Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/323830333a633132303a3a2f33322d3332203d3e20323636363535.roa
File:                     323830333a633132303a3a2f33322d3332203d3e20323636363535.roa (raw, json)
Hash identifier:          zzbK+jqH3wmLENjKXgf6Hik9bpto5w0kvYMTkMExS84=
Subject key identifier:   0B:D8:B5:27:70:09:21:69:3E:CC:BA:1E:30:C3:74:59:06:59:44:C3
Certificate issuer:       /CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Certificate serial:       05C73D5F6B737C9197856C0DB15141A6EFB0A7BE
Authority key identifier: 97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/323830333a633132303a3a2f33322d3332203d3e20323636363535.roa
Signing time:             Tue 05 Mar 2024 18:00:32 +0000
ROA not before:           Tue 05 Mar 2024 17:55:32 +0000
ROA not after:            Tue 04 Mar 2025 18:00:32 +0000
asID:                     266655
IP address blocks:        2803:c120::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c7:3d:5f:6b:73:7c:91:97:85:6c:0d:b1:51:41:a6:ef:b0:a7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
        Validity
            Not Before: Mar  5 17:55:32 2024 GMT
            Not After : Mar  4 18:00:32 2025 GMT
        Subject: CN=0BD8B527700921693ECCBA1E30C37459065944C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:fe:f1:a3:26:c8:85:02:25:0f:aa:de:73:
                    17:42:ba:d0:6f:1e:ea:0a:4d:36:a7:c7:b6:e4:e3:
                    53:04:65:ca:b5:2b:4e:b7:d2:60:7d:b2:7f:e4:95:
                    e8:0f:70:b1:d4:71:b9:36:f0:a5:ec:4b:a0:e8:5c:
                    26:09:99:ce:c8:b9:ba:c4:ee:b0:22:87:42:ce:aa:
                    b9:56:99:19:cb:da:5f:8c:50:0e:10:0a:01:4c:27:
                    4e:38:40:ce:a6:3d:7f:4f:40:c6:ad:70:a7:89:59:
                    48:01:6a:dd:f9:93:55:97:27:e1:72:eb:17:28:0e:
                    d4:e3:3c:e6:9b:84:b9:24:9f:06:17:94:d6:a0:a7:
                    0f:4b:54:88:92:45:48:04:26:cf:62:e3:e7:ea:8f:
                    a5:18:13:27:c4:f2:01:4e:49:af:82:69:86:39:55:
                    26:82:49:b8:71:00:4c:32:90:88:4e:b9:e5:86:f2:
                    a0:78:8d:ad:15:7e:06:f2:ad:9c:bf:a3:7d:f9:06:
                    5c:b8:4c:5c:ce:fd:a9:5c:21:6e:8f:76:16:1d:c6:
                    6e:27:02:1c:e3:75:e9:cd:94:88:da:1f:6c:4b:c2:
                    a6:a5:47:be:c4:42:76:c9:e0:8c:c5:f8:6f:b8:ce:
                    3e:e7:33:11:de:68:1d:66:f9:1a:27:82:92:c6:3f:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D8:B5:27:70:09:21:69:3E:CC:BA:1E:30:C3:74:59:06:59:44:C3
            X509v3 Authority Key Identifier:
                keyid:97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/323830333a633132303a3a2f33322d3332203d3e20323636363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c120::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:06:40:90:02:32:46:48:af:14:00:5d:07:b6:4c:b0:67:
