Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a633030303a3a2f33352d3335203d3e20323730313433.roa
File:                     323830363a3364663a633030303a3a2f33352d3335203d3e20323730313433.roa (raw, json)
Hash identifier:          NKowz2ahPbFNvOgph29W4IEN2RMpbXIav54qccbaIvg=
Subject key identifier:   B5:E9:47:04:B5:00:5A:4A:FC:D4:B5:8D:8F:96:0B:32:19:1E:98:09
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       241E65EDFA320E15F5C4FCD27FD49F36A22E251B
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a633030303a3a2f33352d3335203d3e20323730313433.roa
Signing time:             Tue 05 Mar 2024 18:05:02 +0000
ROA not before:           Tue 05 Mar 2024 18:00:02 +0000
ROA not after:            Tue 04 Mar 2025 18:05:02 +0000
asID:                     270143
IP address blocks:        2806:3df:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1e:65:ed:fa:32:0e:15:f5:c4:fc:d2:7f:d4:9f:36:a2:2e:25:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Mar  5 18:00:02 2024 GMT
            Not After : Mar  4 18:05:02 2025 GMT
        Subject: CN=B5E94704B5005A4AFCD4B58D8F960B32191E9809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:f4:a0:0e:db:41:4d:01:71:26:9e:d2:7f:
                    c6:9a:07:13:86:da:d1:2f:60:42:c1:7c:ff:7f:53:
                    0d:e0:86:59:8f:f5:c5:72:38:98:0c:e9:0c:6d:8d:
                    65:f2:48:23:61:cc:f7:df:d0:38:fe:75:1d:e0:c8:
                    59:08:71:98:2d:0a:80:46:3c:28:f8:b3:75:fb:5a:
                    c5:8b:c6:49:41:b4:1f:21:8a:91:f8:5d:fc:d9:15:
                    30:f6:3d:02:24:34:58:67:d6:38:74:e1:a2:79:88:
                    13:6f:ae:49:a8:97:f4:dd:53:95:66:e4:81:b5:70:
                    ff:43:d6:04:48:f7:4b:2e:40:b8:c2:3f:ff:13:23:
                    b0:a1:df:f0:c7:f8:67:4f:f1:67:03:ff:c4:47:38:
                    d2:ab:22:ad:e4:79:88:39:99:fa:8f:66:6b:6c:7f:
                    9f:df:34:de:0b:a3:9d:c2:68:45:b7:f0:e0:7b:a9:
                    26:8d:3b:ae:8f:40:87:08:65:22:66:a5:cf:3d:2f:
                    9d:9f:6c:8a:ff:b7:74:cc:0c:63:cb:9e:cf:fb:bb:
                    ea:25:af:e8:43:c8:c0:4c:9a:31:e3:f3:41:aa:22:
                    90:81:47:6a:af:9f:d5:3d:bd:f6:cd:35:6f:73:e7:
                    38:37:d4:85:af:b4:8e:e7:78:b8:a9:b6:ff:f8:8c:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E9:47:04:B5:00:5A:4A:FC:D4:B5:8D:8F:96:0B:32:19:1E:98:09
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a633030303a3a2f33352d3335203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3df:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         18:42:31:ef:88:00:48:e2:4b:64:59:d6:bf:c8:fe:9b:d2:d1:
         4f:24:83:48:5a:09:61:4c:9e:9b:49:9b:d6:a1:1a:a8:65:b7:
         63:23:cd:15:8c:de:c1:08:5e:5d:4f:12:53:62:bd:d6:ff:9f:
         69:3c:5f:9c:c9:50:f9:2a:6b:fe:2d:b3:fc:41:fa:ff:34:96:
         cd:f0:63:61:2c:45:44:e8:63:7c:37:36:9e:71:a3:91:e1:ec:
         c1:24:a7:6b:5e:18:ff:0e:36:c7:1d:b9:df:55:95:65:3c:94:
         8d:4c:e3:52:34:08:5e:b6:0f:f9:19:7b:df:6e:92:d9:a4:2e:
         50:78:e9:54:87:b7:a0:cf:d5:13:30:82:8c:3d:ca:6b:e7:cd:
         06:5e:15:6f:0c:57:26:74:50:8a:8d:6c:0d:0d:bd:79:ec:4d:
         73:cc:d5:1c:df:8b:b6:86:9f:8d:fd:86:07:59:b7:00:54:ca:
         a4:b3:fb:3f:dd:da:35:7c:a2:40:11:f8:0a:4c:93:01:89:eb:
         32:7f:30:38:b0:a1:ae:27:17:ce:c4:39:80:6d:b0:a7:cb:25:
         1f:9b:3b:0a:08:81:06:24:7c:57:d5:b7:5d:b3:e1:ee:7e:fe:
         58:a3:81:16:91:45:4d:52:f4:f2:30:c1:8b:4b:41:d7:d1:4e:
         3d:3b:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org