Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/323830363a3366323a3a2f33322d3438203d3e20323730313830.roa
File:                     323830363a3366323a3a2f33322d3438203d3e20323730313830.roa (raw, json)
Hash identifier:          yVncngiJbKextR9Snj82jdZj2nU8iYM5CGqgYJ+F7V0=
Subject key identifier:   3D:92:BD:CD:79:87:8C:3A:61:5F:94:51:DD:21:9B:7B:FE:9C:AD:A9
Certificate issuer:       /CN=4259D489623ADF982BA06D3BB26A0E0366F952E1
Certificate serial:       2CFA3FDC0D36C55FDBCD4C256F6093BA748EE3E9
Authority key identifier: 42:59:D4:89:62:3A:DF:98:2B:A0:6D:3B:B2:6A:0E:03:66:F9:52:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/323830363a3366323a3a2f33322d3438203d3e20323730313830.roa
Signing time:             Tue 05 Mar 2024 17:46:40 +0000
ROA not before:           Tue 05 Mar 2024 17:41:40 +0000
ROA not after:            Tue 04 Mar 2025 17:46:40 +0000
asID:                     270180
IP address blocks:        2806:3f2::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fa:3f:dc:0d:36:c5:5f:db:cd:4c:25:6f:60:93:ba:74:8e:e3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4259D489623ADF982BA06D3BB26A0E0366F952E1
        Validity
            Not Before: Mar  5 17:41:40 2024 GMT
            Not After : Mar  4 17:46:40 2025 GMT
        Subject: CN=3D92BDCD79878C3A615F9451DD219B7BFE9CADA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:9f:f3:7d:85:45:f0:47:ab:e0:87:0d:a8:
                    9c:5a:5f:55:33:bf:2f:ba:30:a8:51:2d:de:e6:70:
                    f0:09:7c:20:60:3b:8e:7d:89:3a:97:3a:30:b8:58:
                    55:7b:9c:dd:a4:fa:26:6f:4e:89:2e:2d:5d:a5:65:
                    fb:26:9e:a6:34:81:39:38:00:a7:56:b8:74:1d:66:
                    0a:15:51:3e:70:ce:3a:5c:6c:ea:2d:d3:42:f2:f6:
                    fc:0c:76:e4:68:81:f9:db:0b:ae:7c:42:80:2a:b6:
                    ee:dd:22:35:61:f5:b9:40:dc:d0:11:46:a8:61:84:
                    f3:2b:92:35:6b:53:a7:c2:38:87:dc:cc:d2:ea:d8:
                    e8:2d:6a:96:a0:93:b7:f3:31:70:80:1f:0b:79:51:
                    86:e7:86:5c:95:42:f8:e0:07:11:bf:33:80:e6:93:
                    65:9f:f9:37:e6:01:fa:d9:d2:fd:87:9a:d9:89:e2:
                    71:ee:18:19:03:62:61:32:42:08:27:ed:29:8d:0b:
                    c5:d6:c8:7d:a2:32:32:50:ce:2d:fd:c6:0e:9e:50:
                    12:c0:39:73:80:3d:ec:f5:53:a4:71:b2:67:3a:35:
                    23:8e:1c:c2:1c:e7:53:37:b5:fc:7f:ca:a7:93:70:
                    b6:bd:a1:3e:ed:05:69:bc:47:21:14:3c:ac:c0:70:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:92:BD:CD:79:87:8C:3A:61:5F:94:51:DD:21:9B:7B:FE:9C:AD:A9
            X509v3 Authority Key Identifier:
                keyid:42:59:D4:89:62:3A:DF:98:2B:A0:6D:3B:B2:6A:0E:03:66:F9:52:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/323830363a3366323a3a2f33322d3438203d3e20323730313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f2::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:05:7d:a6:f4:1c:a6:78:b2:92:cc:55:6e:52:62:09:7a:9d:
         ff:f6:fe:21:09:00:1b:bc:19:8f:3d:88:11:42:58:f5:c2:4c:
         91:ba:25:8e:89:fa:54:e6:13:00:60:03:ca:0e:4c:86:ff:be:
         c7:38:21:67:59:0c:46:ca:67:04:14:d6:7d:3b:5b:e5:97:36:
         99:14:db:85:5f:71:a3:c2:f8:b7:2e:cf:3b:42:43:c1:93:79:
         18:af:04:97:ae:00:26:fa:bd:65:46:27:55:34:80:9e:cd:9e:
         fd:62:ae:c7:d9:f8:3b:25:91:6d:36:13:7a:55:b2:d9:42:0e:
         04:59:d7:b7:59:86:02:a7:64:e4:30:99:92:0b:78:a8:9d:d8:
         0a:a8:91:fc:b2:d2:1f:a1:0a:2c:f9:f8:df:3c:74:81:bb:ea:
         41:be:d2:ff:ae:44:ac:ce:3b:70:ca:ce:7c:a3:e5:98:84:7d:
         40:19:b5:f1:04:35:6f:cf:f5:fc:d1:33:35:72:68:18:0f:bc:
         e5:8a:c1:d1:da:81:44:c3:88:83:6e:b2:57:70:a4:7f:bc:7e:
         78:e8:c9:00:c9:d8:b1:84:3a:44:81:32:d6:91:cc:28:07:ff:
         31:8e:18:a9:ac:43:79:b0:50:21:91:68:ad:02:6a:e7:64:b9:
         11:f0:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org