Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a3a2f33352d3335203d3e20323730323137.roa
File:                     323830363a3430303a3a2f33352d3335203d3e20323730323137.roa (raw, json)
Hash identifier:          8l+NtWGZrKwQTC5vKGd1YTc8vcbXtVmvOlfwJO7kRYE=
Subject key identifier:   0E:3B:BC:3F:5E:C7:EE:D4:F1:DB:C4:24:BE:14:27:C8:32:71:7C:27
Certificate issuer:       /CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
Certificate serial:       553D2238982B104013794662E891562647C987B3
Authority key identifier: D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a3a2f33352d3335203d3e20323730323137.roa
Signing time:             Tue 05 Mar 2024 17:47:57 +0000
ROA not before:           Tue 05 Mar 2024 17:42:57 +0000
ROA not after:            Tue 04 Mar 2025 17:47:57 +0000
asID:                     270217
IP address blocks:        2806:400::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3d:22:38:98:2b:10:40:13:79:46:62:e8:91:56:26:47:c9:87:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
        Validity
            Not Before: Mar  5 17:42:57 2024 GMT
            Not After : Mar  4 17:47:57 2025 GMT
        Subject: CN=0E3BBC3F5EC7EED4F1DBC424BE1427C832717C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:76:6e:28:e3:8f:e1:14:bb:31:4a:51:a0:
                    e9:9f:0e:59:72:1c:85:82:6c:0b:1a:45:75:7c:8e:
                    f4:ef:52:58:0f:c9:b4:2c:78:73:00:5a:9f:1c:5c:
                    89:b0:b8:4e:d4:eb:b3:9e:ef:83:6d:45:e4:44:02:
                    dc:ef:5c:5d:79:69:55:d3:bf:ca:dc:c1:1c:b6:f0:
                    68:ca:d0:fc:d8:f2:d2:f5:e2:39:01:7b:59:60:bf:
                    3c:b8:c0:da:b6:dd:5d:b5:f7:c8:0e:53:41:65:4d:
                    1e:95:a6:0d:e3:01:be:b2:fc:57:9f:1d:f1:6c:8c:
                    f2:e4:f9:94:0e:b6:61:d5:3a:77:04:a5:b4:c6:63:
                    46:c6:c5:ce:f1:fb:70:dd:01:96:12:f6:21:5e:24:
                    1c:69:b8:61:5c:64:25:aa:8a:0e:c1:c7:55:a0:06:
                    fe:26:e7:0e:c7:c9:8e:7e:e6:d3:75:cc:a4:83:b7:
                    c8:06:d8:81:a4:fc:66:9a:fb:ed:21:5d:01:21:89:
                    13:0a:20:5f:c5:5e:3a:39:e5:68:ea:f4:6d:bb:b2:
                    3b:fc:e1:9b:ea:cb:58:55:b9:91:17:b1:9b:ef:85:
                    e4:96:50:ab:5e:fe:0a:2b:c1:cd:a1:b1:3b:aa:e4:
                    9e:5b:3f:b4:c6:ae:12:d5:a3:78:14:0a:b7:23:18:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:BC:3F:5E:C7:EE:D4:F1:DB:C4:24:BE:14:27:C8:32:71:7C:27
            X509v3 Authority Key Identifier:
                keyid:D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a3a2f33352d3335203d3e20323730323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:400::/35

    Signature Algorithm: sha256WithRSAEncryption
         84:36:8d:bb:cb:86:ec:45:a7:b2:67:d3:01:58:c5:f7:e6:21:
         12:7b:e8:47:7f:c1:e5:61:47:c0:ad:20:76:1a:ac:26:9f:be:
         8b:72:93:fa:6c:e5:ed:81:b6:65:ac:ec:f7:d0:dc:b6:38:72:
         4f:7b:e1:c3:10:87:1a:37:60:32:aa:93:98:88:4e:d3:07:c7:
         bf:fc:39:1a:04:42:e0:bf:62:ef:87:ed:cc:6a:28:5d:4b:ff:
         69:20:0c:6a:91:e1:3b:95:69:0d:dd:e7:8f:e5:17:5c:41:d2:
         d6:f6:70:25:66:23:47:10:d5:c1:69:69:eb:f6:ac:5f:ed:57:
         73:ae:05:80:d3:43:5e:22:63:08:8b:c8:ef:ff:ef:04:72:28:
         1c:9c:67:ce:45:63:1f:43:1c:a7:98:54:8b:ef:0a:bc:04:b9:
         06:f9:83:e6:d0:f3:dd:17:09:72:4d:d0:55:a2:1c:f8:11:f5:
         b9:91:73:4a:e5:bd:da:5e:16:a9:b1:25:8f:e5:b7:f3:51:2a:
         c4:d9:08:75:18:5e:95:c0:b7:fb:bb:86:64:ba:01:2b:69:b3:
         89:ff:a9:3b:17:b3:1f:18:2f:27:a1:9e:0d:1d:b9:53:09:f1:
         24:d9:bb:6a:eb:aa:b5:bb:1a:28:31:81:72:ec:8c:8a:31:a4:
         1a:ca:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org