Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBD013E29EDC5E8958926C4031F168E2EE88D3BC009AD6814F009CC18080C208/0/323830363a3366613a3a2f33322d3332203d3e20323730323039.roa
File:                     323830363a3366613a3a2f33322d3332203d3e20323730323039.roa (raw, json)
Hash identifier:          B+Inx9GJjouKL7KtDlXc3zM5kfvUcGslXTbXLrk1F8A=
Subject key identifier:   7F:20:E4:03:97:89:02:23:18:52:FA:24:6A:91:F8:1A:2C:7F:97:3F
Certificate issuer:       /CN=513D4ECF11A9C1BDDAB837CE9532F745871FBEAB
Certificate serial:       3D454B47152282EE9AF72949705C052A793D4887
Authority key identifier: 51:3D:4E:CF:11:A9:C1:BD:DA:B8:37:CE:95:32:F7:45:87:1F:BE:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/513D4ECF11A9C1BDDAB837CE9532F745871FBEAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBD013E29EDC5E8958926C4031F168E2EE88D3BC009AD6814F009CC18080C208/0/323830363a3366613a3a2f33322d3332203d3e20323730323039.roa
Signing time:             Mon 15 Jul 2024 21:15:00 +0000
ROA not before:           Mon 15 Jul 2024 21:10:00 +0000
ROA not after:            Mon 14 Jul 2025 21:15:00 +0000
asID:                     270209
IP address blocks:        2806:3fa::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EBD013E29EDC5E8958926C4031F168E2EE88D3BC009AD6814F009CC18080C208/0/513D4ECF11A9C1BDDAB837CE9532F745871FBEAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EBD013E29EDC5E8958926C4031F168E2EE88D3BC009AD6814F009CC18080C208/0/513D4ECF11A9C1BDDAB837CE9532F745871FBEAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/513D4ECF11A9C1BDDAB837CE9532F745871FBEAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:45:4b:47:15:22:82:ee:9a:f7:29:49:70:5c:05:2a:79:3d:48:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513D4ECF11A9C1BDDAB837CE9532F745871FBEAB
        Validity
            Not Before: Jul 15 21:10:00 2024 GMT
            Not After : Jul 14 21:15:00 2025 GMT
        Subject: CN=7F20E403978902231852FA246A91F81A2C7F973F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d8:1d:db:59:68:78:94:91:c4:af:42:38:b4:
                    1c:2c:63:25:fe:38:79:eb:da:1c:3a:59:d2:bd:a7:
                    18:2b:46:62:f7:8d:ff:90:fd:49:5f:4c:dd:a4:87:
                    8f:bd:8c:dd:b4:c3:f7:fe:26:f7:df:38:cd:30:db:
                    c9:e4:cc:0d:65:de:a8:0b:92:4e:8d:f4:ab:5e:d5:
                    96:38:f0:f7:c9:7f:84:3c:56:49:07:94:ad:fb:00:
                    98:12:25:46:e6:e5:14:29:a5:60:9c:bf:c0:ee:67:
                    1c:b6:92:cd:37:f2:d4:5a:2c:35:d2:62:d7:35:6d:
                    21:c3:24:7b:b6:62:09:77:a5:15:9a:80:e7:12:c5:
                    41:c8:eb:c6:04:d3:bd:0e:a4:a1:56:26:61:a8:f7:
                    cf:b2:ad:17:76:ca:21:ff:60:f4:f0:69:ec:a2:22:
                    f3:e3:ef:63:66:80:69:e5:79:ac:b0:58:9c:84:3d:
                    0c:da:f8:5d:7a:bc:d2:3c:00:76:81:0c:bc:a7:8f:
                    40:9f:5f:5a:f1:4a:f7:68:f5:c8:4b:8a:99:1d:45:
                    43:b1:34:33:74:77:10:13:e7:67:d1:6b:d6:21:d1:
                    86:44:37:42:5b:bb:e2:be:dd:e9:73:91:4d:7c:a7:
                    2e:cd:bb:46:78:91:37:55:eb:ca:c5:f2:27:55:2b:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:E4:03:97:89:02:23:18:52:FA:24:6A:91:F8:1A:2C:7F:97:3F
            X509v3 Authority Key Identifier:
                keyid:51:3D:4E:CF:11:A9:C1:BD:DA:B8:37:CE:95:32:F7:45:87:1F:BE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBD013E29EDC5E8958926C4031F168E2EE88D3BC009AD6814F009CC18080C208/0/513D4ECF11A9C1BDDAB837CE9532F745871FBEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/513D4ECF11A9C1BDDAB837CE9532F745871FBEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBD013E29EDC5E8958926C4031F168E2EE88D3BC009AD6814F009CC18080C208/0/323830363a3366613a3a2f33322d3332203d3e20323730323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3fa::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:44:53:ee:fa:26:e2:a6:99:03:47:bd:d7:ef:28:25:ae:c4:
         45:12:02:dc:51:f6:f2:c1:5e:6c:4c:fa:d0:50:e6:02:f6:a9:
         bc:2d:48:d7:0b:29:78:c3:04:e2:90:38:20:68:da:88:1e:19:
         7c:49:d4:79:e3:57:de:48:67:25:ae:17:d5:7d:07:17:f7:42:
         ee:5b:3d:ee:a1:e6:09:55:86:0e:ce:fe:15:84:c1:3f:9d:01:
         3a:17:e3:2a:e8:d5:0d:15:c3:a8:d4:5d:b1:03:34:8a:fa:68:
         62:42:04:c2:78:20:c2:9d:b6:75:f6:4e:0d:42:3b:94:f6:1c:
         9c:23:cf:57:0a:e0:e4:45:e2:91:94:4e:9e:59:e0:00:d0:00:
         2f:74:bb:35:c6:b8:7c:da:52:c6:b1:d6:8c:a1:c5:0c:59:84:
         96:81:f4:5a:c3:e0:fe:58:35:1c:f1:91:12:38:f9:87:60:27:
         d1:ee:f3:fb:27:5d:88:fb:66:09:70:de:1e:9c:0c:93:20:93:
         8c:40:41:da:6c:dd:f4:83:31:c9:75:c1:17:f0:ed:86:e0:1e:
         61:5f:9f:ca:20:ba:20:55:e2:45:38:6e:b7:6b:d9:14:1b:a0:
         3d:0c:72:6b:d2:e8:bb:15:b5:cd:0d:7d:b7:e7:ec:66:01:48:
         11:5c:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org