Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0F4A3C7A08B4790C32F43B2B98C55C99A536F3FBD8936B47237A1B954EF01D/0/323830333a663736303a3a2f33322d3438203d3e20323639383331.roa
File:                     323830333a663736303a3a2f33322d3438203d3e20323639383331.roa (raw, json)
Hash identifier:          L+sV+VoHXTnUOYICcn74Xf0g+NFXtFjpe4+4+Bjt1wM=
Subject key identifier:   80:72:C6:F0:E4:4C:CA:60:FD:B6:0B:A4:8A:BC:5E:AC:7E:75:79:CA
Certificate issuer:       /CN=30055656630A1FA887CA05E254D93988A1016F70
Certificate serial:       77FC97367391C1100771E4D24001F711697A9612
Authority key identifier: 30:05:56:56:63:0A:1F:A8:87:CA:05:E2:54:D9:39:88:A1:01:6F:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30055656630A1FA887CA05E254D93988A1016F70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB0F4A3C7A08B4790C32F43B2B98C55C99A536F3FBD8936B47237A1B954EF01D/0/323830333a663736303a3a2f33322d3438203d3e20323639383331.roa
Signing time:             Tue 05 Mar 2024 17:57:25 +0000
ROA not before:           Tue 05 Mar 2024 17:52:25 +0000
ROA not after:            Tue 04 Mar 2025 17:57:25 +0000
asID:                     269831
IP address blocks:        2803:f760::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB0F4A3C7A08B4790C32F43B2B98C55C99A536F3FBD8936B47237A1B954EF01D/0/30055656630A1FA887CA05E254D93988A1016F70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB0F4A3C7A08B4790C32F43B2B98C55C99A536F3FBD8936B47237A1B954EF01D/0/30055656630A1FA887CA05E254D93988A1016F70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30055656630A1FA887CA05E254D93988A1016F70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fc:97:36:73:91:c1:10:07:71:e4:d2:40:01:f7:11:69:7a:96:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30055656630A1FA887CA05E254D93988A1016F70
        Validity
            Not Before: Mar  5 17:52:25 2024 GMT
            Not After : Mar  4 17:57:25 2025 GMT
        Subject: CN=8072C6F0E44CCA60FDB60BA48ABC5EAC7E7579CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:85:38:7d:72:f2:a1:02:41:2b:1b:39:07:
                    5d:32:3b:45:77:96:64:d2:44:ba:b3:09:72:06:0f:
                    ae:da:b0:a2:8f:23:bf:a1:bb:53:97:78:a8:17:d0:
                    10:69:67:02:8e:92:fc:a4:05:02:4a:72:e1:30:2e:
                    17:ea:e6:af:f3:be:50:bc:24:de:80:ba:52:46:60:
                    1a:21:65:96:21:24:e2:ad:99:29:c7:78:c9:50:83:
                    fc:f3:c7:d7:54:e3:10:e1:7d:c8:58:aa:5d:aa:54:
                    4d:be:5f:66:01:97:77:25:d0:c5:12:2e:49:92:ee:
                    07:d7:90:8f:eb:99:8f:7c:a5:c6:ec:19:74:4c:18:
                    2a:5c:42:f0:42:ed:01:da:bb:82:57:16:56:51:c2:
                    48:cc:93:9e:06:ac:d2:4a:6a:11:b9:ac:7e:b7:d3:
                    f4:1c:5d:c5:f1:2b:5b:64:1c:c8:43:dd:6a:65:75:
                    2e:9e:93:f7:8d:02:54:73:1b:85:dd:65:47:3d:a6:
                    3f:b7:03:2c:31:56:65:0f:99:35:e8:c5:a0:3b:2b:
                    23:ad:34:3a:4a:40:00:5d:d7:74:cf:e1:a3:19:b0:
                    51:b5:62:f0:3c:e9:f3:8d:c4:8f:be:49:9b:b7:f1:
                    9d:a1:ac:0a:36:fb:30:90:3a:6f:53:be:06:97:a8:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:72:C6:F0:E4:4C:CA:60:FD:B6:0B:A4:8A:BC:5E:AC:7E:75:79:CA
            X509v3 Authority Key Identifier:
