Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/323830333a3132303a3a2f33322d3438203d3e20323636373836.roa
File:                     323830333a3132303a3a2f33322d3438203d3e20323636373836.roa (raw, json)
Hash identifier:          ZLhTTf8+uyWpARTDdI3F267CMRssQ/eSVkz8xgXmtj0=
Subject key identifier:   2D:28:58:27:CF:64:E6:75:55:43:82:83:29:1F:FF:50:7A:32:07:BF
Certificate issuer:       /CN=985A06560547E393EA93615CCE79B796AFD39350
Certificate serial:       34B2F74A670C8BF7F5FCF6D4098604D69304757F
Authority key identifier: 98:5A:06:56:05:47:E3:93:EA:93:61:5C:CE:79:B7:96:AF:D3:93:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/323830333a3132303a3a2f33322d3438203d3e20323636373836.roa
Signing time:             Tue 05 Mar 2024 18:01:19 +0000
ROA not before:           Tue 05 Mar 2024 17:56:19 +0000
ROA not after:            Tue 04 Mar 2025 18:01:19 +0000
asID:                     266786
IP address blocks:        2803:120::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.crl
                          rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b2:f7:4a:67:0c:8b:f7:f5:fc:f6:d4:09:86:04:d6:93:04:75:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985A06560547E393EA93615CCE79B796AFD39350
        Validity
            Not Before: Mar  5 17:56:19 2024 GMT
            Not After : Mar  4 18:01:19 2025 GMT
        Subject: CN=2D285827CF64E67555438283291FFF507A3207BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:8e:9f:a4:67:77:17:2d:6c:f5:fc:18:d5:
                    41:fc:06:06:1e:0b:48:6e:7c:63:d2:62:cf:df:52:
                    d2:42:cb:76:28:67:c0:dc:c3:c3:51:e1:a9:46:f5:
                    a9:74:b8:62:71:a3:b3:4d:ab:bc:7b:99:0f:5a:3f:
                    25:02:e4:0f:01:1e:3c:de:23:22:39:68:8b:67:56:
                    52:16:96:a4:59:9b:08:ed:3e:c5:a8:67:d9:0f:02:
                    d0:42:49:58:d6:a3:06:cd:3d:e5:c9:3e:40:8d:c1:
                    6f:eb:8a:e1:46:a9:97:06:eb:58:c3:fc:51:80:84:
                    94:9c:e3:7f:84:14:49:34:6c:88:c7:c9:06:45:42:
                    95:f4:d2:bb:16:a1:6f:34:12:66:ee:24:7d:04:59:
                    5c:b3:88:da:a4:78:85:89:93:1a:e2:45:41:c8:bf:
                    ef:66:6c:ee:7a:83:92:83:2b:9a:81:d6:f2:89:3b:
                    93:17:6b:a4:ba:92:b0:4c:69:d9:9e:c0:8b:ab:fd:
                    c4:db:14:02:1d:bb:83:85:a8:ca:6a:0f:b4:90:b0:
                    69:bb:50:63:9d:0f:e0:36:29:d9:64:5e:93:54:86:
                    6a:a1:d3:dc:99:5c:91:a6:d2:73:c5:2f:44:72:bf:
                    86:ea:48:3d:a0:e9:a1:16:26:11:77:a3:ba:b0:ee:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:28:58:27:CF:64:E6:75:55:43:82:83:29:1F:FF:50:7A:32:07:BF
            X509v3 Authority Key Identifier:
