Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/323830363a3362663a3a2f34382d3438203d3e20323730313230.roa
File:                     323830363a3362663a3a2f34382d3438203d3e20323730313230.roa (raw, json)
Hash identifier:          7uihpi58hfdqpBVBa6Ycf2OsqiqgXrr4dkWe/kr2BCk=
Subject key identifier:   86:EC:9D:C1:31:A0:7F:18:DC:C9:29:A4:F9:AE:98:E1:DB:5F:2A:74
Certificate issuer:       /CN=FE06B7E29234D0773837167ECDC2EA8823E3C308
Certificate serial:       523F5AFAFA6E75C95707745DAF6D7C119F0066FA
Authority key identifier: FE:06:B7:E2:92:34:D0:77:38:37:16:7E:CD:C2:EA:88:23:E3:C3:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/323830363a3362663a3a2f34382d3438203d3e20323730313230.roa
Signing time:             Tue 05 Mar 2024 18:13:50 +0000
ROA not before:           Tue 05 Mar 2024 18:08:50 +0000
ROA not after:            Tue 04 Mar 2025 18:13:50 +0000
asID:                     270120
IP address blocks:        2806:3bf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:5a:fa:fa:6e:75:c9:57:07:74:5d:af:6d:7c:11:9f:00:66:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE06B7E29234D0773837167ECDC2EA8823E3C308
        Validity
            Not Before: Mar  5 18:08:50 2024 GMT
            Not After : Mar  4 18:13:50 2025 GMT
        Subject: CN=86EC9DC131A07F18DCC929A4F9AE98E1DB5F2A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:88:90:74:ee:a7:fc:04:a5:83:fe:df:89:
                    17:1a:18:f1:f6:4d:66:51:c8:d5:5e:c6:21:a7:b9:
                    13:51:f2:31:ca:f4:f5:48:16:64:2b:d0:ca:3d:00:
                    8f:3c:46:af:6c:17:d4:84:09:1b:7e:76:2f:2c:6a:
                    a7:d3:bc:8e:9d:46:85:6d:ca:db:a6:74:0b:66:20:
                    42:43:e5:98:2d:bc:5e:ea:25:89:a4:46:03:af:83:
                    a3:a9:0b:79:f6:01:2d:8f:09:b2:2b:ab:8f:09:97:
                    3c:09:01:5e:42:23:e0:38:36:29:d6:a1:0a:5d:2f:
                    d8:b5:4c:1a:09:40:78:95:67:7d:03:92:8e:69:13:
                    14:33:76:ef:ae:ab:be:c9:fe:21:67:5f:e1:9b:64:
                    c8:df:d0:8b:09:cd:4c:62:a9:69:e4:07:7f:18:f0:
                    b7:a0:a4:1b:2a:f6:93:a8:2d:bd:f9:a3:9f:22:f5:
                    3c:b9:3d:f9:1c:82:70:4e:52:71:b8:17:5e:71:7f:
                    1e:b6:6f:1a:2c:a3:b2:1f:b4:cc:ea:0c:30:b0:49:
                    ab:3d:04:0b:74:7f:0c:33:34:cc:68:95:13:fa:a0:
                    79:0f:79:d1:dd:fb:8d:08:e9:a7:c9:ef:1b:22:08:
                    69:96:34:7d:06:9e:bc:99:ad:73:47:43:b4:cd:da:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EC:9D:C1:31:A0:7F:18:DC:C9:29:A4:F9:AE:98:E1:DB:5F:2A:74
            X509v3 Authority Key Identifier:
                keyid:FE:06:B7:E2:92:34:D0:77:38:37:16:7E:CD:C2:EA:88:23:E3:C3:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/323830363a3362663a3a2f34382d3438203d3e20323730313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:94:db:55:29:ae:f3:b1:d5:d2:e0:55:1a:62:99:34:d9:
         39:07:eb:4a:19:40:70:f8:9e:26:3b:07:2b:36:3b:b6:d0:f1:
         23:fa:99:40:2c:0e:93:7a:3f:d4:31:bb:da:7a:f6:fc:cd:61:
         64:1f:b0:a3:a8:a5:27:0c:bb:4c:48:d3:38:90:b2:a9:ad:54:
         31:14:04:f5:8d:11:73:63:f5:08:a5:c1:2a:4f:26:50:51:81:
         03:51:95:e0:91:d2:ba:d3:fe:40:e6:aa:9b:a1:52:d2:8e:98:
         48:95:30:32:e3:77:f6:3a:48:41:bb:06:f2:ef:69:2f:c5:c0:
         e8:9c:54:90:37:4d:49:67:a8:61:d3:9d:36:38:70:f5:43:92:
         8f:78:c4:8f:ac:16:a3:b0:d6:81:ad:b1:04:ac:a2:c1:54:17:
         8f:b1:41:4c:e5:3f:ca:d8:94:8c:03:09:f9:a6:10:45:a1:5d:
         f8:e1:45:07:3d:a3:77:75:18:5d:02:52:41:c9:d9:5f:98:14:
         dc:65:88:fa:84:fd:f8:b5:5b:42:02:e0:05:49:27:2b:79:86:
         02:6b:c5:02:7a:2f:e1:3b:3d:39:ec:a9:e6:d7:1f:45:54:b2:
         f6:49:99:2c:67:c4:e8:34:48:b4:f1:b6:8f:4f:f4:c6:51:72:
         01:c1:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:20 2024 by rpki-client on console-fra.rpki-client.org