Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa
File:                     323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa (raw, json)
Hash identifier:          kEc0GIzevaXGRpXuGbO6BYwihcpFI6zrjIQ1nEWc+h4=
Subject key identifier:   5C:0E:39:DE:4C:E3:23:B6:B3:CC:DA:55:E4:EC:D3:B1:3A:6B:A1:A5
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       03052C8A090419D003EE0B9658CBA0678E11AD38
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa
Signing time:             Thu 11 Jul 2024 00:35:00 +0000
ROA not before:           Thu 11 Jul 2024 00:30:00 +0000
ROA not after:            Thu 10 Jul 2025 00:35:00 +0000
asID:                     270160
IP address blocks:        2806:3e7:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:05:2c:8a:09:04:19:d0:03:ee:0b:96:58:cb:a0:67:8e:11:ad:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Jul 11 00:30:00 2024 GMT
            Not After : Jul 10 00:35:00 2025 GMT
        Subject: CN=5C0E39DE4CE323B6B3CCDA55E4ECD3B13A6BA1A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:33:d2:5e:64:2b:08:6a:0c:68:c6:26:15:
                    42:7a:1f:f2:ef:5d:6c:3c:50:10:9d:d4:db:cf:8c:
                    21:9b:8d:c3:6f:b6:c3:f1:9d:db:d6:00:c1:fe:bd:
                    67:33:b1:16:24:8b:c7:30:fb:92:51:fa:14:95:0f:
                    6e:3b:90:7c:3b:19:aa:01:f9:e9:d6:48:07:c7:cb:
                    0f:16:f3:8e:22:a6:88:cd:74:bf:36:12:75:7a:4c:
                    16:2a:ce:d1:7b:d4:28:cd:69:bd:d4:f8:25:82:75:
                    1b:26:c4:5f:bf:6d:37:f4:12:70:a3:1f:8e:66:73:
                    6c:c1:aa:2c:f3:cd:83:d2:ab:c5:cd:29:ef:bf:a7:
                    01:63:9c:75:b9:8a:47:02:a1:fe:3b:12:0e:ed:08:
                    1b:93:a6:87:9f:29:c1:aa:84:ba:28:82:57:ca:63:
                    b4:3e:b6:ac:b1:6a:aa:ee:13:02:fd:ae:49:5d:38:
                    42:c2:d0:a5:71:6f:b8:f8:f9:17:46:eb:6e:f1:b9:
                    5a:f1:32:5c:7a:d9:4c:6b:54:3a:c9:48:0a:db:12:
                    9a:4a:55:a1:60:40:c3:e6:88:84:ee:7f:a7:72:16:
                    56:c4:a2:cb:d9:35:4c:dc:86:10:ac:6b:8f:9b:c1:
                    2c:9c:87:bc:f7:83:0a:b0:7b:54:d7:e4:16:a0:1a:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:39:DE:4C:E3:23:B6:B3:CC:DA:55:E4:EC:D3:B1:3A:6B:A1:A5
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d1:06:11:3d:98:42:1d:de:2a:9f:5a:1e:60:54:47:64:76:73:
         9b:5d:c5:e7:4c:8b:25:80:89:7b:c4:86:71:2c:34:d2:7a:c8:
         d0:8e:9c:53:4a:9f:3e:b7:76:74:e7:8e:5c:c6:c9:88:a8:34:
         47:28:cd:74:ac:e1:fb:f4:f6:9b:ef:04:7a:cf:9e:55:b9:1f:
         82:89:5a:1c:6e:0c:54:9c:03:23:b6:d0:5d:12:17:6a:0a:9c:
         03:f6:63:b6:7a:c8:80:a9:1f:0a:1b:79:a6:63:57:2b:73:d7:
         7c:6b:4b:40:b2:b5:e9:8f:f9:fa:fc:f3:f7:3b:9e:35:7e:0d:
         9c:c7:44:0f:ae:c4:df:44:01:f8:48:9e:fd:7f:72:bf:36:c8:
         38:7d:75:49:3f:da:df:bd:b6:2a:07:d4:2f:bf:8a:35:dc:c9:
         40:e0:c0:ce:4a:65:ed:fd:a8:26:e6:5e:be:be:59:23:9d:81:
         97:24:61:7c:b7:3c:52:a0:7e:9e:a1:b4:b3:7c:c7:2e:13:57:
         0e:bb:ba:a7:f1:cd:c0:a7:a8:9d:66:d9:0f:b0:16:1b:18:b7:
         22:d9:01:41:24:10:8f:28:f4:c7:f1:bf:a5:1b:4b:a4:44:d6:
         b9:43:21:cd:b0:3b:b0:28:75:b6:95:fd:2d:2d:e9:30:28:86:
         b3:6c:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org