Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a323030303a3a2f33362d3336203d3e20323637383331.roa
File:                     323830333a383436303a323030303a3a2f33362d3336203d3e20323637383331.roa (raw, json)
Hash identifier:          LhuV6wawv7F4I4Jjf2/FeezqVSxtgkTbBscJJNkBXFY=
Subject key identifier:   5A:CF:1E:C4:32:E5:E3:85:42:54:3E:79:34:94:27:10:FE:D9:45:48
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       24DEEF6E5332966C74E5ED3099D37F01B873E040
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a323030303a3a2f33362d3336203d3e20323637383331.roa
Signing time:             Tue 04 Feb 2025 20:01:16 +0000
ROA not before:           Tue 04 Feb 2025 19:56:16 +0000
ROA not after:            Tue 03 Feb 2026 20:01:16 +0000
asID:                     267831
IP address blocks:        2803:8460:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 15:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:de:ef:6e:53:32:96:6c:74:e5:ed:30:99:d3:7f:01:b8:73:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Feb  4 19:56:16 2025 GMT
            Not After : Feb  3 20:01:16 2026 GMT
        Subject: CN=5ACF1EC432E5E38542543E7934942710FED94548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:39:d5:81:db:58:82:9d:82:96:a9:0f:e8:
                    8f:46:c0:50:6f:08:27:21:54:7a:42:df:c4:b5:40:
                    10:b3:20:a4:18:e4:4b:c7:6e:4c:04:6a:8d:fc:6b:
                    c8:54:29:2a:03:74:d1:53:b9:79:e1:a2:e5:8b:fc:
                    00:64:e3:4a:67:b4:1f:3f:ae:0c:f0:44:02:53:0e:
                    3b:bc:84:60:4a:83:a3:9f:9e:af:a5:3f:11:5a:2b:
                    d8:fd:a2:5e:9a:f1:1e:2d:40:3a:b5:8d:c6:67:13:
                    d2:43:f2:a8:17:95:bd:67:e9:01:a1:44:c2:b4:33:
                    c6:6e:9d:53:00:6c:5a:82:f7:d3:67:7c:2d:7c:07:
                    b8:b4:af:66:65:b6:3e:52:b6:eb:b5:ef:67:5c:66:
                    66:00:1d:d5:34:df:39:27:ff:94:7f:39:f0:3f:2c:
                    ef:d2:89:d6:bd:cc:17:11:bb:b0:b6:d0:99:5e:e2:
                    40:4c:6a:cd:50:40:83:6f:3f:a8:a6:1d:7d:0f:2c:
                    8f:51:13:3e:7d:a4:03:9c:6b:8b:01:7c:9f:4f:48:
                    a3:f4:d3:1e:0a:d3:67:52:fa:60:3e:9f:d0:01:04:
                    a2:ac:73:ac:67:54:af:97:f3:a8:c1:35:67:d6:57:
                    a2:c9:c9:86:d4:75:b2:f3:3e:3b:01:88:9c:bf:53:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:1E:C4:32:E5:E3:85:42:54:3E:79:34:94:27:10:FE:D9:45:48
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a323030303a3a2f33362d3336203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:7a:a2:1a:f0:30:87:32:ef:b9:05:0b:27:55:4f:1a:60:9e:
         9a:f1:f0:81:5b:18:b7:d7:09:ac:f7:c1:c2:24:f8:9a:7b:37:
         55:0a:bd:0a:78:d9:1c:0a:42:8d:89:4c:83:13:82:60:ed:2e:
         77:9e:18:42:82:e1:3d:03:eb:ad:8f:20:2f:56:dd:0c:f5:9b:
         c8:2f:b5:b1:e4:61:77:84:8f:03:1f:ca:bc:3c:0f:f4:22:9b:
         20:15:e2:4b:de:94:a1:f1:0a:05:6a:20:36:31:09:41:8f:2a:
         d0:81:ba:ba:c0:55:97:83:79:4b:f3:cf:85:15:78:19:c0:63:
         2a:77:9f:14:0c:25:2c:e5:b3:fe:1c:88:2e:f1:d3:5a:b1:7a:
         35:c0:69:97:fe:c6:87:3c:97:79:b1:15:03:73:a6:75:0e:c7:
         a8:77:96:32:51:09:c9:7a:de:30:27:45:56:d7:60:82:fc:8e:
         ce:27:de:4d:78:68:ae:96:73:12:0d:96:fa:63:eb:2a:b8:d6:
         58:70:e3:ab:90:01:b8:e7:03:26:b5:95:eb:64:8c:52:48:6a:
         f8:56:ec:45:cc:26:fa:9f:e9:c5:08:16:26:56:cb:48:50:5b:
         2c:2f:08:a1:74:ce:dc:b9:30:d4:b9:25:22:f4:e1:0e:6c:fa:
         6c:08:4f:95
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUJN7vblMylmx05e0wmdN/Abhz4EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBFN0YxQ0I0QzFCRjdBMzIwMUFCQzg3ODg1MzE2OUNC
Q0U2MDA3QTAeFw0yNTAyMDQxOTU2MTZaFw0yNjAyMDMyMDAxMTZaMDMxMTAvBgNV
BAMTKDVBQ0YxRUM0MzJFNUUzODU0MjU0M0U3OTM0OTQyNzEwRkVEOTQ1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqznVgdtYgp2ClqkP6I9GwFBv
CCchVHpC38S1QBCzIKQY5EvHbkwEao38a8hUKSoDdNFTuXnhouWL/ABk40pntB8/
rgzwRAJTDju8hGBKg6Ofnq+lPxFaK9j9ol6a8R4tQDq1jcZnE9JD8qgXlb1n6QGh
RMK0M8ZunVMAbFqC99NnfC18B7i0r2Zltj5Stuu172dcZmYAHdU03zkn/5R/OfA/
LO/Sida9zBcRu7C20Jle4kBMas1QQINvP6imHX0PLI9REz59pAOca4sBfJ9PSKP0
0x4K02dS+mA+n9ABBKKsc6xnVK+X86jBNWfWV6LJyYbUdbLzPjsBiJy/U53FAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUWs8exDLl44VCVD55NJQnEP7ZRUgwHwYDVR0j
BBgwFoAUgOfxy0wb96MgGryHiFMWnLzmAHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTVGOTdGMTFBQkVENzU5RjY5NEI1Nzc1MUIyMzlGQ0Uz
OUVCMEVDOTdCMzg3OTcyQTcyMzA5RTUyMDlBRUU0LzAvODBFN0YxQ0I0QzFCRjdB
MzIwMUFCQzg3ODg1MzE2OUNCQ0U2MDA3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEU3RjFDQjRDMUJGN0EzMjAx
QUJDODc4ODUzMTY5Q0JDRTYwMDdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzk1Rjk3RjExQUJFRDc1OUY2OTRCNTc3NTFCMjM5RkNFMzlFQjBFQzk3
QjM4Nzk3MkE3MjMwOUU1MjA5QUVFNC8wLzMyMzgzMDMzM2EzODM0MzYzMDNhMzIz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA4RgIDANBgkqhkiG9w0BAQsFAAOCAQEAI3qiGvAwhzLvuQULJ1VPGmCe
mvHwgVsYt9cJrPfBwiT4mns3VQq9CnjZHApCjYlMgxOCYO0ud54YQoLhPQPrrY8g
L1bdDPWbyC+1seRhd4SPAx/KvDwP9CKbIBXiS96UofEKBWogNjEJQY8q0IG6usBV
l4N5S/PPhRV4GcBjKnefFAwlLOWz/hyILvHTWrF6NcBpl/7GhzyXebEVA3OmdQ7H
qHeWMlEJyXreMCdFVtdggvyOzifeTXhorpZzEg2W+mPrKrjWWHDjq5ABuOcDJrWV
62SMUkhq+FbsRcwm+p/pxQgWJlbLSFBbLC8IoXTO3Lkw1LklIvThDmz6bAhPlQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:29 2025 by rpki-client