                keyid:30:05:56:56:63:0A:1F:A8:87:CA:05:E2:54:D9:39:88:A1:01:6F:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB0F4A3C7A08B4790C32F43B2B98C55C99A536F3FBD8936B47237A1B954EF01D/0/30055656630A1FA887CA05E254D93988A1016F70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30055656630A1FA887CA05E254D93988A1016F70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0F4A3C7A08B4790C32F43B2B98C55C99A536F3FBD8936B47237A1B954EF01D/0/323830333a663736303a3a2f33322d3438203d3e20323639383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f760::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:75:7e:76:0f:cb:50:b0:e9:34:e5:9c:12:57:e2:03:c1:
         9f:cf:54:25:82:98:51:6c:a1:bc:4b:81:21:73:7d:d2:94:9e:
         53:f1:d1:80:69:ec:0a:1e:67:6d:49:5e:87:a2:57:0f:a0:fe:
         6a:64:01:19:95:34:6b:d8:8e:10:f9:44:4c:83:8f:2f:30:fa:
         fe:b3:95:43:f1:29:ea:6a:8a:f3:69:1e:0b:cf:18:cd:77:51:
         19:87:e0:04:7d:ed:12:d1:9d:db:74:93:70:e7:c1:c7:7a:58:
         2b:a4:88:40:46:f4:fa:27:51:2b:69:23:2b:4d:d9:b8:70:a7:
         7e:6d:37:22:1a:c7:a7:83:15:df:78:99:c9:33:6e:af:f9:63:
         84:ee:47:20:c5:6e:70:bf:aa:bb:2e:4a:06:2d:69:36:5d:6b:
         84:96:4e:60:dd:a2:bb:90:95:5a:f5:52:22:94:2a:5f:de:27:
         e5:c1:9c:d8:5c:a7:bf:a4:0e:91:66:2d:16:c6:72:bd:a7:4b:
         ea:cc:76:2b:b6:6d:16:d8:a3:c5:04:72:2c:3c:1a:3e:a2:f4:
         84:2a:e8:e7:e6:14:93:4c:14:80:c0:76:82:81:45:64:4f:ae:
         c0:ab:3f:0f:27:df:ef:74:eb:87:dd:17:c3:ba:a7:24:37:e8:
         58:e8:df:b2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUd/yXNnORwRAHceTSQAH3EWl6lhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAwNTU2NTY2MzBBMUZBODg3Q0EwNUUyNTREOTM5ODhB
MTAxNkY3MDAeFw0yNDAzMDUxNzUyMjVaFw0yNTAzMDQxNzU3MjVaMDMxMTAvBgNV
BAMTKDgwNzJDNkYwRTQ0Q0NBNjBGREI2MEJBNDhBQkM1RUFDN0U3NTc5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1B4U4fXLyoQJBKxs5B10yO0V3
lmTSRLqzCXIGD67asKKPI7+hu1OXeKgX0BBpZwKOkvykBQJKcuEwLhfq5q/zvlC8
JN6AulJGYBohZZYhJOKtmSnHeMlQg/zzx9dU4xDhfchYql2qVE2+X2YBl3cl0MUS
LkmS7gfXkI/rmY98pcbsGXRMGCpcQvBC7QHau4JXFlZRwkjMk54GrNJKahG5rH63
0/QcXcXxK1tkHMhD3WpldS6ek/eNAlRzG4XdZUc9pj+3AywxVmUPmTXoxaA7KyOt
NDpKQABd13TP4aMZsFG1YvA86fONxI++SZu38Z2hrAo2+zCQOm9TvgaXqIlDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUgHLG8ORMymD9tgukirxerH51ecowHwYDVR0j
BBgwFoAUMAVWVmMKH6iHygXiVNk5iKEBb3AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQjBGNEEzQzdBMDhCNDc5MEMzMkY0M0IyQjk4QzU1Qzk5
QTUzNkYzRkJEODkzNkI0NzIzN0ExQjk1NEVGMDFELzAvMzAwNTU2NTY2MzBBMUZB
ODg3Q0EwNUUyNTREOTM5ODhBMTAxNkY3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDA1NTY1NjYzMEExRkE4ODdD
QTA1RTI1NEQ5Mzk4OEExMDE2RjcwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0IwRjRBM0M3QTA4QjQ3OTBDMzJGNDNCMkI5OEM1NUM5OUE1MzZGM0ZC
RDg5MzZCNDcyMzdBMUI5NTRFRjAxRC8wLzMyMzgzMDMzM2E2NjM3MzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD92Aw
DQYJKoZIhvcNAQELBQADggEBAGLKdX52D8tQsOk05ZwSV+IDwZ/PVCWCmFFsobxL
gSFzfdKUnlPx0YBp7AoeZ21JXoeiVw+g/mpkARmVNGvYjhD5REyDjy8w+v6zlUPx
KepqivNpHgvPGM13URmH4AR97RLRndt0k3Dnwcd6WCukiEBG9PonUStpIytN2bhw
p35tNyIax6eDFd94mckzbq/5Y4TuRyDFbnC/qrsuSgYtaTZda4SWTmDdoruQlVr1
UiKUKl/eJ+XBnNhcp7+kDpFmLRbGcr2nS+rMdiu2bRbYo8UEciw8Gj6i9IQq6Ofm
FJNMFIDAdoKBRWRPrsCrPw8n3+9064fdF8O6pyQ36Fjo37I=
-----END CERTIFICATE-----
Generated at Tue Jun 25 04:09:50 2024 by rpki-client on console-ams.rpki-client.org