Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f34382d3438203d3e203238343335.roa
File:                     323830363a3336363a3a2f34382d3438203d3e203238343335.roa (raw, json)
Hash identifier:          4Mz2pCsCMsjo76M2BqSsihKKt3fue4AFAPREZ355rrM=
Subject key identifier:   9F:3A:C2:5D:88:BC:58:3A:36:65:16:77:82:E3:3C:D0:C2:F9:7B:90
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       42EB0E587C954A46CD9FC2A75DBAFC5B64B44302
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f34382d3438203d3e203238343335.roa
Signing time:             Tue 05 Mar 2024 18:12:44 +0000
ROA not before:           Tue 05 Mar 2024 18:07:44 +0000
ROA not after:            Tue 04 Mar 2025 18:12:44 +0000
asID:                     28435
IP address blocks:        2806:366::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:eb:0e:58:7c:95:4a:46:cd:9f:c2:a7:5d:ba:fc:5b:64:b4:43:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Mar  5 18:07:44 2024 GMT
            Not After : Mar  4 18:12:44 2025 GMT
        Subject: CN=9F3AC25D88BC583A3665167782E33CD0C2F97B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:08:85:ff:1a:48:37:70:4d:18:e6:14:62:
                    3c:53:59:7f:8c:07:1c:0a:22:39:c5:76:8e:62:05:
                    6c:6a:f7:03:fe:df:75:71:4f:b5:3e:7a:d8:ea:46:
                    34:b2:92:54:fe:a3:b5:b8:fc:1a:68:d2:12:61:f2:
                    1f:eb:d4:61:ed:5c:69:6a:17:22:68:6a:d3:a4:26:
                    db:05:4c:29:a6:5e:23:e9:8b:11:70:3a:28:5b:b4:
                    ce:46:2e:e6:b6:54:6f:87:8f:24:b1:d6:60:db:f1:
                    d8:eb:4a:7b:43:5c:e4:84:d3:4f:42:84:46:6f:47:
                    b6:d8:dc:8d:ba:28:9e:fa:86:be:72:ae:6c:3e:16:
                    83:b6:e9:f4:b9:eb:57:4a:91:52:dd:35:32:ca:4c:
                    8f:56:89:9e:77:9c:64:10:f3:8f:8f:d8:f5:5c:ef:
                    8b:9d:47:26:8a:7b:3e:79:96:93:ba:6c:14:c3:9e:
                    04:43:bf:f5:4c:73:3c:5b:74:bb:2e:e6:67:58:80:
                    83:9d:f6:7d:38:99:95:9d:49:15:7c:4d:08:47:31:
                    a3:9a:27:13:9c:8a:6a:26:cb:c2:74:a9:ff:d3:2b:
                    3a:b0:7b:86:30:22:2a:f6:80:af:82:7d:d2:c6:e7:
                    c0:7a:4f:59:16:a9:9b:eb:68:93:43:c5:1a:24:36:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3A:C2:5D:88:BC:58:3A:36:65:16:77:82:E3:3C:D0:C2:F9:7B:90
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f34382d3438203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:366::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:77:5a:a5:08:6e:2b:0e:b1:ba:f1:e6:5b:33:2c:11:9f:d4:
         35:4a:43:05:25:d3:3f:f9:f2:5d:20:c8:5d:7d:bf:e8:22:e5:
