22:7A
Certificate issuer:       /CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71
Certificate serial:       74C867CBC2CEA69DE1FF09ED97B77DB4EC910D85
Authority key identifier: A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/323830363a3362363a3a2f33322d3438203d3e203238333934.roa
Signing time:             Mon 19 Aug 2024 23:35:00 +0000
ROA not before:           Mon 19 Aug 2024 23:30:00 +0000
ROA not after:            Mon 18 Aug 2025 23:35:00 +0000
asID:                     28394
IP address blocks:        2806:3b6::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c8:67:cb:c2:ce:a6:9d:e1:ff:09:ed:97:b7:7d:b4:ec:91:0d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71
        Validity
            Not Before: Aug 19 23:30:00 2024 GMT
            Not After : Aug 18 23:35:00 2025 GMT
        Subject: CN=1A12559B5BE63B78CF834931E52C3CAE2011227A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:06:7b:e7:2b:59:4d:f8:7a:1e:17:42:95:
                    03:79:6b:11:8c:9d:88:b6:4d:ee:5e:f2:98:da:f7:
                    b5:a8:a3:03:7d:9b:0f:db:df:b4:46:f3:5e:2d:69:
                    90:d1:66:61:17:5c:ce:8a:a6:c2:92:15:a9:10:b6:
                    5c:ae:32:92:f7:63:60:1a:49:1a:6b:2e:ae:17:af:
                    b5:41:97:2f:1b:e3:ca:b3:33:66:a7:71:f2:63:ba:
                    f2:45:da:17:7d:8a:86:d8:89:7c:be:62:72:ff:37:
                    c8:38:1b:ca:71:1b:28:0a:31:9e:28:61:a8:cf:67:
                    81:c5:58:c4:2b:5f:59:41:72:dd:ef:c7:41:90:0a:
                    25:27:4f:e3:f8:64:6a:64:c6:f0:3b:ef:e8:a5:65:
                    ae:64:04:09:65:79:7e:d3:a7:d7:fe:65:c2:00:5f:
                    2f:cf:16:6d:05:29:f5:3e:e2:b2:9f:e0:cc:7d:0b:
                    f4:2f:1c:7c:bd:96:4f:58:56:0f:41:30:d5:7c:c8:
                    21:7d:30:eb:01:44:5e:1d:7f:10:d3:33:0c:76:a8:
                    24:2a:86:73:5b:35:7c:f0:9f:b0:63:5d:e5:8f:20:
                    65:a7:99:0b:80:cd:21:e0:11:c3:31:8a:04:2e:34:
                    dd:38:3e:04:a5:fa:1d:6b:01:21:13:3e:b3:da:2f:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:12:55:9B:5B:E6:3B:78:CF:83:49:31:E5:2C:3C:AE:20:11:22:7A
            X509v3 Authority Key Identifier:
                keyid:A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/323830363a3362363a3a2f33322d3438203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:15:86:ea:3d:f1:13:b1:be:cd:15:39:b1:ce:61:dd:a9:
         ee:6a:88:2d:32:2a:1e:c1:a1:35:1e:16:43:81:6e:16:1b:68:
         07:90:4c:af:09:66:6e:b6:24:ee:fd:48:40:f1:57:e5:19:00:
