Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/323830363a3365343a3a2f33322d3332203d3e20323730313533.roa
File:                     323830363a3365343a3a2f33322d3332203d3e20323730313533.roa (raw, json)
Hash identifier:          JXAZaw/RNyHTVI8f9T2bEr4Eajr3wnw0WX3phxgj8cM=
Subject key identifier:   3E:19:93:DF:CE:5B:57:08:1F:E9:F6:7F:4B:D9:4B:28:37:68:2A:DD
Certificate issuer:       /CN=1ED016B1382217AAC5422CBEACABDFD6FCC3560A
Certificate serial:       7505E4B664CA99CDCDF5D76C8D996FCD833DBDAA
Authority key identifier: 1E:D0:16:B1:38:22:17:AA:C5:42:2C:BE:AC:AB:DF:D6:FC:C3:56:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/323830363a3365343a3a2f33322d3332203d3e20323730313533.roa
Signing time:             Tue 18 Jun 2024 01:20:00 +0000
ROA not before:           Tue 18 Jun 2024 01:15:00 +0000
ROA not after:            Tue 17 Jun 2025 01:20:00 +0000
asID:                     270153
IP address blocks:        2806:3e4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:05:e4:b6:64:ca:99:cd:cd:f5:d7:6c:8d:99:6f:cd:83:3d:bd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED016B1382217AAC5422CBEACABDFD6FCC3560A
        Validity
            Not Before: Jun 18 01:15:00 2024 GMT
            Not After : Jun 17 01:20:00 2025 GMT
        Subject: CN=3E1993DFCE5B57081FE9F67F4BD94B2837682ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:fc:14:14:69:a7:ee:38:f9:7f:2e:e7:10:
                    3c:30:f8:d9:bb:75:f0:cb:bb:74:44:ef:c4:92:c3:
                    af:59:c6:71:7b:1e:8e:74:c4:6f:a9:54:98:f6:e3:
                    28:25:e6:6f:0d:21:91:69:31:5b:24:40:41:04:e8:
                    fb:4f:7c:14:ef:53:a7:95:30:ec:58:48:08:42:4d:
                    33:06:1b:00:8c:5a:6e:4f:15:a7:f4:c2:c5:69:8f:
                    55:5b:00:68:ea:7c:18:9c:c6:5f:19:19:c2:7a:d4:
                    d2:2b:ae:68:69:da:90:01:77:6d:fc:af:0e:b3:78:
                    a9:15:c6:d1:3b:67:d4:00:04:2d:73:ba:92:8b:2d:
                    3a:57:0e:e4:e6:d7:c2:52:dc:af:4b:cc:5a:a8:c2:
                    41:11:5c:8f:be:25:d2:5a:3a:c9:f4:31:10:ba:cc:
                    7f:89:07:7b:fa:e1:f2:50:f0:24:c2:f9:41:9e:6e:
                    75:06:4a:0a:95:19:f3:e0:b3:42:ed:44:a7:b6:98:
                    47:48:d9:d7:53:9d:e2:ac:98:50:46:27:f9:0c:22:
                    65:68:df:1d:19:68:5d:82:cf:6f:3a:cf:7f:bd:aa:
                    39:09:6e:f3:6c:1f:2c:f3:bb:6d:1f:52:71:ba:6e:
                    46:ec:c5:f3:21:76:2a:ad:b8:da:ff:09:8d:b3:36:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:19:93:DF:CE:5B:57:08:1F:E9:F6:7F:4B:D9:4B:28:37:68:2A:DD
            X509v3 Authority Key Identifier:
                keyid:1E:D0:16:B1:38:22:17:AA:C5:42:2C:BE:AC:AB:DF:D6:FC:C3:56:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/323830363a3365343a3a2f33322d3332203d3e20323730313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:28:80:13:68:ec:55:7b:a1:b5:d6:81:84:7d:01:23:dc:93:
         98:f4:39:fd:e5:31:90:56:14:1b:b5:5d:1f:36:da:60:85:3c:
         23:90:ed:be:f0:34:0b:96:98:b6:46:55:2d:8e:bc:ae:61:1e:
         2b:b5:97:ba:24:d1:19:8d:dd:e1:f9:53:a8:91:96:e7:fb:05:
         80:6f:38:ad:5a:8a:5b:ab:b0:27:fb:93:81:37:df:ef:97:03:
         f3:4f:30:6b:4f:2b:d3:f9:0d:80:20:85:7b:c8:e5:65:89:d4:
         0b:e0:ef:7d:20:cf:e0:bd:fb:49:8d:5b:c9:9e:7d:15:e4:49:
         2f:0a:52:14:33:92:be:5f:a1:f8:31:19:e8:a2:f7:e4:2e:d4:
         a2:a2:a2:af:4c:d2:da:ed:c5:73:60:89:be:34:e4:61:f5:f4:
         c3:9e:b7:61:b0:0e:90:e4:66:98:95:19:23:73:be:10:1f:95:
         a9:3d:80:f4:a4:74:cc:3e:7c:b0:d1:e7:16:d8:5e:8c:e8:4a:
         99:ca:01:90:7a:72:ba:99:2f:32:e2:f1:9d:ee:4b:7b:53:df:
         42:5f:09:b0:7d:b9:59:a3:12:62:1f:4f:f8:f2:b8:2e:80:56:
         f0:f6:a1:6d:ea:ce:ef:a9:00:d3:68:0a:0d:f5:8f:7f:a5:9c:
         12:78:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:57 2024 by rpki-client on console-ams.rpki-client.org