         1f:b5:92:c9:28:35:04:d7:11:df:bb:7a:3d:04:85:bc:00:27:
         73:3c:cf:9b:f7:90:81:4d:3b:c6:8e:9f:61:e6:fa:00:11:31:
         a4:d8:fc:07:4b:c1:51:32:42:d8:b3:8d:17:ed:28:f6:ef:3e:
         51:d6:dc:70:87:18:c4:f6:e2:94:a8:3c:0d:76:47:06:7b:4a:
         96:63:c3:85:c1:80:94:47:05:95:23:70:34:3a:58:9f:e6:76:
         10:9a:26:0a:f7:b5:18:18:2c:c6:3b:36:25:1f:16:08:b1:a0:
         03:e8:47:b8:a3:bb:e6:f3:3c:6f:83:55:ec:d9:49:ee:c9:24:
         f9:7f:9f:75:5e:b9:eb:7d:14:01:46:be:9e:6c:af:7e:0d:53:
         85:8a:cb:06:d4:7b:bc:03:21:c3:2d:7a:10:35:31:50:08:ee:
         32:ca:d2:00:2b:61:9f:1f:f0:3a:49:9b:2b:70:60:9e:94:7e:
         98:6f:fb:e4:00:26:f0:9d:28:d6:92:c4:4a:c9:d5:d6:83:4b:
         f7:86:b1:72:9c:c4:29:87:cd:8e:8b:65:fd:9f:b8:97:54:13:
         b8:22:dc:f9
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUQusOWHyVSkbNn8KnXbr8W2S0QwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxNkYzNjdCQzE5MzRCQkNCNEE0MjI5M0Y4QzRBQkQ2
RUNFQkFFMDAeFw0yNDAzMDUxODA3NDRaFw0yNTAzMDQxODEyNDRaMDMxMTAvBgNV
BAMTKDlGM0FDMjVEODhCQzU4M0EzNjY1MTY3NzgyRTMzQ0QwQzJGOTdCOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4QiF/xpIN3BNGOYUYjxTWX+M
BxwKIjnFdo5iBWxq9wP+33VxT7U+etjqRjSyklT+o7W4/Bpo0hJh8h/r1GHtXGlq
FyJoatOkJtsFTCmmXiPpixFwOihbtM5GLua2VG+HjySx1mDb8djrSntDXOSE009C
hEZvR7bY3I26KJ76hr5yrmw+FoO26fS561dKkVLdNTLKTI9WiZ53nGQQ84+P2PVc
74udRyaKez55lpO6bBTDngRDv/VMczxbdLsu5mdYgIOd9n04mZWdSRV8TQhHMaOa
JxOcimomy8J0qf/TKzqwe4YwIir2gK+CfdLG58B6T1kWqZvraJNDxRokNqwjAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUnzrCXYi8WDo2ZRZ3guM80ML5e5AwHwYDVR0j
BBgwFoAUlhbzZ7wZNLvLSkIpP4xKvW7OuuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUFFQ0Y3MTY4RDJCN0IyNzMzOUUyNzEzNzVGRTQ5RjAy
RjU4MTQwNzU1MEQ5OTIyNTcyMjM1NEQwMUREMTlGLzAvOTYxNkYzNjdCQzE5MzRC
QkNCNEE0MjI5M0Y4QzRBQkQ2RUNFQkFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjE2RjM2N0JDMTkzNEJCQ0I0
QTQyMjkzRjhDNEFCRDZFQ0VCQUUwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVBRUNGNzE2OEQyQjdCMjczMzlFMjcxMzc1RkU0OUYwMkY1ODE0MDc1
NTBEOTkyMjU3MjIzNTREMDFERDE5Ri8wLzMyMzgzMDM2M2EzMzM2MzYzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM4MzQzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAYDZgAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCOd1qlCG4rDrG68eZbMywRn9Q1SkMFJdM/+fJdIMhd
fb/oIuUftZLJKDUE1xHfu3o9BIW8ACdzPM+b95CBTTvGjp9h5voAETGk2PwHS8FR
MkLYs40X7Sj27z5R1txwhxjE9uKUqDwNdkcGe0qWY8OFwYCURwWVI3A0Olif5nYQ
miYK97UYGCzGOzYlHxYIsaAD6Ee4o7vm8zxvg1Xs2UnuyST5f591XrnrfRQBRr6e
bK9+DVOFissG1Hu8AyHDLXoQNTFQCO4yytIAK2GfH/A6SZsrcGCelH6Yb/vkACbw
nSjWksRKydXWg0v3hrFynMQph82Oi2X9n7iXVBO4Itz5
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org