Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          GinSlhyV814hZwYQvpimEtp6zLjJSezM6nlyFsJvrHs=
Subject key identifier:   9B:CB:6A:55:9B:E4:FE:B7:3F:A3:EB:8D:1D:A4:43:0F:3C:52:DA:2D
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       0E4F65F27DBE1229A5C6AC7F2487AA1966DC70BD
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 29 Apr 2024 17:30:02 +0000
ROA not before:           Mon 29 Apr 2024 17:25:02 +0000
ROA not after:            Mon 28 Apr 2025 17:30:02 +0000
asID:                     270165
IP address blocks:        2806:3eb:9000::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4f:65:f2:7d:be:12:29:a5:c6:ac:7f:24:87:aa:19:66:dc:70:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Apr 29 17:25:02 2024 GMT
            Not After : Apr 28 17:30:02 2025 GMT
        Subject: CN=9BCB6A559BE4FEB73FA3EB8D1DA4430F3C52DA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:58:a1:f6:58:01:48:44:27:12:ad:12:84:
                    c8:48:52:98:77:36:cf:84:55:e3:85:33:b2:98:1e:
                    96:9a:35:7a:b7:32:c4:65:11:83:b9:2e:1a:5b:d8:
                    8d:a6:d9:b7:d0:20:71:c1:d5:cd:17:44:75:0b:fe:
                    1d:ed:ce:66:54:e6:09:8d:d4:8f:3f:f2:d9:e7:0d:
                    69:97:0e:30:64:af:a5:bf:4d:c3:84:97:f1:75:c1:
                    00:32:7a:91:bb:44:04:a3:c5:72:32:2c:cb:1a:e2:
                    a4:7d:e0:dc:ae:a8:36:48:a7:43:90:29:bf:5e:66:
                    30:28:fd:01:ae:35:d3:63:88:bb:d2:24:19:d1:28:
                    ba:d1:ac:ea:6f:a0:d6:37:ae:b8:b9:4c:a9:92:72:
                    be:aa:46:a0:a2:e5:0c:01:79:7f:b6:69:46:a2:62:
                    0f:c2:75:6d:a5:1d:ed:78:08:93:8c:e5:aa:e7:5b:
                    76:a4:da:82:bb:57:89:ff:f2:da:02:26:3f:b9:d5:
                    af:3e:1c:ad:ca:26:bd:8c:03:81:de:e8:dc:9c:56:
                    f5:1a:f2:7c:88:38:18:36:f1:d1:ff:8d:f2:54:9d:
                    42:47:06:7f:71:34:1e:7d:9b:af:14:25:e3:de:91:
                    d5:8b:d3:51:ba:5a:f6:bf:d9:35:a9:5c:f3:6c:c5:
                    aa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CB:6A:55:9B:E4:FE:B7:3F:A3:EB:8D:1D:A4:43:0F:3C:52:DA:2D
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:9000::/39

    Signature Algorithm: sha256WithRSAEncryption
         91:89:e0:fc:e3:b1:1c:27:ee:37:ed:47:d7:d1:19:cb:72:f2:
         b0:c2:17:8a:83:47:48:61:6b:21:8c:d7:c1:f0:d9:e2:b9:f2:
         de:83:30:65:b2:df:6b:7b:c4:ac:3c:22:b4:6e:fd:d7:76:f5:
         5e:54:a6:cd:ec:ef:d7:cd:51:ad:e3:ab:d1:77:e8:15:7d:bc:
         85:90:bb:6f:c3:91:3e:8a:02:d8:9b:58:86:db:be:1f:38:56:
         33:eb:6d:bd:54:bd:59:09:a9:c1:93:d0:9b:b0:83:ae:40:5d:
         cb:d4:a4:a2:a6:a8:96:5d:6d:7e:ff:dd:2c:93:71:9d:54:25:
         e8:d8:ea:93:16:ad:a2:8d:1e:06:4f:2e:bb:67:02:c9:e9:cc:
         3c:14:92:e5:91:45:9a:ac:9d:70:ae:f6:5f:37:2f:52:60:f6:
         55:66:7e:50:2d:c7:74:72:56:74:70:38:94:47:d4:04:c3:9b:
         df:fb:b9:c6:fc:cf:c7:b4:3c:79:d8:4b:04:5b:8e:3c:5a:cc:
         73:0a:47:c4:34:87:e4:df:cb:03:f3:6d:19:df:6d:65:80:d2:
         1e:55:33:60:d4:61:ad:3a:1c:c5:d7:f5:10:d8:5e:01:61:fa:
         46:89:e8:8a:db:34:25:fb:89:b5:67:a9:06:33:da:60:46:c7:
         91:1e:81:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org