Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e20323732333636.roa
File:                     323830363a3431353a3a2f33352d3335203d3e20323732333636.roa (raw, json)
Hash identifier:          C0DYPvecjnZz8XtSGQ8lQUkkqDaJs043y2uZ9x5KbFk=
Subject key identifier:   82:49:93:D0:07:C6:59:29:78:52:28:5A:DC:43:39:AC:E3:47:D6:22
Certificate issuer:       /CN=7A215884842505326184A6087277EE5E2FA4B91F
Certificate serial:       38F18AD307E1410AC139E2D5E9D75DEBC2BFA8A8
Authority key identifier: 7A:21:58:84:84:25:05:32:61:84:A6:08:72:77:EE:5E:2F:A4:B9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A215884842505326184A6087277EE5E2FA4B91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e20323732333636.roa
Signing time:             Sat 20 Jul 2024 00:25:00 +0000
ROA not before:           Sat 20 Jul 2024 00:20:00 +0000
ROA not after:            Sat 19 Jul 2025 00:25:00 +0000
asID:                     272366
IP address blocks:        2806:415::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/7A215884842505326184A6087277EE5E2FA4B91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/7A215884842505326184A6087277EE5E2FA4B91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A215884842505326184A6087277EE5E2FA4B91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f1:8a:d3:07:e1:41:0a:c1:39:e2:d5:e9:d7:5d:eb:c2:bf:a8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A215884842505326184A6087277EE5E2FA4B91F
        Validity
            Not Before: Jul 20 00:20:00 2024 GMT
            Not After : Jul 19 00:25:00 2025 GMT
        Subject: CN=824993D007C659297852285ADC4339ACE347D622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:d2:98:bb:28:63:e5:c5:65:42:8c:05:2d:
                    62:49:95:65:00:dc:e7:73:78:f8:d3:bd:f1:de:52:
                    7f:c0:0d:ac:c0:a0:c3:cf:56:50:52:3e:7c:9e:ee:
                    9c:53:5a:20:0f:39:39:16:d2:f4:4d:91:c7:76:1c:
                    90:b0:d7:ca:db:4d:6e:8a:9f:ce:0c:ff:45:63:10:
                    ff:a5:ef:a7:ec:5c:4c:23:06:bf:18:0a:f7:1b:b3:
                    a2:b0:df:af:39:cb:10:84:3b:b8:00:65:02:9d:d2:
                    9d:90:98:b0:a7:f4:35:d5:05:b8:ee:bc:ce:76:80:
                    9b:d6:93:84:53:f4:a9:49:86:37:1d:61:ee:05:b7:
                    8a:17:55:6e:fe:b6:16:82:7c:70:7f:60:bc:ad:ff:
                    75:35:91:be:2c:ce:42:fb:69:d4:4a:01:ed:b2:28:
                    96:f5:d2:ed:93:fb:2c:49:fb:d2:a9:44:1b:99:1d:
                    94:ef:ee:68:8c:63:0c:db:6d:45:7d:08:e4:bf:ca:
                    05:54:c7:4e:c4:ed:34:5b:de:c8:ea:09:1f:76:90:
                    65:f7:2b:d0:8f:95:57:fd:48:89:4e:11:e7:41:68:
                    0f:de:26:36:ee:52:e4:18:07:17:71:47:32:48:68:
                    90:67:7b:67:36:0f:f8:7b:63:1b:2f:1b:ec:0c:e0:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:49:93:D0:07:C6:59:29:78:52:28:5A:DC:43:39:AC:E3:47:D6:22
            X509v3 Authority Key Identifier:
                keyid:7A:21:58:84:84:25:05:32:61:84:A6:08:72:77:EE:5E:2F:A4:B9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/7A215884842505326184A6087277EE5E2FA4B91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A215884842505326184A6087277EE5E2FA4B91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e20323732333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:415::/35

    Signature Algorithm: sha256WithRSAEncryption
         08:36:fb:e2:64:b8:24:a8:36:b8:e0:5f:46:a4:8c:ab:9b:2c:
         83:f3:70:bd:67:c4:54:80:e9:1a:ae:02:ac:58:b3:70:fa:2b:
         05:fd:b6:f8:ed:bd:18:5c:95:d9:80:e1:52:36:ae:34:a9:4f:
         d1:35:b5:95:b6:31:f2:f0:76:3a:0e:59:78:9f:9d:a2:10:a8:
         b5:dc:e7:c9:17:07:e1:76:e4:56:5a:51:2a:b2:5e:f6:6d:43:
         86:1c:7c:ae:dd:6e:46:ef:4f:90:63:3e:11:da:be:55:a7:4b:
         1f:fc:b4:a8:ca:59:cb:d6:0a:c6:c0:fc:47:32:df:23:34:d0:
         52:d4:3d:b2:e9:61:92:f8:4c:26:c3:f0:81:d4:25:cc:b5:e7:
         ab:c7:fa:91:f9:26:7b:63:63:16:56:da:5e:a4:0e:80:ec:7a:
         f5:b8:58:1e:28:c0:51:ba:8e:76:76:59:b1:a2:fd:ce:b5:ea:
         70:a3:81:26:5f:f8:ee:03:5a:af:9c:e2:39:ff:8e:27:d1:87:
         da:7e:b0:a7:71:f9:7d:3f:dc:13:5d:35:24:0f:b7:68:7d:1b:
         85:e4:e7:c3:3e:7d:3d:e9:ce:84:85:c6:e0:20:6a:30:42:a6:
         15:d1:6a:b8:ce:62:92:ec:f1:29:52:d3:cc:4c:15:89:65:0f:
         10:0e:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 16:58:58 2024 by rpki-client on console-fra.rpki-client.org