Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/323830303a3662303a3a2f33322d3332203d3e2036333036.roa
File:                     323830303a3662303a3a2f33322d3332203d3e2036333036.roa (raw, json)
Hash identifier:          QY3hA6d4Smsq+y1uuCYCf+146XxLVa9+JVdZ82si/Wk=
Subject key identifier:   0D:26:AF:7F:7B:BC:70:BF:31:BE:C4:02:00:49:B9:AD:F8:1D:4C:92
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       46918ABDAE6A47CB7EAB87BB90B1DC068265BE6E
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/323830303a3662303a3a2f33322d3332203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:55 +0000
ROA not before:           Tue 05 Mar 2024 17:36:55 +0000
ROA not after:            Tue 04 Mar 2025 17:41:55 +0000
asID:                     6306
IP address blocks:        2800:6b0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:91:8a:bd:ae:6a:47:cb:7e:ab:87:bb:90:b1:dc:06:82:65:be:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:55 2024 GMT
            Not After : Mar  4 17:41:55 2025 GMT
        Subject: CN=0D26AF7F7BBC70BF31BEC4020049B9ADF81D4C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:d0:6b:a5:21:ef:24:46:58:12:9b:2f:0c:
                    41:d3:79:7f:58:e7:02:d7:e9:11:cd:f7:84:95:69:
                    80:58:c9:33:7f:0f:28:2f:c1:79:e9:48:6f:70:37:
                    e4:81:9d:1b:f3:d2:4e:61:62:5b:00:dd:43:79:59:
                    e0:49:ec:f5:36:d7:c5:3f:3f:e6:71:21:e3:10:52:
                    1f:12:14:6e:89:26:c2:dd:0f:be:6a:9a:16:0a:b3:
                    7d:eb:b4:97:c3:f6:9b:36:22:90:e9:b9:62:53:80:
                    df:5f:97:15:9c:26:c8:14:09:1b:d6:04:e9:04:7b:
                    1b:6b:52:37:c3:bf:ae:ad:b2:15:cd:15:f2:a6:85:
                    17:9d:92:28:7f:73:c1:c1:da:d8:ef:66:8e:77:6f:
                    18:a5:f1:b6:a5:3f:22:74:03:32:1d:26:e2:82:0b:
                    43:52:9d:71:6c:51:b3:89:63:4d:24:58:42:2b:1d:
                    30:1e:d0:07:34:e8:53:5b:43:8d:30:8b:52:48:52:
                    57:2f:68:97:c1:0a:02:cb:76:84:6d:0c:34:d7:b4:
                    10:0f:57:fc:c5:17:98:ad:74:b2:35:94:87:9d:9d:
                    9e:b7:38:52:be:4f:49:35:cb:43:09:05:6d:39:95:
                    b1:16:3e:82:81:7c:e9:70:df:59:d7:75:57:8b:8e:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:26:AF:7F:7B:BC:70:BF:31:BE:C4:02:00:49:B9:AD:F8:1D:4C:92
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/323830303a3662303a3a2f33322d3332203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:f5:29:69:d1:34:0c:5e:cf:7a:36:2d:41:82:0c:85:60:f0:
         27:4a:bd:14:c6:c5:a8:9d:6b:5f:e4:a5:0b:ea:b0:03:10:0e:
         68:75:03:b6:8d:06:b5:e9:b4:eb:24:ca:bd:84:0c:77:8f:00:
         ab:6d:79:e6:f3:8e:93:dc:6a:47:70:ff:f0:33:8f:62:a7:82:
         0d:ec:68:4b:bc:ba:85:a2:1f:58:f5:89:db:d8:9e:66:c8:fc:
         4b:53:fb:e5:6a:ea:0e:7d:13:c3:91:21:20:21:44:b9:96:c0:
         00:23:fe:1d:03:2d:7a:15:9b:6c:57:63:c6:10:5f:5b:67:42:
         9b:7e:0d:be:68:06:5b:22:75:43:92:54:c4:f3:f3:d8:9c:c2:
         95:46:77:d0:8f:b4:43:f7:c3:ce:a9:f1:05:a8:fe:e8:50:e9:
         dd:ac:4b:26:3c:a4:89:07:fb:d5:21:6e:e9:e2:bd:b6:a4:31:
         67:ae:d5:1e:02:28:ba:f9:1f:f6:20:a0:99:2d:21:b8:de:47:
         8b:e2:a5:ab:7c:36:89:b8:13:ac:59:88:e2:5f:ef:8a:91:7d:
         60:90:31:f9:dd:fb:a6:bf:db:dd:30:ea:82:57:d7:38:68:38:
         1c:79:8c:20:3b:8d:8c:e8:67:3c:a4:0c:c8:94:c5:09:f2:b3:
         7d:e6:b9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:46 2024 by rpki-client on console-fra.rpki-client.org