Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/323830333a6563303a3a2f33322d3332203d3e20323635363632.roa
File:                     323830333a6563303a3a2f33322d3332203d3e20323635363632.roa (raw, json)
Hash identifier:          OgM1KSQdaZPyereKtlT+r7c/DxaGCSLh9Gsvx8KrzFk=
Subject key identifier:   96:6C:42:EC:AC:E3:FA:F6:BB:81:A6:C5:0D:FA:8C:CD:D2:F5:C5:7A
Certificate issuer:       /CN=80D3550CF73B167B6F22E20047A686FB2D761E88
Certificate serial:       7E3C9A8D7C71BA7504E5D6CFA03B0A064544666D
Authority key identifier: 80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/323830333a6563303a3a2f33322d3332203d3e20323635363632.roa
Signing time:             Tue 05 Mar 2024 18:11:34 +0000
ROA not before:           Tue 05 Mar 2024 18:06:34 +0000
ROA not after:            Tue 04 Mar 2025 18:11:34 +0000
asID:                     265662
IP address blocks:        2803:ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3c:9a:8d:7c:71:ba:75:04:e5:d6:cf:a0:3b:0a:06:45:44:66:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D3550CF73B167B6F22E20047A686FB2D761E88
        Validity
            Not Before: Mar  5 18:06:34 2024 GMT
            Not After : Mar  4 18:11:34 2025 GMT
        Subject: CN=966C42ECACE3FAF6BB81A6C50DFA8CCDD2F5C57A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:1e:53:29:1e:61:be:4a:e1:5e:39:dd:f6:
                    c8:b5:e0:48:fb:dd:74:09:dd:a7:eb:a4:ca:c9:48:
                    72:71:58:37:4d:17:60:97:79:e9:7b:2d:20:05:d9:
                    3e:43:91:c2:80:a0:3b:17:0c:8a:16:e4:ee:40:13:
                    fb:3e:75:16:07:fe:01:40:13:97:da:9b:d0:1f:27:
                    05:05:a7:20:cc:7e:99:eb:ae:1f:07:53:ed:00:19:
                    12:05:8d:28:6b:0a:57:b4:90:7a:e8:92:29:4b:ad:
                    de:68:d0:fa:7c:67:63:1d:fa:bd:2a:56:d5:b0:11:
                    fa:c2:a4:0b:d3:7b:e3:bf:ae:27:1b:13:90:22:c1:
                    3d:53:7c:69:80:d2:6b:0b:05:66:8f:99:f6:66:35:
                    5d:45:b4:2f:f6:7a:9b:18:e9:e3:04:87:0c:93:14:
                    0a:89:13:39:97:5c:4d:80:14:01:bf:ec:03:66:3b:
                    16:02:30:ae:a0:b4:ba:03:df:fa:da:97:58:62:43:
                    0b:a1:82:2c:0d:76:63:58:75:30:c7:22:a2:3c:66:
                    cb:29:58:d7:8f:fb:92:c9:91:68:f4:62:2c:49:bc:
                    2c:2c:76:85:1c:3f:a3:d2:a3:ac:7e:4b:0f:3e:d2:
                    7c:86:67:e7:a2:37:76:6c:a9:85:15:1c:97:a7:3c:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6C:42:EC:AC:E3:FA:F6:BB:81:A6:C5:0D:FA:8C:CD:D2:F5:C5:7A
            X509v3 Authority Key Identifier:
                keyid:80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/323830333a6563303a3a2f33322d3332203d3e20323635363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:a6:5c:5f:a0:04:14:cf:fa:67:7b:ab:76:05:4a:8a:6e:27:
