Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3a2f34382d3438203d3e20323635363035.roa
File:                     323830363a3336313a3a2f34382d3438203d3e20323635363035.roa (raw, json)
Hash identifier:          Kk6EYTrXgjM5zbuOdhF8rlLkVvgB5tzj1UESVy7HJrc=
Subject key identifier:   46:B7:80:27:B7:79:C4:BA:7F:D6:EF:45:8E:9D:AD:CD:8A:B6:46:20
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       3A0434C0E6476E6EB8D5F4CFF5A2D3C7F20C9D08
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3a2f34382d3438203d3e20323635363035.roa
Signing time:             Tue 05 Mar 2024 17:58:02 +0000
ROA not before:           Tue 05 Mar 2024 17:53:02 +0000
ROA not after:            Tue 04 Mar 2025 17:58:02 +0000
asID:                     265605
IP address blocks:        2806:361::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:04:34:c0:e6:47:6e:6e:b8:d5:f4:cf:f5:a2:d3:c7:f2:0c:9d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Mar  5 17:53:02 2024 GMT
            Not After : Mar  4 17:58:02 2025 GMT
        Subject: CN=46B78027B779C4BA7FD6EF458E9DADCD8AB64620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4e:65:36:c7:1d:23:82:61:ce:68:e1:d1:80:
                    b6:91:e6:12:e4:69:85:e1:92:81:c8:8f:b0:6a:b6:
                    0f:de:f7:39:c6:ad:e1:8d:18:5c:20:a9:4c:0f:ec:
                    65:bc:d4:00:59:66:ba:3e:7d:36:1b:8b:e8:cf:b4:
                    83:6e:33:00:04:47:84:47:1b:97:24:bf:44:26:4e:
                    dd:7b:72:30:2e:e0:0a:8d:2c:f4:f8:aa:ee:57:84:
                    f6:53:89:64:1f:1a:0a:07:29:79:e9:ca:ec:91:15:
                    c8:78:59:36:3a:d7:68:78:d6:6c:f8:25:4a:3d:7b:
                    f4:37:71:f2:45:17:a4:41:24:9d:5a:b3:8d:65:2c:
                    e7:b3:f3:c4:4b:f5:c8:64:a5:c4:d3:24:7b:84:a9:
                    f9:36:af:89:db:32:fb:a0:e8:55:49:da:6b:35:9b:
                    f4:66:c4:1b:c9:aa:ca:d1:b3:c3:d8:4e:f2:3c:34:
                    e3:27:e9:55:d9:60:83:d2:56:e8:69:4e:6e:1a:32:
                    98:44:1f:41:39:b5:fa:c5:01:dc:7c:88:93:82:64:
                    96:97:9d:3d:ac:d5:08:aa:dd:70:70:e3:ef:f4:63:
                    89:e8:cb:50:59:b9:b6:4a:83:03:2c:a3:9c:82:c4:
                    c6:34:05:aa:48:20:42:21:cf:80:6d:c0:d5:73:42:
                    12:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:80:27:B7:79:C4:BA:7F:D6:EF:45:8E:9D:AD:CD:8A:B6:46:20
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3a2f34382d3438203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:f1:b4:3b:15:30:f1:2c:0f:d4:82:9d:9e:86:1f:eb:5e:8f:
         f1:43:bc:68:0d:5e:9c:aa:d4:d2:2c:8e:3e:c7:de:42:e0:d7:
         03:24:38:a3:fa:cc:f8:ae:a6:1d:d5:a2:23:38:aa:28:19:74:
         6f:66:a1:4f:8e:be:99:2c:e4:f0:6b:f5:66:64:e7:b3:a9:3e:
         fe:8f:8d:e5:2f:0e:5b:3b:95:14:b4:25:ec:d6:00:ba:40:9a:
         df:51:31:80:de:98:33:88:52:ec:42:03:9a:98:96:6d:9b:bb:
         9c:3d:c1:46:04:1d:53:d4:c3:a5:ca:21:bf:48:9f:f4:6b:4a:
         4d:d4:2c:c8:b8:de:a2:32:c7:6c:89:eb:ef:e9:94:15:be:31:
         14:c3:6a:8b:3b:9e:af:90:f3:46:3b:31:5c:e3:bd:4c:07:7d:
         13:b0:a2:e3:c1:69:47:e4:59:b3:c6:03:19:b8:1b:68:c5:9d:
         e4:7b:c3:9c:08:d1:7b:bd:86:59:52:16:96:c1:de:ac:e9:0a:
         e5:76:e7:c0:ee:05:6c:27:35:fb:71:b4:62:a8:bb:c3:c7:89:
         e0:76:da:15:1f:0b:21:54:4d:d1:e8:d7:27:75:6a:54:7a:eb:
         57:aa:86:39:5d:fa:32:86:44:3b:d5:58:ad:29:02:3e:1b:01:
         07:29:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:56 2024 by rpki-client on console-ams.rpki-client.org