Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/323830363a3336333a3a2f33322d3438203d3e20323635363037.roa
File:                     323830363a3336333a3a2f33322d3438203d3e20323635363037.roa (raw, json)
Hash identifier:          otDSpolSp9cRu/hp7Sr0vVycAh/ywB4Ongx4UsuTRl4=
Subject key identifier:   2A:B4:85:33:1A:CC:46:16:17:3D:AA:78:96:BD:A6:84:5D:28:7E:FB
Certificate issuer:       /CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
Certificate serial:       3F155931520BEBA225A0AA73BE8BF44C55A0D6BF
Authority key identifier: C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/323830363a3336333a3a2f33322d3438203d3e20323635363037.roa
Signing time:             Tue 05 Mar 2024 17:43:21 +0000
ROA not before:           Tue 05 Mar 2024 17:38:21 +0000
ROA not after:            Tue 04 Mar 2025 17:43:21 +0000
asID:                     265607
IP address blocks:        2806:363::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:59:31:52:0b:eb:a2:25:a0:aa:73:be:8b:f4:4c:55:a0:d6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
        Validity
            Not Before: Mar  5 17:38:21 2024 GMT
            Not After : Mar  4 17:43:21 2025 GMT
        Subject: CN=2AB485331ACC4616173DAA7896BDA6845D287EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:f3:fc:fc:61:f7:02:20:06:51:55:e6:99:
                    0c:aa:a1:b0:04:60:b0:f5:05:c2:96:0a:b2:f8:77:
                    9f:f4:a3:45:d6:2b:0a:01:3b:d0:6f:4e:00:77:55:
                    6d:12:b2:57:43:72:e1:f1:de:37:c8:74:22:e3:89:
                    b3:bb:34:bc:f1:b8:69:a1:1e:63:16:dd:2c:88:7f:
                    ee:3d:a1:d0:99:4d:f1:30:c0:98:6c:12:dd:d7:96:
                    2d:97:94:09:ea:9f:92:8a:d6:6d:71:45:25:bb:86:
                    81:85:ae:25:57:48:6a:51:7d:f8:f2:77:2c:ac:d4:
                    7a:5c:f5:ec:40:10:cb:e5:45:ca:22:b2:93:94:03:
                    c9:a1:b4:87:90:73:ed:7b:ff:6f:4a:bb:65:47:76:
                    3f:fb:f4:bc:b8:b9:45:78:1f:7e:85:36:ed:86:09:
                    f4:16:75:71:15:85:95:ac:38:b7:87:ee:c8:5b:b6:
                    ba:b4:2f:e3:20:f8:f6:7d:75:ea:12:df:e0:45:da:
                    0f:86:9b:7e:3d:ef:5d:c2:93:e5:72:71:d0:bc:ac:
                    f1:35:5d:af:df:2d:11:ba:21:8d:d1:f4:95:83:dd:
                    f9:e5:e4:af:af:c1:42:a1:43:ac:05:17:a3:e8:37:
                    e7:ee:ac:14:4e:44:68:b6:66:33:44:16:9c:94:85:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B4:85:33:1A:CC:46:16:17:3D:AA:78:96:BD:A6:84:5D:28:7E:FB
            X509v3 Authority Key Identifier:
                keyid:C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/323830363a3336333a3a2f33322d3438203d3e20323635363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:363::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:66:ac:9d:7a:59:48:ff:62:57:4c:98:7b:43:f2:75:fd:
         1e:97:36:5f:58:86:65:14:6c:d6:10:e0:86:6e:97:ca:72:6d:
         d1:6c:04:1d:0d:92:ab:03:fa:e2:88:30:7e:9e:bc:7d:e9:9e:
         4a:a8:b5:59:0a:c5:40:13:a5:ab:08:53:5d:fd:66:5b:7e:66:
         10:00:90:94:87:75:1d:c6:76:2b:ee:77:ba:4a:d7:5e:b4:33:
         89:4e:a2:3f:e7:f6:e7:10:84:80:06:33:5a:d9:71:98:56:50:
         2d:07:41:db:66:e8:6f:60:8e:29:49:36:7a:7d:35:07:50:ff:
         28:cc:07:73:62:3d:47:7d:56:5f:90:c9:4a:72:dd:45:de:8f:
         ea:82:3b:15:31:03:66:d9:43:05:61:88:b9:f8:15:ab:a8:3d:
         31:d4:01:ac:3d:0c:14:48:06:34:e2:31:ed:2c:3b:9a:09:43:
         91:b1:92:8d:cd:62:12:2b:ec:8d:2a:7e:c0:1d:ff:7c:90:ae:
         f8:7c:bb:bb:41:97:8c:24:a9:1c:9f:0a:89:ea:af:6b:7b:7b:
         8a:bc:22:92:24:ab:53:88:d3:df:85:fc:81:64:26:4b:62:a4:
         54:9b:6a:a1:de:7f:03:ad:34:2b:2a:d6:5b:a6:90:a0:1c:56:
         fe:8c:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org