Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33362d3339203d3e20323637383331.roa
File:                     323830333a383436303a333030303a3a2f33362d3339203d3e20323637383331.roa (raw, json)
Hash identifier:          s/zJlDUi0JCCQlz/nWVKaL85iK32+/6C9l6ZNVHvcxU=
Subject key identifier:   BE:AF:E2:40:62:96:16:17:83:B2:34:75:76:2B:5A:B1:45:B2:F8:34
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       7C3DFE516F95A03EBD522F25B471B2CB6B0F8727
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33362d3339203d3e20323637383331.roa
Signing time:             Wed 14 Aug 2024 04:15:00 +0000
ROA not before:           Wed 14 Aug 2024 04:10:00 +0000
ROA not after:            Wed 13 Aug 2025 04:15:00 +0000
asID:                     267831
IP address blocks:        2803:8460:3000::/36 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3d:fe:51:6f:95:a0:3e:bd:52:2f:25:b4:71:b2:cb:6b:0f:87:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Aug 14 04:10:00 2024 GMT
            Not After : Aug 13 04:15:00 2025 GMT
        Subject: CN=BEAFE2406296161783B23475762B5AB145B2F834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:fb:4e:5a:c3:f9:9b:b5:d6:3a:fb:c9:c2:
                    55:78:c4:2f:1a:f7:9e:7f:b5:99:53:ec:c3:01:1a:
                    31:81:75:0e:0d:d6:4e:b8:7e:8f:78:4c:c3:5a:63:
                    bf:d0:c7:06:14:2e:99:58:09:b0:f2:a0:de:0f:d7:
                    16:27:66:f7:2a:7c:d4:eb:24:0c:f9:c9:e5:f8:e7:
                    67:e5:ca:e5:f1:ea:31:d7:39:f0:36:c8:84:cb:93:
                    2c:e3:80:a4:6c:16:46:75:18:a1:c1:a3:f7:6d:f5:
                    03:99:a3:06:b8:da:09:48:cc:40:32:fc:41:8f:ca:
                    1d:02:4d:ca:bc:e8:ce:ed:f6:eb:ca:98:a8:72:76:
                    e4:52:a8:2a:03:5b:15:3a:76:e1:c3:65:b4:fd:e6:
                    8a:42:4d:d1:8e:76:5d:d7:15:a4:97:3b:a4:e1:0e:
                    64:3a:b8:18:a5:4a:88:da:0e:a7:17:e4:c6:38:b6:
                    95:ca:20:70:50:c8:0f:0c:8f:70:64:4f:79:8f:23:
                    68:53:1b:d3:bd:bc:e0:42:10:af:0d:95:da:1a:3a:
                    d8:c6:a5:5a:fc:12:51:ed:7c:95:fe:4a:9b:c6:71:
                    d0:7b:6c:2c:57:8d:5d:0b:56:12:44:39:a2:70:ae:
                    17:f3:1b:7f:f0:73:4b:2a:d1:b9:31:84:82:e0:5c:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:E2:40:62:96:16:17:83:B2:34:75:76:2B:5A:B1:45:B2:F8:34
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33362d3339203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:c4:c7:43:39:f6:b1:e3:d2:a4:c9:0f:fc:40:f6:80:17:d5:
         ba:6d:fe:77:e5:a5:3e:9e:e6:60:21:c4:ca:f5:97:0c:44:b7:
         4b:58:de:ac:5a:6c:b4:2f:34:cf:a0:ab:8b:ff:4b:d7:b3:c4:
         79:7b:a5:ca:e0:8a:47:69:36:65:ed:ac:7f:3e:95:e9:0a:8e:
         dd:23:16:cb:ff:c6:93:f5:ea:fb:54:fa:68:6d:58:12:0e:5b:
         11:0d:9d:4d:6e:7f:4d:87:20:28:a0:14:12:7c:29:23:ea:57:
         02:f1:7d:33:ab:bd:65:a4:b8:be:d2:7a:93:a7:39:2d:8e:e8:
         7c:5f:62:15:64:be:24:97:84:04:44:5c:e5:11:50:20:d9:87:
         50:9f:7f:86:2d:1a:5c:25:fe:a6:0c:8b:ad:01:f9:ff:ee:d6:
         84:ee:a7:a0:6e:90:b5:82:20:f8:42:e6:ac:d5:cf:d4:d2:da:
         d6:5b:7d:72:26:48:9a:a6:a4:5a:ee:79:c0:c1:14:51:d6:56:
         b6:b1:6b:6a:bf:be:9f:4d:27:de:96:01:dc:a9:aa:ab:13:92:
         ad:66:a1:1c:5c:51:6a:42:3d:8a:00:c0:20:a6:50:21:26:7c:
         5f:dc:ef:1b:0c:0e:e3:ef:fc:bc:9e:71:33:e6:71:01:f8:01:
         69:0f:dc:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org