         ba:1c:08:dc:21:be:4c:58:b0:f3:24:45:1e:ed:96:57:82:0b:
         25:d3:1d:73:f1:cd:42:9d:33:76:a9:9b:ad:0c:a5:b1:28:74:
         23:9e:f6:c0:35:7a:bd:01:db:95:5a:bb:f7:ff:a3:9d:9f:bb:
         54:a1:26:2a:67:66:82:1c:06:ed:d1:20:8e:f2:f1:0a:a1:f0:
         3f:a2:b1:2e:ba:87:f0:6f:60:b5:d5:c9:6d:84:09:ce:8f:5c:
         0a:8e:ec:f0:01:78:37:5a:44:48:8b:43:f5:61:bd:14:d7:1c:
         bd:bf:3c:7e:39:1f:73:47:ec:25:b8:ba:ab:76:db:10:ff:46:
         9e:b2:03:52:b1:34:94:45:c0:fe:aa:06:4e:29:70:61:fe:ce:
         b0:b9:fd:49:e6:86:99:17:44:c0:5f:89:f6:60:8a:66:62:0a:
         3a:69:26:b5:d4:58:fe:8e:7d:aa:de:04:6f:9d:0b:75:4c:5f:
         32:d7:08:f4:2d:43:67:49:9a:b8:9b:37:79:1e:d1:9c:7d:8b:
         38:57:07:d9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUdMhny8LOpp3h/wntl7d9tOyRDYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdFMDE4NkI1QTFFODUzRTQzMTFFNzJEQkNEMUMxRDM4
QUZEM0E3MTAeFw0yNDA4MTkyMzMwMDBaFw0yNTA4MTgyMzM1MDBaMDMxMTAvBgNV
BAMTKDFBMTI1NTlCNUJFNjNCNzhDRjgzNDkzMUU1MkMzQ0FFMjAxMTIyN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxQZ75ytZTfh6HhdClQN5axGM
nYi2Te5e8pja97WoowN9mw/b37RG814taZDRZmEXXM6KpsKSFakQtlyuMpL3Y2Aa
SRprLq4Xr7VBly8b48qzM2ancfJjuvJF2hd9iobYiXy+YnL/N8g4G8pxGygKMZ4o
YajPZ4HFWMQrX1lBct3vx0GQCiUnT+P4ZGpkxvA77+ilZa5kBAlleX7Tp9f+ZcIA
Xy/PFm0FKfU+4rKf4Mx9C/QvHHy9lk9YVg9BMNV8yCF9MOsBRF4dfxDTMwx2qCQq
hnNbNXzwn7BjXeWPIGWnmQuAzSHgEcMxigQuNN04PgSl+h1rASETPrPaL0cFAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUGhJVm1vmO3jPg0kx5Sw8riARInowHwYDVR0j
BBgwFoAUp+AYa1oehT5DEectvNHB04r9OnEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xREM4RURGMjgwNjBBNTNDM0Y5RjVDNUI3REVDQTBCMkNG
NTM0NzE3MkRGQ0U4QjU3N0U3ODM3RjUxODcyQzdDLzAvQTdFMDE4NkI1QTFFODUz
RTQzMTFFNzJEQkNEMUMxRDM4QUZEM0E3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BN0UwMTg2QjVBMUU4NTNFNDMx
MUU3MkRCQ0QxQzFEMzhBRkQzQTcxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMURDOEVERjI4MDYwQTUzQzNGOUY1QzVCN0RFQ0EwQjJDRjUzNDcxNzJE
RkNFOEI1NzdFNzgzN0Y1MTg3MkM3Qy8wLzMyMzgzMDM2M2EzMzYyMzYzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM4MzMzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYDtjANBgkq
hkiG9w0BAQsFAAOCAQEAFg4Vhuo98ROxvs0VObHOYd2p7mqILTIqHsGhNR4WQ4Fu
FhtoB5BMrwlmbrYk7v1IQPFX5RkAuhwI3CG+TFiw8yRFHu2WV4ILJdMdc/HNQp0z
dqmbrQylsSh0I572wDV6vQHblVq79/+jnZ+7VKEmKmdmghwG7dEgjvLxCqHwP6Kx
LrqH8G9gtdXJbYQJzo9cCo7s8AF4N1pESItD9WG9FNccvb88fjkfc0fsJbi6q3bb
EP9GnrIDUrE0lEXA/qoGTilwYf7OsLn9SeaGmRdEwF+J9mCKZmIKOmkmtdRY/o59
qt4Eb50LdUxfMtcI9C1DZ0mauJs3eR7RnH2LOFcH2Q==
-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org