Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a3a2f33352d3335203d3e20323730313433.roa
File:                     323830363a3364663a3a2f33352d3335203d3e20323730313433.roa (raw, json)
Hash identifier:          kWcJJeMPqIU1xkKCUgbq9wY8kEG9yfukv8lmTREQrEo=
Subject key identifier:   C0:11:8F:74:AE:A0:71:7B:7E:6A:ED:06:06:A1:D7:07:A6:EC:DC:6E
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       6587530BC99531C9554790BA6137AD560826A1D5
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a3a2f33352d3335203d3e20323730313433.roa
Signing time:             Tue 05 Mar 2024 18:05:01 +0000
ROA not before:           Tue 05 Mar 2024 18:00:01 +0000
ROA not after:            Tue 04 Mar 2025 18:05:01 +0000
asID:                     270143
IP address blocks:        2806:3df::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:87:53:0b:c9:95:31:c9:55:47:90:ba:61:37:ad:56:08:26:a1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Mar  5 18:00:01 2024 GMT
            Not After : Mar  4 18:05:01 2025 GMT
        Subject: CN=C0118F74AEA0717B7E6AED0606A1D707A6ECDC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:b1:83:07:78:18:00:f9:07:ad:47:30:f1:
                    1c:82:36:47:75:b6:f0:35:4a:d5:cf:92:2d:1e:f6:
                    77:d6:f5:3c:26:f4:53:d2:e6:63:e1:b4:e1:79:48:
                    07:fe:a3:dc:92:1e:1a:74:8a:85:7a:af:36:2f:6f:
                    ac:42:f8:fb:81:bb:d2:cd:99:fa:ee:6a:22:ec:35:
                    4b:6a:e7:f7:8e:a7:1f:0c:70:8b:78:61:45:2d:44:
                    0a:db:7c:79:29:38:98:7c:fd:e1:a4:12:86:03:ee:
                    22:d7:a3:11:b2:99:55:82:38:69:ff:06:85:3f:68:
                    1a:b0:b1:22:fe:8c:b7:20:1e:c9:5a:a3:23:d0:db:
                    c2:49:7c:d2:76:fe:1f:c4:ec:71:d2:3e:d1:ea:4a:
                    38:f7:01:cc:36:e0:07:cb:b5:67:44:83:3c:95:3c:
                    a7:4a:e3:b6:af:fa:6c:06:d1:62:35:16:35:4b:ff:
                    5a:e5:4e:c3:d3:16:06:ff:19:c7:82:c2:b2:b6:de:
                    44:e1:43:c6:c0:a9:44:f0:12:bc:bb:db:03:2f:ec:
                    c8:98:dd:6b:5a:c9:37:0f:6d:fb:19:5f:31:cb:a3:
                    e0:a7:fd:3f:06:61:38:dd:40:6a:9c:a5:fc:84:a2:
                    ff:9f:9c:23:41:b2:23:53:20:92:d6:37:8b:5b:17:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:8F:74:AE:A0:71:7B:7E:6A:ED:06:06:A1:D7:07:A6:EC:DC:6E
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a3a2f33352d3335203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3df::/35

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:e1:a8:69:89:ff:c7:89:a9:9f:08:12:6f:9c:aa:58:bf:
         3b:f8:c8:72:d7:eb:dd:8e:90:a5:1d:28:08:9c:ad:74:02:75:
