Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/323830363a3230303a3a2f33322d3634203d3e2037343338.roa
File:                     323830363a3230303a3a2f33322d3634203d3e2037343338.roa (raw, json)
Hash identifier:          OuaVcJngCD7ZVChQTmSK2lbgnGIPegYK4uzoIRXMM14=
Subject key identifier:   2B:75:D7:50:4D:EC:F7:32:C3:3A:E2:1B:D2:FC:D5:6A:1E:A2:4B:4D
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       103AD126B27207A00A7D890916B5C846DE6B6341
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/323830363a3230303a3a2f33322d3634203d3e2037343338.roa
Signing time:             Tue 05 Mar 2024 18:16:23 +0000
ROA not before:           Tue 05 Mar 2024 18:11:23 +0000
ROA not after:            Tue 04 Mar 2025 18:16:23 +0000
asID:                     7438
IP address blocks:        2806:200::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3a:d1:26:b2:72:07:a0:0a:7d:89:09:16:b5:c8:46:de:6b:63:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Mar  5 18:11:23 2024 GMT
            Not After : Mar  4 18:16:23 2025 GMT
        Subject: CN=2B75D7504DECF732C33AE21BD2FCD56A1EA24B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:63:7a:22:c0:d4:6b:41:79:47:7a:fc:dd:
                    bd:45:5a:89:6c:c2:d4:57:a5:c6:9a:4f:8d:1c:ea:
                    63:af:de:96:f8:cc:58:30:c4:d8:05:f8:36:53:89:
                    5e:10:8d:16:79:65:50:ec:4e:f9:8f:03:a6:d5:ca:
                    31:8b:22:17:21:be:85:34:0a:49:70:06:b3:06:4c:
                    a3:46:b5:ca:c8:cd:53:48:bc:a1:dd:93:92:f1:8b:
                    5c:18:6f:59:e9:c5:b9:bb:33:ae:37:70:02:52:68:
                    f5:7a:cb:b5:bb:e9:6f:52:0c:a1:52:4d:29:be:88:
                    11:01:2c:ea:47:45:11:85:89:68:fc:7c:9a:d7:33:
                    ee:fe:93:7c:3d:6a:75:80:c1:53:e4:c9:4c:92:65:
                    64:f8:f6:c4:e2:9e:58:d7:3f:f6:d9:52:78:c2:1f:
                    96:58:5a:20:21:8a:27:78:aa:f1:b4:a3:98:20:ff:
                    16:10:d7:2d:74:5b:43:7c:82:ee:bf:63:94:59:f9:
                    77:15:f1:26:07:38:f1:40:d7:70:ad:06:b1:a0:22:
                    62:66:ee:ac:1d:6a:8b:23:8a:04:f2:83:3e:5f:66:
                    2c:0a:27:ee:ba:48:3a:4d:13:d8:b8:b4:bd:21:13:
                    37:3a:c1:81:11:9b:0f:9d:5a:be:bf:66:a3:f9:5b:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:75:D7:50:4D:EC:F7:32:C3:3A:E2:1B:D2:FC:D5:6A:1E:A2:4B:4D
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/323830363a3230303a3a2f33322d3634203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:e4:82:36:c4:6c:0c:00:37:4e:19:87:57:ef:13:a8:72:
         24:3a:47:44:f3:c3:1f:f2:bd:cc:5c:94:15:a8:d4:1b:f7:7b:
         86:19:a4:a2:67:16:6c:3a:55:ae:f5:52:10:73:e2:6d:84:23:
         ed:f9:48:a9:d6:59:85:c9:59:3a:74:b3:bc:e6:a4:b1:f0:37:
         e7:c8:ca:15:d0:e7:e6:ce:2d:ee:41:8e:66:05:c9:13:f1:fb:
         10:ff:27:2f:6a:ae:1d:f7:4e:20:a2:80:58:76:c5:19:07:d7:
         59:1b:14:47:24:7f:a0:9a:c9:db:03:e1:5b:a2:b4:c8:27:89:
         f8:ca:03:7a:ef:57:70:7e:13:2f:c4:df:69:b3:f7:de:b8:89:
         8e:0c:ae:63:41:48:9e:2c:3d:94:dd:30:95:de:87:ef:9c:16:
         ee:c3:80:6c:5f:b1:50:79:28:4d:f0:f9:dd:85:eb:61:e9:5e:
         da:77:22:c7:99:97:5a:19:d0:c6:92:37:eb:c0:ef:a0:bf:37:
         8d:fb:b7:20:ff:36:14:4c:5b:5a:34:35:fa:e6:30:e8:7e:d9:
         26:f7:18:c7:f7:d9:30:52:6f:d0:64:69:00:b5:d4:95:4c:e1:
         8d:79:9f:1b:37:b3:cd:0e:25:6b:28:a4:d5:82:e3:df:92:ad:
         ab:67:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 05:52:16 2024 by rpki-client on console-fra.rpki-client.org