Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f36342d3634203d3e20323636373734.roa
File:                     323830333a656632303a3a2f36342d3634203d3e20323636373734.roa (raw, json)
Hash identifier:          ICL+/owr9VMgAC/oiB4RmlYJf264G9iFXuE7x09oseg=
Subject key identifier:   9E:88:A5:38:DA:71:07:E8:1B:1D:ED:C2:6D:2F:BC:50:F8:A9:76:D5
Certificate issuer:       /CN=1E862F205E27A89B1343A4D62B69B564737D0432
Certificate serial:       6CEA9C6779B4CA9938EC6C2351EDBF5B86C75139
Authority key identifier: 1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f36342d3634203d3e20323636373734.roa
Signing time:             Tue 05 Mar 2024 18:19:23 +0000
ROA not before:           Tue 05 Mar 2024 18:14:23 +0000
ROA not after:            Tue 04 Mar 2025 18:19:23 +0000
asID:                     266774
IP address blocks:        2803:ef20::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ea:9c:67:79:b4:ca:99:38:ec:6c:23:51:ed:bf:5b:86:c7:51:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E862F205E27A89B1343A4D62B69B564737D0432
        Validity
            Not Before: Mar  5 18:14:23 2024 GMT
            Not After : Mar  4 18:19:23 2025 GMT
        Subject: CN=9E88A538DA7107E81B1DEDC26D2FBC50F8A976D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:9a:08:11:52:5b:c3:df:69:db:26:f6:69:
                    4d:1b:83:85:28:a8:9d:64:c0:a0:dd:fc:9c:f5:e8:
                    7e:61:04:fc:a9:8a:5a:a4:66:96:09:5d:f7:1c:0e:
                    4d:51:f8:24:29:21:d8:a9:09:ab:44:ec:1f:db:32:
                    ff:1a:94:fe:91:70:14:57:af:dc:3f:f6:8c:95:03:
                    9f:14:b5:33:a1:f3:cd:33:cd:3c:f5:cd:c7:83:09:
                    b8:a1:82:7b:d1:98:d9:9d:08:d2:bc:e1:ee:9d:32:
                    12:88:dd:1e:ca:4f:98:74:a3:96:21:eb:fc:b1:9d:
                    d2:ab:ab:a2:3e:f7:57:7d:b2:28:aa:9e:86:1f:a8:
                    db:3a:9f:4a:f8:d5:d2:84:a7:ae:76:4a:0a:68:13:
                    6d:0b:e7:f8:78:c9:bd:e4:8c:1e:0b:8c:99:42:b4:
                    b9:f9:6c:46:90:10:e8:71:aa:d5:07:d4:af:89:04:
                    55:6c:36:7b:e4:ff:21:8c:9e:94:67:37:62:b1:0c:
                    f4:e1:0c:99:07:0c:43:07:0e:8f:24:9e:56:6f:5a:
                    f9:e6:b0:41:de:c5:d0:f3:0d:8e:72:7a:6c:6b:fc:
                    7e:ea:b4:b3:94:84:cb:b2:1e:e0:d4:e9:f4:1a:90:
                    ba:ff:a1:c7:11:bb:99:1e:f0:c8:74:9b:7f:1f:d5:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:88:A5:38:DA:71:07:E8:1B:1D:ED:C2:6D:2F:BC:50:F8:A9:76:D5
            X509v3 Authority Key Identifier:
                keyid:1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f36342d3634203d3e20323636373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ef20::/64

    Signature Algorithm: sha256WithRSAEncryption
         97:2d:56:42:11:80:98:40:f1:94:be:af:78:8e:37:07:29:ea:
