Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/323830363a3331613a3a2f33322d3438203d3e203238333934.roa
File:                     323830363a3331613a3a2f33322d3438203d3e203238333934.roa (raw, json)
Hash identifier:          cSBydqmSZF/LuT8/mFSQWZ/I42WjbsTLOM831SvxcM4=
Subject key identifier:   CC:25:36:20:8C:A2:76:67:FE:5F:E3:A7:28:5A:B6:B1:57:24:B8:0B
Certificate issuer:       /CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720
Certificate serial:       512513BABE3E07B10397C356C82B7DCCCB32C737
Authority key identifier: 4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/323830363a3331613a3a2f33322d3438203d3e203238333934.roa
Signing time:             Tue 20 Aug 2024 01:00:00 +0000
ROA not before:           Tue 20 Aug 2024 00:55:00 +0000
ROA not after:            Tue 19 Aug 2025 01:00:00 +0000
asID:                     28394
IP address blocks:        2806:31a::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:25:13:ba:be:3e:07:b1:03:97:c3:56:c8:2b:7d:cc:cb:32:c7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720
        Validity
            Not Before: Aug 20 00:55:00 2024 GMT
            Not After : Aug 19 01:00:00 2025 GMT
        Subject: CN=CC2536208CA27667FE5FE3A7285AB6B15724B80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:09:3f:2a:d6:5e:6a:43:14:c9:52:06:c6:
                    d9:76:07:d3:42:c4:4e:e5:db:df:c0:a2:34:7d:cd:
                    62:40:a1:46:8a:55:b7:aa:06:8f:fd:ba:76:8e:d5:
                    7e:2a:24:13:17:0f:28:6b:06:36:c3:25:f5:3d:cd:
                    b7:66:6c:4f:64:b8:2d:c0:de:ba:f3:97:bf:3a:8f:
                    4e:4f:42:12:19:42:bc:14:53:fb:89:98:d4:5b:ca:
                    cb:39:fe:ae:8d:4a:fe:52:73:80:ff:4e:e3:d6:cc:
                    b0:9e:c0:b4:3d:60:7a:6f:51:82:e6:0a:02:d7:48:
                    23:a3:67:b3:d1:22:fe:41:54:21:5a:24:a8:03:4a:
                    cf:ea:8d:a1:7a:3a:97:6c:e9:bc:15:e6:8e:c3:a1:
                    69:df:3d:a9:c5:2f:83:12:ab:09:e4:2f:f8:9c:81:
                    71:8b:2d:ff:2f:fd:b4:f9:8b:a3:f4:6c:44:20:2b:
                    ed:51:d7:e3:d8:ed:38:75:ec:92:e0:92:2e:b4:0b:
                    de:a7:a5:ba:ea:e1:d1:c9:cc:64:59:30:23:bd:31:
                    74:13:f3:9d:b3:b6:26:29:04:83:dd:b8:2d:82:03:
                    d9:0d:41:f5:17:17:b4:92:e8:85:0f:66:6c:b4:a7:
                    66:87:81:e9:5d:4f:1f:f2:55:70:06:4b:e5:57:e6:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:25:36:20:8C:A2:76:67:FE:5F:E3:A7:28:5A:B6:B1:57:24:B8:0B
            X509v3 Authority Key Identifier:
                keyid:4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/323830363a3331613a3a2f33322d3438203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:31a::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:01:c5:b1:8e:86:49:3c:78:3f:89:09:b4:a8:f6:94:d6:8d:
         bb:82:b7:40:b8:5d:b4:d4:91:56:29:b7:76:12:72:0d:f5:a9:
         35:86:df:a0:8b:74:2e:87:fd:af:03:13:3a:3d:ab:34:88:24:
         43:70:6e:02:28:89:0d:45:cf:3b:0a:d4:81:5d:e8:54:37:aa:
         d1:d2:71:fb:2f:9c:b3:4a:ae:09:a0:96:72:28:a5:f0:7e:d6:
         39:b7:96:bb:11:41:0c:54:17:a5:ad:b6:a4:a1:13:fd:84:e2:
         ed:96:86:48:1c:ae:73:2d:ed:e3:4b:ea:a7:4d:36:cd:25:56:
         e7:ec:fb:9d:1c:9f:b5:bf:06:3d:15:d6:ff:ad:3e:f0:26:f8:
         c6:b1:1e:e7:32:17:d7:a0:94:3f:fe:ba:58:a4:7c:d5:1f:55:
         32:93:e7:b5:5e:96:b6:95:7c:65:fe:cf:95:4e:65:d5:fa:82:
         a3:32:36:8d:49:d8:4b:ae:e2:a8:b3:d7:f9:58:7d:d0:70:5d:
         8b:c7:80:02:27:91:9a:44:03:67:9f:1c:38:b9:ee:b6:a1:66:
         bd:82:2a:2f:56:5a:3d:88:bd:fd:52:cb:7c:ea:48:7d:17:96:
         4b:dd:9a:e2:f3:f1:10:47:54:8b:06:99:86:b8:ed:24:f2:c1:
         dd:18:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:17 2024 by rpki-client on console-ams.rpki-client.org