Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/323830363a3332643a3a2f33322d3438203d3e203238343331.roa
File:                     323830363a3332643a3a2f33322d3438203d3e203238343331.roa (raw, json)
Hash identifier:          QBnZA6GAO6Jegl28B9uzUrESGv+wzoY4UT0ZGBQ6X2w=
Subject key identifier:   4B:4B:96:35:6D:D5:19:EA:62:AF:1E:4A:61:2F:D7:CD:F3:A0:98:21
Certificate issuer:       /CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
Certificate serial:       093B3EFDCC6C5B9C89DD6F32B482A29760B4FC74
Authority key identifier: EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/323830363a3332643a3a2f33322d3438203d3e203238343331.roa
Signing time:             Tue 05 Mar 2024 18:01:04 +0000
ROA not before:           Tue 05 Mar 2024 17:56:04 +0000
ROA not after:            Tue 04 Mar 2025 18:01:04 +0000
asID:                     28431
IP address blocks:        2806:32d::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3b:3e:fd:cc:6c:5b:9c:89:dd:6f:32:b4:82:a2:97:60:b4:fc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
        Validity
            Not Before: Mar  5 17:56:04 2024 GMT
            Not After : Mar  4 18:01:04 2025 GMT
        Subject: CN=4B4B96356DD519EA62AF1E4A612FD7CDF3A09821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:d5:64:4d:31:8c:90:11:bb:4e:e5:94:57:
                    b2:ad:9f:d6:a8:f8:47:f9:f9:6b:66:13:40:81:55:
                    61:b2:70:0a:92:eb:28:30:28:c3:0a:31:91:c9:64:
                    b0:62:78:88:e4:ee:d6:18:27:9d:c8:eb:b9:d7:78:
                    ac:cd:38:ff:77:6f:71:b1:d0:6f:0e:65:cb:cc:ff:
                    82:85:86:ca:f8:14:9c:50:ea:b0:00:a2:0c:da:d9:
                    a4:e2:69:f2:ca:db:e8:67:16:bf:fc:fa:22:9f:cf:
                    34:03:9a:e2:d3:03:d7:c0:fd:73:15:eb:7d:f0:c8:
                    13:74:61:cc:79:5b:15:3b:7d:0f:1a:28:75:e3:70:
                    46:5c:87:3f:b8:1a:a1:ca:07:f5:2a:d9:b7:3f:6a:
                    b1:c9:91:60:4a:ac:c2:d7:b5:96:f6:40:20:34:a8:
                    f2:ca:05:75:e3:c7:d6:85:9d:05:b9:bd:2b:bd:c0:
                    9a:ee:16:a0:a4:06:4f:bd:0c:62:36:f1:5d:d9:b8:
                    74:29:c6:ee:62:9d:77:d4:4e:6b:ac:76:91:f6:c0:
                    86:a6:0a:53:1f:d7:8f:1c:60:9d:c8:c0:bf:62:ef:
                    8d:c2:c3:9c:b1:21:1e:f7:e0:bf:76:d4:bb:01:e8:
                    4d:9e:a5:60:60:a7:1f:8d:7e:d7:94:07:47:e1:91:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4B:96:35:6D:D5:19:EA:62:AF:1E:4A:61:2F:D7:CD:F3:A0:98:21
            X509v3 Authority Key Identifier:
                keyid:EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/323830363a3332643a3a2f33322d3438203d3e203238343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32d::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:25:ae:6e:61:bb:2d:d2:a2:73:79:2c:2e:dc:c5:cc:73:cd:
         47:8e:55:2a:50:c7:74:4f:54:da:bb:d6:1c:c0:ff:f1:29:a6:
         3d:a4:60:71:b0:a6:06:57:a3:9f:0a:fe:5a:cf:a7:25:3a:f8:
         97:9b:7d:c2:31:fc:a8:50:94:0d:60:25:ab:81:28:6c:27:bd:
         cb:02:98:69:a9:15:d8:0e:cb:22:4c:a0:d3:b3:ab:f0:28:cf:
         f5:a2:f1:9e:14:df:5c:d4:61:5c:4c:48:32:92:2a:b4:6d:d3:
         cd:b0:fc:26:ce:af:66:3b:21:68:55:56:31:96:dd:05:10:2e:
         4c:d2:a2:4a:92:45:dd:71:c4:70:d9:bd:0b:da:85:6f:9c:56:
         5b:2a:23:e5:77:22:99:9f:f8:b6:3f:45:bd:a4:38:52:37:a9:
         27:49:b6:cf:92:5e:09:c2:3e:b0:70:1f:cf:b5:6d:c6:b0:95:
         33:25:3d:0d:19:48:5e:db:20:a8:8c:0c:78:da:51:50:ad:6a:
         77:ca:3b:ca:fb:cf:83:a5:5c:c4:ce:9b:c8:ec:7f:f0:1f:cf:
         23:2f:f4:fe:52:ce:9f:71:f5:58:bc:e5:f8:a0:3d:62:7e:03:
         f7:98:54:bb:50:c4:5c:4a:28:6e:7a:c8:ec:f0:52:d4:a0:29:
         de:83:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:08 2024 by rpki-client on console-fra.rpki-client.org