         5b:ba:e5:8d:09:db:47:e6:56:3c:cd:45:65:f7:20:83:f6:eb:
         ee:a6:8a:18:fe:a0:7b:33:72:31:7b:88:2b:a1:3b:99:c6:aa:
         a4:cd:33:8c:9c:dc:bd:7f:63:30:98:b8:84:df:18:de:f8:7d:
         8c:a1:0b:a1:53:78:32:05:34:74:fc:64:4e:e2:80:ae:9b:b2:
         0e:42:6f:e4:0d:9c:ae:26:aa:e1:9b:73:9a:6e:8f:70:ce:48:
         24:dd:41:d4:8e:d1:0c:31:c2:73:db:78:42:73:8a:a2:d7:8c:
         94:83:16:e0:d6:b5:ed:58:db:e4:be:76:44:93:2b:62:7b:f7:
         52:ba:aa:a5:6a:91:4c:1b:6b:a1:39:df:b0:31:81:0c:b6:7c:
         7f:11:66:f4:1b:ed:7e:2d:bb:8b:44:cb:45:7a:cd:49:e5:0c:
         65:2d:ab:e2:af:e1:1c:43:b2:9a:c2:81:c7:9c:a9:aa:52:b0:
         d4:3d:54:d9:04:a1:c4:e8:f4:64:dc:c6:cd:ce:66:4c:37:da:
         72:de:be:99:d4:ee:a5:4f:26:f7:b2:a0:db:e3:63:ca:7f:a6:
         d2:8b:35:f8:9f:9b:c8:2f:40:a6:5e:52:c6:d5:bf:33:fc:26:
         2c:af:f2:a9
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUbOqcZ3m0ypk47GwjUe2/W4bHUTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4NjJGMjA1RTI3QTg5QjEzNDNBNEQ2MkI2OUI1NjQ3
MzdEMDQzMjAeFw0yNDAzMDUxODE0MjNaFw0yNTAzMDQxODE5MjNaMDMxMTAvBgNV
BAMTKDlFODhBNTM4REE3MTA3RTgxQjFERURDMjZEMkZCQzUwRjhBOTc2RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbJoIEVJbw99p2yb2aU0bg4Uo
qJ1kwKDd/Jz16H5hBPypilqkZpYJXfccDk1R+CQpIdipCatE7B/bMv8alP6RcBRX
r9w/9oyVA58UtTOh880zzTz1zceDCbihgnvRmNmdCNK84e6dMhKI3R7KT5h0o5Yh
6/yxndKrq6I+91d9siiqnoYfqNs6n0r41dKEp652SgpoE20L5/h4yb3kjB4LjJlC
tLn5bEaQEOhxqtUH1K+JBFVsNnvk/yGMnpRnN2KxDPThDJkHDEMHDo8knlZvWvnm
sEHexdDzDY5yemxr/H7qtLOUhMuyHuDU6fQakLr/occRu5ke8Mh0m38f1WBpAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUnoilONpxB+gbHe3CbS+8UPipdtUwHwYDVR0j
BBgwFoAUHoYvIF4nqJsTQ6TWK2m1ZHN9BDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MTE2RDlFQjdFNjNEMjMwNUI1RTlCQTVGOEQ5NjY0QkIx
NEM1MTdBRTcwMEM4MEEyNTVDOTlENERFNzM2Q0Q1LzAvMUU4NjJGMjA1RTI3QTg5
QjEzNDNBNEQ2MkI2OUI1NjQ3MzdEMDQzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRTg2MkYyMDVFMjdBODlCMTM0
M0E0RDYyQjY5QjU2NDczN0QwNDMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODExNkQ5RUI3RTYzRDIzMDVCNUU5QkE1RjhEOTY2NEJCMTRDNTE3QUU3
MDBDODBBMjU1Qzk5RDRERTczNkNENS8wLzMyMzgzMDMzM2E2NTY2MzIzMDNhM2Ey
ZjM2MzQyZDM2MzQyMDNkM2UyMDMyMzYzNjM3MzczNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACgD7yAA
AAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCXLVZCEYCYQPGUvq94jjcHKepbuuWNCdtH
5lY8zUVl9yCD9uvupooY/qB7M3Ixe4groTuZxqqkzTOMnNy9f2MwmLiE3xje+H2M
oQuhU3gyBTR0/GRO4oCum7IOQm/kDZyuJqrhm3Oabo9wzkgk3UHUjtEMMcJz23hC
c4qi14yUgxbg1rXtWNvkvnZEkytie/dSuqqlapFMG2uhOd+wMYEMtnx/EWb0G+1+
LbuLRMtFes1J5QxlLavir+EcQ7KawoHHnKmqUrDUPVTZBKHE6PRk3MbNzmZMN9py
3r6Z1O6lTyb3sqDb42PKf6bSizX4n5vIL0CmXlLG1b8z/CYsr/Kp
-----END CERTIFICATE-----
Generated at Sun May 19 04:56:35 2024 by rpki-client on console-fra.rpki-client.org