                keyid:98:5A:06:56:05:47:E3:93:EA:93:61:5C:CE:79:B7:96:AF:D3:93:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/323830333a3132303a3a2f33322d3438203d3e20323636373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:120::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:cf:f9:13:7c:5e:11:b7:a3:ec:95:bf:ea:af:b4:c0:e6:19:
         3f:5c:2a:8a:79:a9:65:a6:f3:f9:44:75:71:51:9c:07:d0:d5:
         1a:e2:37:d5:d8:b9:7e:8a:af:ec:e4:e4:60:35:ea:4b:1d:1f:
         c1:43:4a:84:42:49:6a:44:06:e7:23:c7:1d:06:df:11:b7:4b:
         06:5e:49:9d:ae:80:d7:80:7a:73:63:26:cd:34:de:a7:1d:fc:
         92:7c:d2:27:69:b5:94:4c:85:58:43:db:d2:da:4f:88:a8:75:
         ce:04:6f:ad:a4:05:e7:28:55:8a:5b:08:db:8b:ef:6b:ee:23:
         09:ce:83:49:9c:3d:ee:65:d6:9f:57:42:7b:0e:20:d3:69:70:
         f8:c3:94:ca:39:72:45:22:63:74:0b:b8:1a:8e:0e:6c:07:57:
         d6:c3:64:00:68:9b:32:3c:9a:ed:4f:0f:83:78:0b:0c:21:d6:
         54:f9:15:7d:7f:23:94:f0:39:23:55:0e:96:67:5a:e5:32:6c:
         04:be:2e:ea:05:88:fa:50:9a:ab:5f:b5:37:45:d0:7a:dd:f0:
         2f:19:86:d0:e1:22:85:22:1f:79:65:ac:94:a1:cc:fe:42:a5:
         94:a9:01:45:b4:c9:61:e0:70:c8:59:39:3f:aa:59:8e:9c:5a:
         d6:ae:89:be
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUNLL3SmcMi/f1/PbUCYYE1pMEdX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1QTA2NTYwNTQ3RTM5M0VBOTM2MTVDQ0U3OUI3OTZB
RkQzOTM1MDAeFw0yNDAzMDUxNzU2MTlaFw0yNTAzMDQxODAxMTlaMDMxMTAvBgNV
BAMTKDJEMjg1ODI3Q0Y2NEU2NzU1NTQzODI4MzI5MUZGRjUwN0EzMjA3QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColY6fpGd3Fy1s9fwY1UH8BgYe
C0hufGPSYs/fUtJCy3YoZ8Dcw8NR4alG9al0uGJxo7NNq7x7mQ9aPyUC5A8BHjze
IyI5aItnVlIWlqRZmwjtPsWoZ9kPAtBCSVjWowbNPeXJPkCNwW/riuFGqZcG61jD
/FGAhJSc43+EFEk0bIjHyQZFQpX00rsWoW80EmbuJH0EWVyziNqkeIWJkxriRUHI
v+9mbO56g5KDK5qB1vKJO5MXa6S6krBMadmewIur/cTbFAIdu4OFqMpqD7SQsGm7
UGOdD+A2KdlkXpNUhmqh09yZXJGm0nPFL0Ryv4bqSD2g6aEWJhF3o7qw7nKrAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQULShYJ89k5nVVQ4KDKR//UHoyB78wHwYDVR0j
BBgwFoAUmFoGVgVH45Pqk2Fcznm3lq/Tk1AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MkUyM0NDQTEyRThDNTdGQjQ5MkZDRDNFOUQzMUE4ODQ5
NTUzQzc1MTQ3NkY3NUVFN0ZCNUVBMkE3NTg5NjA1LzAvOTg1QTA2NTYwNTQ3RTM5
M0VBOTM2MTVDQ0U3OUI3OTZBRkQzOTM1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODVBMDY1NjA1NDdFMzkzRUE5
MzYxNUNDRTc5Qjc5NkFGRDM5MzUwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODJFMjNDQ0ExMkU4QzU3RkI0OTJGQ0QzRTlEMzFBODg0OTU1M0M3NTE0
NzZGNzVFRTdGQjVFQTJBNzU4OTYwNS8wLzMyMzgzMDMzM2EzMTMyMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzYzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwEgMA0G
CSqGSIb3DQEBCwUAA4IBAQCGz/kTfF4Rt6Pslb/qr7TA5hk/XCqKeallpvP5RHVx
UZwH0NUa4jfV2Ll+iq/s5ORgNepLHR/BQ0qEQklqRAbnI8cdBt8Rt0sGXkmdroDX
gHpzYybNNN6nHfySfNInabWUTIVYQ9vS2k+IqHXOBG+tpAXnKFWKWwjbi+9r7iMJ
zoNJnD3uZdafV0J7DiDTaXD4w5TKOXJFImN0C7gajg5sB1fWw2QAaJsyPJrtTw+D
eAsMIdZU+RV9fyOU8DkjVQ6WZ1rlMmwEvi7qBYj6UJqrX7U3RdB63fAvGYbQ4SKF
Ih95ZayUocz+QqWUqQFFtMlh4HDIWTk/qlmOnFrWrom+
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org