         76:8e:33:7a:95:69:c4:4b:a0:df:61:32:c9:f9:78:23:78:75:
         b2:8f:df:7e:29:50:b4:fe:ff:15:7d:bf:0f:46:59:03:f0:97:
         d3:bd:7d:9b:17:1a:82:0c:5f:9e:ed:ac:7f:44:08:8e:b9:23:
         4b:91:c4:81:97:2f:bb:f3:50:da:fb:fe:ac:77:7a:ed:36:af:
         1b:c8:12:01:cf:0c:e4:c9:50:12:99:2d:7b:c8:f0:85:55:1c:
         11:7c:7b:b8:9f:75:2a:5f:10:02:34:89:51:64:2a:a1:6b:8c:
         fc:a8:43:00:f7:f7:cb:07:4a:4d:50:72:d3:2c:eb:94:4d:5d:
         6a:f4:48:ca:c4:9a:1a:33:d1:f2:fe:ab:ca:cc:70:83:dd:85:
         b2:1f:41:15:7e:3d:5e:d4:3a:71:9b:86:79:88:af:97:53:45:
         fe:8f:4b:b8:3a:91:ef:33:6e:a0:32:05:89:59:2b:33:4a:e5:
         e2:9a:a0:53:0b:b2:eb:46:c3:2d:55:15:1b:47:ff:56:cb:d6:
         60:04:3d:8d:f6:b1:ba:1a:d7:ab:60:0d:da:a8:bb:94:aa:62:
         36:aa:d9:6d:68:72:2a:b0:6a:c6:34:70:63:e7:0c:34:f2:0a:
         b9:c7:f9:d1
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfjyajXxxunUE5dbPoDsKBkVEZm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBEMzU1MENGNzNCMTY3QjZGMjJFMjAwNDdBNjg2RkIy
RDc2MUU4ODAeFw0yNDAzMDUxODA2MzRaFw0yNTAzMDQxODExMzRaMDMxMTAvBgNV
BAMTKDk2NkM0MkVDQUNFM0ZBRjZCQjgxQTZDNTBERkE4Q0NERDJGNUM1N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdbR5TKR5hvkrhXjnd9si14Ej7
3XQJ3afrpMrJSHJxWDdNF2CXeel7LSAF2T5DkcKAoDsXDIoW5O5AE/s+dRYH/gFA
E5fam9AfJwUFpyDMfpnrrh8HU+0AGRIFjShrCle0kHrokilLrd5o0Pp8Z2Md+r0q
VtWwEfrCpAvTe+O/ricbE5AiwT1TfGmA0msLBWaPmfZmNV1FtC/2epsY6eMEhwyT
FAqJEzmXXE2AFAG/7ANmOxYCMK6gtLoD3/ral1hiQwuhgiwNdmNYdTDHIqI8Zssp
WNeP+5LJkWj0YixJvCwsdoUcP6PSo6x+Sw8+0nyGZ+eiN3ZsqYUVHJenPKptAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUlmxC7Kzj+va7gabFDfqMzdL1xXowHwYDVR0j
BBgwFoAUgNNVDPc7FntvIuIAR6aG+y12HogwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OURCMzczMUE2NEM4ODE1Q0M5NjBERTc5MEVDMkMxNDg0
NzEyQjlDMjc3QzhERTlBQjYxMEIzMUFFNzU0ODdGLzAvODBEMzU1MENGNzNCMTY3
QjZGMjJFMjAwNDdBNjg2RkIyRDc2MUU4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEQzNTUwQ0Y3M0IxNjdCNkYy
MkUyMDA0N0E2ODZGQjJENzYxRTg4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlEQjM3MzFBNjRDODgxNUNDOTYwREU3OTBFQzJDMTQ4NDcxMkI5QzI3
N0M4REU5QUI2MTBCMzFBRTc1NDg3Ri8wLzMyMzgzMDMzM2E2NTYzMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAw7AMA0G
CSqGSIb3DQEBCwUAA4IBAQBpplxfoAQUz/pne6t2BUqKbid2jjN6lWnES6DfYTLJ
+XgjeHWyj99+KVC0/v8Vfb8PRlkD8JfTvX2bFxqCDF+e7ax/RAiOuSNLkcSBly+7
81Da+/6sd3rtNq8byBIBzwzkyVASmS17yPCFVRwRfHu4n3UqXxACNIlRZCqha4z8
qEMA9/fLB0pNUHLTLOuUTV1q9EjKxJoaM9Hy/qvKzHCD3YWyH0EVfj1e1Dpxm4Z5
iK+XU0X+j0u4OpHvM26gMgWJWSszSuXimqBTC7LrRsMtVRUbR/9Wy9ZgBD2N9rG6
GterYA3aqLuUqmI2qtltaHIqsGrGNHBj5ww08gq5x/nR
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org