Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/323830363a3364633a3a2f33322d3438203d3e20323730313431.roa
File:                     323830363a3364633a3a2f33322d3438203d3e20323730313431.roa (raw, json)
Hash identifier:          7NkgNlxBornMp2E3YvRUhV6bEcrmoaL4kAC0oAmwzAg=
Subject key identifier:   2F:11:D1:71:C6:9A:EB:4C:6C:6D:64:3E:E4:A7:E6:9C:66:1E:AC:1B
Certificate issuer:       /CN=569E389D6F3ED2F3682633053A92816DFAE6BFE6
Certificate serial:       5933EBC142680747037807D20E517125AEFE8916
Authority key identifier: 56:9E:38:9D:6F:3E:D2:F3:68:26:33:05:3A:92:81:6D:FA:E6:BF:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/323830363a3364633a3a2f33322d3438203d3e20323730313431.roa
Signing time:             Tue 05 Mar 2024 18:10:15 +0000
ROA not before:           Tue 05 Mar 2024 18:05:15 +0000
ROA not after:            Tue 04 Mar 2025 18:10:15 +0000
asID:                     270141
IP address blocks:        2806:3dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:33:eb:c1:42:68:07:47:03:78:07:d2:0e:51:71:25:ae:fe:89:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E389D6F3ED2F3682633053A92816DFAE6BFE6
        Validity
            Not Before: Mar  5 18:05:15 2024 GMT
            Not After : Mar  4 18:10:15 2025 GMT
        Subject: CN=2F11D171C69AEB4C6C6D643EE4A7E69C661EAC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:aa:af:59:12:2f:4a:e8:5c:6f:b8:ff:51:
                    17:67:fa:1d:9b:2b:dd:3e:6d:98:40:58:b3:11:a8:
                    ac:fc:5e:04:e9:97:28:dd:16:d5:3f:b0:e0:89:9d:
                    27:2e:f6:44:58:b6:ff:dd:51:5b:20:50:41:a0:b8:
                    ad:75:cf:1b:fa:06:ec:3a:93:03:56:7c:ec:77:0d:
                    bc:05:81:62:72:d9:08:94:31:c6:d5:b6:48:48:e4:
                    f0:24:95:23:fd:8b:9c:56:12:dd:94:bb:b1:1b:7c:
                    cf:b2:e0:06:e6:53:01:2e:4e:36:f8:4f:77:25:0e:
                    66:6e:70:fd:9c:9c:a8:7e:e1:0e:0d:3f:00:30:e7:
                    c8:fd:3a:08:77:12:28:7a:84:50:30:84:86:e7:00:
                    b1:cd:1c:ec:f0:c1:9b:7c:c1:9f:70:4b:30:67:aa:
                    4f:cf:36:32:cc:9a:0e:4f:2a:56:e9:43:b2:89:e6:
                    d5:53:b3:96:30:de:0d:d5:7e:bd:07:61:62:9e:9c:
                    4b:0e:d2:c1:28:5f:d7:81:77:eb:58:8c:61:39:e7:
                    58:c4:97:ac:84:a1:d1:be:01:e0:e9:56:de:ec:d0:
                    59:85:b6:2e:36:02:e5:ff:95:36:1b:cf:3e:64:28:
                    44:e6:ed:5e:91:04:e3:93:34:ba:68:e4:6f:4c:2d:
                    7d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:11:D1:71:C6:9A:EB:4C:6C:6D:64:3E:E4:A7:E6:9C:66:1E:AC:1B
            X509v3 Authority Key Identifier:
                keyid:56:9E:38:9D:6F:3E:D2:F3:68:26:33:05:3A:92:81:6D:FA:E6:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/323830363a3364633a3a2f33322d3438203d3e20323730313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:74:9e:62:1a:68:5e:8b:85:2a:3c:00:24:68:e7:0b:51:
         30:63:7d:f9:8c:62:3c:2e:37:2e:6a:bf:db:95:f0:43:bd:55:
         89:c7:cd:ba:e9:4d:6b:e5:7d:44:af:d9:87:32:5e:43:c5:d8:
         1f:7a:fe:8d:92:ed:63:a9:77:7b:6a:6a:8b:55:7c:a1:d2:1d:
         af:46:6b:22:33:f0:1b:f6:2b:9a:ea:86:bc:57:46:06:9f:41:
         01:50:64:1f:72:90:43:c0:6e:aa:c9:fc:c6:9b:27:ec:6e:48:
         2e:15:85:02:58:b1:35:bc:31:06:80:65:d3:7d:36:90:c7:95:
         3a:ab:0e:aa:a1:64:fd:cf:cf:ad:f2:6c:05:0d:08:bd:3f:b1:
         e6:80:65:e8:11:8d:52:21:ae:d9:79:b2:17:67:49:5b:d0:34:
         83:c5:7c:a9:c6:67:26:fc:7a:44:93:2e:5e:4b:e2:33:b2:09:
         79:31:f4:c8:f3:03:1d:12:f8:cc:c6:ec:ad:e0:63:69:84:c3:
         80:d0:c6:5f:b3:24:aa:cb:56:22:b4:f8:4d:0a:67:18:d7:55:
         f2:4f:98:d8:cc:0e:7b:3f:83:be:43:23:87:fb:57:2d:22:e1:
         3a:b0:4e:ec:83:a1:cd:6f:ff:73:47:f4:6e:6b:79:4c:94:e6:
         c2:bc:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:04:17 2024 by rpki-client on console-fra.rpki-client.org