Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a373030303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a373030303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          a6bWbdwK+rqJxiwdbofoFZ98xQD5clMRwpzYTv1OaTs=
Subject key identifier:   2C:48:10:39:F0:AC:91:49:FD:40:FF:B2:18:FF:76:5D:9E:63:A0:DD
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       27F04023D7176B1DB9CEBE7D629F2197ED2C7192
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a373030303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 29 Apr 2024 17:30:00 +0000
ROA not before:           Mon 29 Apr 2024 17:25:00 +0000
ROA not after:            Mon 28 Apr 2025 17:30:00 +0000
asID:                     270165
IP address blocks:        2806:3eb:7000::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f0:40:23:d7:17:6b:1d:b9:ce:be:7d:62:9f:21:97:ed:2c:71:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Apr 29 17:25:00 2024 GMT
            Not After : Apr 28 17:30:00 2025 GMT
        Subject: CN=2C481039F0AC9149FD40FFB218FF765D9E63A0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:bc:b1:3e:75:e6:5f:5c:42:91:d0:a8:53:
                    a3:a5:cf:80:68:25:39:00:f1:80:24:a8:a1:e2:54:
                    b7:95:31:5b:66:6e:8b:7c:a8:7b:81:d6:28:ed:17:
                    24:ef:98:42:2a:f5:23:76:ac:66:17:b0:ac:2e:12:
                    69:d3:f9:82:ab:5e:a3:a5:6a:30:a4:1b:b9:37:97:
                    59:fc:1a:0d:93:16:4f:ed:cf:e2:0b:1a:67:0c:97:
                    2a:f7:37:62:30:c4:08:f3:62:db:4d:0d:42:8d:4a:
                    6b:9c:95:c1:f8:b6:13:c9:93:c7:7a:08:d1:c5:7f:
                    19:19:cd:e7:45:44:77:bf:66:17:31:32:88:a6:08:
                    e4:33:63:df:c7:fa:10:59:a8:6e:50:0b:1f:39:6a:
                    1e:58:db:1d:99:5d:be:8e:ef:ba:36:5b:c0:a0:eb:
                    fd:ba:e3:20:b5:74:34:c8:e9:71:e1:81:c7:42:6d:
                    c8:8d:2b:63:b3:18:7c:d9:05:f0:16:b3:e4:b8:92:
                    be:58:0e:58:d1:2d:e0:51:42:35:55:57:1d:04:67:
                    fc:5c:ea:08:7c:68:3f:36:6b:4e:97:01:8e:61:77:
                    b2:39:28:5e:ab:c3:ba:10:14:2a:14:29:65:2e:6a:
                    08:27:b3:17:e2:d8:d2:d2:0a:49:b8:50:35:fb:b3:
                    97:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:48:10:39:F0:AC:91:49:FD:40:FF:B2:18:FF:76:5D:9E:63:A0:DD
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a373030303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:7000::/39

    Signature Algorithm: sha256WithRSAEncryption
         aa:67:e9:cf:09:42:db:e8:f5:d1:0d:8f:e0:81:39:76:c8:e5:
         9a:61:52:52:f2:10:c1:43:c0:04:60:b9:31:f3:44:55:40:ed:
         da:8b:14:ce:69:26:06:91:0c:e5:cc:a8:7a:96:cc:19:7e:78:
         9b:b9:cd:11:80:30:d6:88:57:b8:6d:e1:6a:8c:69:80:86:36:
         ea:f0:1b:3d:27:d8:9e:15:fa:13:a5:0d:c4:61:90:7d:01:84:
         d9:01:61:8d:e0:ae:90:63:cf:1d:5e:0a:2a:53:6b:30:13:b6:
         59:1a:11:93:ab:fc:8d:c9:56:fe:de:dd:b6:c8:54:58:4d:cb:
         53:03:78:e4:8a:a8:ab:10:cf:ec:e1:3f:44:a7:c7:c5:66:29:
         7d:5b:e5:59:9b:20:b8:f1:e1:06:49:35:b1:fa:63:bc:b8:28:
         1a:10:6a:e5:46:eb:01:47:b9:88:f7:e9:d7:d6:a5:58:5d:a9:
         9e:d5:38:d4:dd:4a:91:36:c0:2a:55:48:f9:75:39:cb:4a:cb:
         f5:2b:73:26:d9:6a:7b:49:35:cb:af:ba:54:22:18:df:fd:27:
         60:5c:94:5a:c7:29:bc:39:86:86:0c:17:82:1e:1d:02:f4:6d:
         d1:d3:35:00:fb:b5:3f:56:9a:9d:6e:05:b4:5d:ba:5e:6a:f2:
         d6:f7:02:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org