         85:bb:4d:01:e8:44:e7:f6:11:61:7c:cc:c1:be:c3:f1:9b:24:
         60:58:e1:56:25:06:4c:47:94:60:74:57:ae:c8:ac:f1:c9:2f:
         a6:a6:81:92:aa:cf:e5:5c:3d:b2:15:8d:40:48:86:04:dc:a9:
         96:89:09:a1:43:f6:09:fa:f9:8c:03:5d:3d:7b:17:ed:4d:3b:
         6b:ce:5d:53:08:76:cb:5e:67:5b:c5:19:5c:50:be:e0:10:71:
         d1:0c:ad:bd:47:d1:48:60:d7:f5:7e:2a:61:4c:03:f7:8b:7e:
         61:ab:39:f3:a9:bd:66:e4:2d:dc:f8:bc:27:3f:ea:51:46:1a:
         75:a2:11:10:f0:0c:fd:18:30:bf:6b:ca:89:12:66:f9:53:74:
         7c:9c:10:7d:2e:48:bf:2b:d0:bc:b1:91:e1:94:0a:0b:39:7b:
         a1:5a:f3:e5:eb:ae:e9:bb:cb:49:ba:72:9d:12:a1:fe:de:af:
         52:68:68:58:72:65:81:f9:c9:bd:61:89:b1:ed:f4:6a:46:49:
         52:da:41:0e:62:33:d9:0b:db:6e:44:bd:2b:19:e5:73:7c:6a:
         a7:aa:d0:28:f8:65:24:18:f5:45:f3:0f:c1:ca:14:ba:20:e6:
         4f:51:ef:5c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBcc9X2tzfJGXhWwNsVFBpu+wp74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdEMUU4MUNBRkQ3Q0YxRjVGRUUwODI4NUVBMTE3N0E0
NkFCMTdDQjAeFw0yNDAzMDUxNzU1MzJaFw0yNTAzMDQxODAwMzJaMDMxMTAvBgNV
BAMTKDBCRDhCNTI3NzAwOTIxNjkzRUNDQkExRTMwQzM3NDU5MDY1OTQ0QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fP7xoybIhQIlD6recxdCutBv
HuoKTTanx7bk41MEZcq1K0630mB9sn/klegPcLHUcbk28KXsS6DoXCYJmc7IubrE
7rAih0LOqrlWmRnL2l+MUA4QCgFMJ044QM6mPX9PQMatcKeJWUgBat35k1WXJ+Fy
6xcoDtTjPOabhLkknwYXlNagpw9LVIiSRUgEJs9i4+fqj6UYEyfE8gFOSa+CaYY5
VSaCSbhxAEwykIhOueWG8qB4ja0VfgbyrZy/o335Bly4TFzO/alcIW6PdhYdxm4n
AhzjdenNlIjaH2xLwqalR77EQnbJ4IzF+G+4zj7nMxHeaB1m+RongpLGP03NAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUC9i1J3AJIWk+zLoeMMN0WQZZRMMwHwYDVR0j
BBgwFoAUl9HoHK/Xzx9f7ggoXqEXekarF8swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODk4N0VBRkIwQzJCN0M0Q0VFMTM4OURGN0E3NUJBOEU1
MTM0QzYwREJCNTMwOTMwMjRFMjQ3MUJEQTY2Mjc2LzAvOTdEMUU4MUNBRkQ3Q0Yx
RjVGRUUwODI4NUVBMTE3N0E0NkFCMTdDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85N0QxRTgxQ0FGRDdDRjFGNUZF
RTA4Mjg1RUExMTc3QTQ2QUIxN0NCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg5ODdFQUZCMEMyQjdDNENFRTEzODlERjdBNzVCQThFNTEzNEM2MERC
QjUzMDkzMDI0RTI0NzFCREE2NjI3Ni8wLzMyMzgzMDMzM2E2MzMxMzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM2MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDwSAw
DQYJKoZIhvcNAQELBQADggEBAGrmBkCQAjJGSK8UAF0HtkywZ4W7TQHoROf2EWF8
zMG+w/GbJGBY4VYlBkxHlGB0V67IrPHJL6amgZKqz+VcPbIVjUBIhgTcqZaJCaFD
9gn6+YwDXT17F+1NO2vOXVMIdsteZ1vFGVxQvuAQcdEMrb1H0Uhg1/V+KmFMA/eL
fmGrOfOpvWbkLdz4vCc/6lFGGnWiERDwDP0YML9ryokSZvlTdHycEH0uSL8r0Lyx
keGUCgs5e6Fa8+Xrrum7y0m6cp0Sof7er1JoaFhyZYH5yb1hibHt9GpGSVLaQQ5i
M9kL225EvSsZ5XN8aqeq0Cj4ZSQY9UXzD8HKFLog5k9R71w=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:03 2024 by rpki-client on console-ams.rpki-client.org