         b6:18:f9:39:bc:f2:51:f6:90:74:f1:3f:85:60:e8:54:9f:86:
         d3:4d:e4:82:49:0c:46:33:cf:24:dc:4c:a2:33:6c:6c:62:90:
         62:a4:25:4a:59:ca:51:ee:54:dd:80:05:50:7a:f8:e5:da:a4:
         3d:fe:3c:e0:3a:25:3c:ab:18:7e:65:bf:14:92:e4:c8:e9:c8:
         32:94:ed:b9:7e:4c:2d:b9:25:c9:6b:18:9b:21:6d:6a:96:a2:
         97:59:98:f3:61:ad:44:a4:e6:50:55:31:4b:05:fc:26:d0:10:
         22:db:c6:37:8b:d2:21:92:ae:1f:16:d8:16:f0:f4:93:68:dd:
         82:28:32:86:6d:8f:2d:d9:a1:b0:f1:45:c5:21:4e:97:f1:a5:
         ca:0e:b3:c2:e8:d5:4a:99:82:6b:d7:ae:da:ee:ac:af:03:73:
         10:e3:2a:aa:8a:9f:f2:24:e3:6d:ed:65:7d:b4:6e:ee:0d:71:
         d9:b7:c9:cd:0d:70:c5:89:bb:d9:3c:aa:c2:c4:55:a5:2b:2c:
         af:b3:16:fe:3b:fd:73:6a:d7:66:f8:12:b1:9d:12:69:51:89:
         3a:fd:14:ca
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZYdTC8mVMclVR5C6YTetVggmodUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3RkJBM0UxREY4QUQ2OTFEQjc1NTM3MkQ3MzFERkFC
NkUwQ0Q4QzAeFw0yNDAzMDUxODAwMDFaFw0yNTAzMDQxODA1MDFaMDMxMTAvBgNV
BAMTKEMwMTE4Rjc0QUVBMDcxN0I3RTZBRUQwNjA2QTFENzA3QTZFQ0RDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqLGDB3gYAPkHrUcw8RyCNkd1
tvA1StXPki0e9nfW9Twm9FPS5mPhtOF5SAf+o9ySHhp0ioV6rzYvb6xC+PuBu9LN
mfruaiLsNUtq5/eOpx8McIt4YUUtRArbfHkpOJh8/eGkEoYD7iLXoxGymVWCOGn/
BoU/aBqwsSL+jLcgHslaoyPQ28JJfNJ2/h/E7HHSPtHqSjj3Acw24AfLtWdEgzyV
PKdK47av+mwG0WI1FjVL/1rlTsPTFgb/GceCwrK23kThQ8bAqUTwEry72wMv7MiY
3WtayTcPbfsZXzHLo+Cn/T8GYTjdQGqcpfyEov+fnCNBsiNTIJLWN4tbF2ibAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwBGPdK6gcXt+au0GBqHXB6bs3G4wHwYDVR0j
BBgwFoAUO3+6Ph34rWkdt1U3LXMd+rbgzYwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkM5QzE0MjI3NUQ2RTExQTBFRDlCNEZBQUREQkI4QzJB
N0QzRjFDNDZENzUzMjBBNzI1MUM3MTk5NjE4N0YxLzAvM0I3RkJBM0UxREY4QUQ2
OTFEQjc1NTM3MkQ3MzFERkFCNkUwQ0Q4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjdGQkEzRTFERjhBRDY5MURC
NzU1MzcyRDczMURGQUI2RTBDRDhDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZDOUMxNDIyNzVENkUxMUEwRUQ5QjRGQUFEREJCOEMyQTdEM0YxQzQ2
RDc1MzIwQTcyNTFDNzE5OTYxODdGMS8wLzMyMzgzMDM2M2EzMzY0NjYzYTNhMmYz
MzM1MmQzMzM1MjAzZDNlMjAzMjM3MzAzMTM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBgPfADAN
BgkqhkiG9w0BAQsFAAOCAQEAQuPhqGmJ/8eJqZ8IEm+cqli/O/jIctfr3Y6QpR0o
CJytdAJ1thj5ObzyUfaQdPE/hWDoVJ+G003kgkkMRjPPJNxMojNsbGKQYqQlSlnK
Ue5U3YAFUHr45dqkPf484DolPKsYfmW/FJLkyOnIMpTtuX5MLbklyWsYmyFtapai
l1mY82GtRKTmUFUxSwX8JtAQItvGN4vSIZKuHxbYFvD0k2jdgigyhm2PLdmhsPFF
xSFOl/Glyg6zwujVSpmCa9eu2u6srwNzEOMqqoqf8iTjbe1lfbRu7g1x2bfJzQ1w
xYm72TyqwsRVpSssr7MW/jv9c2rXZvgSsZ0SaVGJOv0Uyg==
-----END CERTIFICATE-----
Generated at Thu May 16 02:09:27 2024 by rpki-client on console-fra.rpki-client.org