Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          vJyIwNYj2oRr5CbvCvfGx5G4XbRw+Bek58eStXN8LfY=
Subject key identifier:   BB:67:9D:D3:47:4C:F4:63:0F:52:77:CF:D5:97:F1:48:D3:52:C5:41
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       173E6125D6AA17D729A079348465775F3ADD6E6C
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 29 Apr 2024 17:30:01 +0000
ROA not before:           Mon 29 Apr 2024 17:25:01 +0000
ROA not after:            Mon 28 Apr 2025 17:30:01 +0000
asID:                     270165
IP address blocks:        2806:3eb:200::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3e:61:25:d6:aa:17:d7:29:a0:79:34:84:65:77:5f:3a:dd:6e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Apr 29 17:25:01 2024 GMT
            Not After : Apr 28 17:30:01 2025 GMT
        Subject: CN=BB679DD3474CF4630F5277CFD597F148D352C541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:01:c1:9c:0c:fd:08:ba:a3:6a:78:60:7a:
                    ef:73:4f:c5:d0:ba:8d:80:8f:a6:22:20:17:a1:48:
                    96:c3:79:05:89:16:57:6b:49:de:57:37:da:28:d0:
                    b4:26:79:15:f4:15:b4:fa:9d:d4:7e:36:d5:ec:8f:
                    59:ef:68:fc:03:84:7a:40:e0:e7:42:5d:ee:30:f5:
                    e2:7d:26:75:2d:f4:a4:0b:a8:ae:46:7b:40:ed:8b:
                    fe:6b:f5:4a:7e:00:ca:5f:02:65:bd:3e:42:ed:eb:
                    3a:e3:27:38:ba:44:8b:62:54:c6:ce:c9:7f:27:82:
                    c1:6d:33:e5:22:cc:71:63:6f:11:f3:a9:89:84:08:
                    2b:92:7a:04:66:9f:59:3f:3d:ec:41:54:fb:b7:e7:
                    f9:50:e8:fa:99:dc:8a:12:47:e4:d4:0e:c3:5c:cc:
                    f1:46:0f:77:12:a9:61:ce:f0:ff:da:48:84:50:ff:
                    d6:66:bc:08:85:a3:a9:e1:75:71:24:31:2c:4d:62:
                    2a:df:fd:a7:18:b4:39:d7:8d:50:5b:77:fa:47:f3:
                    cc:35:94:fd:7c:e7:ab:5e:7f:9a:87:a7:77:9a:44:
                    a6:0a:45:82:d6:3f:18:64:0f:e3:6c:4b:59:74:6d:
                    be:88:35:bf:7e:13:db:31:61:8b:3f:0b:0f:06:82:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:9D:D3:47:4C:F4:63:0F:52:77:CF:D5:97:F1:48:D3:52:C5:41
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         a1:b7:dd:01:ff:98:92:b8:3c:81:98:de:86:b8:78:7d:13:17:
         04:8f:b5:5c:fd:3b:b9:16:15:79:b7:4e:46:8e:7d:83:28:91:
         94:e2:b4:e2:a7:01:a0:48:1d:f5:a3:63:14:a0:4f:34:9e:e2:
         5e:52:a1:5f:b9:f9:a5:b7:e8:cb:f8:35:fb:ad:a3:da:0c:21:
         8b:a3:e6:b7:cf:03:68:00:2d:79:28:d7:88:07:7f:d6:b0:22:
         82:ca:ef:32:c1:f1:7a:26:47:69:02:cd:90:89:67:1c:82:15:
         17:b4:58:3e:0a:49:d2:6f:23:94:42:4f:3e:de:87:af:7a:a1:
         0a:41:af:a3:d4:5f:7d:7f:91:76:e2:e9:2a:29:ac:8f:4c:7f:
         53:26:7f:0a:b5:5e:ae:a5:82:88:5c:81:a9:1a:e4:ff:29:3a:
         41:7d:86:2a:c7:70:38:6a:96:e6:20:fc:b9:cb:3a:a3:1b:6b:
         89:6d:d2:8c:4f:6a:cc:bd:f5:73:c5:49:19:eb:4b:1a:ad:52:
         97:cf:b4:22:0b:5a:ca:db:f8:52:32:5d:56:f6:74:5d:14:83:
         e9:1c:fd:af:b5:fd:c4:4d:28:80:63:c9:d9:cf:c6:a1:e9:0e:
         9e:20:33:05:a1:63:99:4d:f2:cf:3b:cc:32:68:2b:9c:0b:72:
         6f:aa:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org