Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3332203d3e203238343431.roa
File:                     323830363a3330633a3a2f33322d3332203d3e203238343431.roa (raw, json)
Hash identifier:          batDC4HlrKn+lHkgaJY8ue6x1pe+8diQ6CuU3sfPbp0=
Subject key identifier:   F6:FF:FF:2B:53:EF:E1:61:CE:ED:33:AA:E7:92:8B:86:C0:60:2F:C8
Certificate issuer:       /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
Certificate serial:       211E16CD572A62EA5D76FE2C4F7BE7C0FB0F68A6
Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3332203d3e203238343431.roa
Signing time:             Tue 05 Mar 2024 17:53:44 +0000
ROA not before:           Tue 05 Mar 2024 17:48:44 +0000
ROA not after:            Tue 04 Mar 2025 17:53:44 +0000
asID:                     28441
IP address blocks:        2806:30c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1e:16:cd:57:2a:62:ea:5d:76:fe:2c:4f:7b:e7:c0:fb:0f:68:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
        Validity
            Not Before: Mar  5 17:48:44 2024 GMT
            Not After : Mar  4 17:53:44 2025 GMT
        Subject: CN=F6FFFF2B53EFE161CEED33AAE7928B86C0602FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:ba:3b:95:21:4c:07:06:0f:3f:ca:80:52:
                    c0:1e:8d:c7:42:b5:28:92:8a:79:82:04:69:73:e7:
                    bd:2b:b4:2d:96:23:63:62:c3:6d:38:03:8c:1f:e4:
                    52:9c:75:aa:ca:62:6c:50:85:a0:b0:e4:2f:2c:18:
                    03:02:23:7b:a3:d6:92:0e:83:17:0c:2c:87:42:02:
                    e7:4f:ab:3c:40:02:c6:57:11:dc:31:cc:2f:f8:dd:
                    ed:7f:a4:00:6a:41:ea:d4:22:1b:dc:5b:7b:29:da:
                    3c:8a:e4:73:ab:e9:19:73:11:3a:c6:6c:fa:d0:3c:
                    f2:eb:c2:32:17:3e:37:70:5d:b9:6b:55:e9:ad:ad:
                    d2:e7:ba:7f:55:d1:d4:c5:7a:f6:df:a1:0c:3b:84:
                    3f:81:27:b0:cf:c6:28:79:0c:c7:c6:3a:dc:b6:8b:
                    a4:b2:ec:e5:27:f1:5c:12:a4:29:78:d8:7a:de:a3:
                    05:5f:12:10:57:e1:57:e8:72:1b:15:1d:32:8e:95:
                    ee:a4:1c:e0:c3:8b:06:31:4d:cf:fc:ba:b6:5e:2e:
                    f6:50:16:c7:5e:c1:49:f0:3a:48:03:fc:a9:63:19:
                    fd:46:63:31:68:2d:85:42:6a:39:36:89:43:af:69:
                    c0:b9:fa:5f:de:d5:e3:41:d8:69:a6:0c:b3:c9:57:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FF:FF:2B:53:EF:E1:61:CE:ED:33:AA:E7:92:8B:86:C0:60:2F:C8
            X509v3 Authority Key Identifier:
                keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3332203d3e203238343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:de:7e:7d:9a:a0:1d:f4:6c:67:53:88:9d:e9:a2:a8:0f:60:
         6a:48:12:3e:ac:94:41:41:6c:11:2c:e4:92:6d:92:fb:bf:f8:
         8e:61:65:ee:61:60:9f:79:66:10:69:6b:ad:c4:44:3d:59:a3:
         46:ad:3f:c3:6c:18:44:8d:b5:a8:59:11:65:10:27:a3:e0:6e:
         32:99:2e:77:3e:d7:9f:12:e0:25:ea:9a:e4:02:88:29:90:8a:
         21:85:7e:0f:81:f8:87:5e:91:e2:0f:7e:92:2d:a6:c9:21:92:
         a0:b5:4b:ce:3c:98:7d:af:17:16:03:64:bd:9d:ae:25:b7:ce:
         ef:b6:36:cc:a4:46:98:c5:20:e5:3f:25:0e:ca:76:6a:fa:8e:
         de:70:48:fb:17:9b:04:47:0a:d2:54:07:3b:06:8e:0e:89:9e:
         3a:1a:1b:de:bb:4f:55:ba:cd:cc:93:9a:5b:45:f3:55:43:78:
         3d:19:53:2a:27:2c:f8:a9:82:60:40:66:c6:e6:e7:50:9e:e4:
         ec:c8:fc:64:c2:58:93:a3:51:54:97:90:ad:cd:49:16:ad:be:
         5f:78:34:30:10:9a:92:3e:88:14:f7:af:11:9a:74:f8:43:a4:
         83:a9:43:8c:ad:74:de:68:dc:03:c8:d6:82:cf:31:d0:5a:f9:
         59:e9:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org