Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33392d3339203d3e20323637383331.roa
File:                     323830333a383436303a333030303a3a2f33392d3339203d3e20323637383331.roa (raw, json)
Hash identifier:          lt/xucqzQPI3DeOtGp7wivFFtf58mELwKjCYBJ3BbIg=
Subject key identifier:   16:28:0A:B9:AD:F3:2D:F6:D9:16:B1:53:93:27:A6:82:FC:58:86:4D
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       18BB04672D58C7E9FCCA3C8DEAFD4D58B9B6B44A
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33392d3339203d3e20323637383331.roa
Signing time:             Tue 05 Mar 2024 18:18:51 +0000
ROA not before:           Tue 05 Mar 2024 18:13:51 +0000
ROA not after:            Tue 04 Mar 2025 18:18:51 +0000
asID:                     267831
IP address blocks:        2803:8460:3000::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:04:67:2d:58:c7:e9:fc:ca:3c:8d:ea:fd:4d:58:b9:b6:b4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Mar  5 18:13:51 2024 GMT
            Not After : Mar  4 18:18:51 2025 GMT
        Subject: CN=16280AB9ADF32DF6D916B1539327A682FC58864D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:40:41:79:46:02:ab:75:f4:9b:75:24:74:
                    69:f9:c5:ce:56:02:b0:89:fd:41:21:49:77:48:f5:
                    fe:fd:e6:4c:1b:5b:92:f9:37:2c:5f:b5:28:7a:a4:
                    0d:5d:53:8f:ce:07:7e:41:c3:38:ea:20:40:d7:9b:
                    4a:f6:3c:2c:bc:07:f6:18:a3:8e:80:6f:fe:29:46:
                    2d:cb:66:d9:95:49:c6:64:63:56:57:82:20:97:e1:
                    82:7b:c8:d2:21:6c:5f:9f:0f:ca:d4:35:21:e6:82:
                    97:87:c8:ec:d3:f5:a0:b8:9e:0e:a6:0e:0b:80:6f:
                    c5:a8:92:dd:71:57:eb:ff:7d:e9:44:2e:1e:e6:81:
                    54:a9:67:81:6e:ef:01:0a:cb:0c:05:ce:f4:93:4e:
                    e1:06:05:4f:00:8b:ae:41:a4:dd:a2:1c:15:32:c0:
                    12:1a:02:45:f6:b0:81:19:69:91:8b:ee:b3:78:7a:
                    75:f4:e1:52:b7:b4:1c:da:89:c4:6b:11:9f:62:6d:
                    48:e7:06:70:2d:16:e1:a0:04:45:aa:82:98:85:8c:
                    31:7b:13:60:18:50:d8:37:ec:22:e6:8b:a1:7c:a8:
                    ee:a9:bb:4a:03:67:3d:4f:3a:fd:b8:c9:9e:c6:9b:
                    3c:23:f1:1b:1e:c4:d3:c1:d6:39:91:dd:63:e1:e2:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:28:0A:B9:AD:F3:2D:F6:D9:16:B1:53:93:27:A6:82:FC:58:86:4D
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33392d3339203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:3000::/39

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:66:2c:29:d2:e7:c5:17:a6:33:ba:df:0a:6f:41:f3:4c:
         1c:47:a0:24:10:c6:31:1a:74:7a:13:25:26:22:59:37:d7:98:
         3c:50:4e:92:18:a6:b4:d8:60:a7:20:9e:af:0b:46:ba:b5:dd:
         97:10:b0:8d:e7:40:5f:d3:6a:68:5e:54:9e:e4:eb:06:c6:3d:
         f5:73:10:23:4c:ba:8b:4d:be:4c:02:99:b4:87:4f:83:72:36:
         dd:2d:3c:2c:22:dd:73:10:3b:54:4e:96:f1:1f:90:e4:61:1f:
         42:05:33:11:dd:7a:92:1c:b9:ff:14:9a:67:c6:57:8b:c5:08:
         98:6f:18:f5:0a:67:8f:49:0f:5e:62:e3:cf:aa:41:20:c0:00:
         9d:ce:0f:12:20:3b:3b:34:9d:cc:78:dd:3e:e9:7f:13:e8:cc:
         f3:ac:68:1a:c2:7e:7b:cf:e7:46:db:6d:63:8a:09:dc:9a:0b:
         d6:6c:c7:36:96:2f:93:a3:ae:52:3b:1b:c6:30:17:09:c6:b8:
         c8:42:8c:cb:98:cb:4c:8e:b3:1c:f3:89:46:2a:88:8b:7d:5f:
         7d:4c:71:47:cf:1b:91:5a:f8:a7:ec:05:59:d7:63:4c:d5:5e:
         06:4d:c9:9b:58:a1:a7:87:dc:6b:b3:74:3b:6b:ac:61:d9:93:
         0f:99:55:78
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUGLsEZy1Yx+n8yjyN6v1NWLm2tEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBFN0YxQ0I0QzFCRjdBMzIwMUFCQzg3ODg1MzE2OUNC
Q0U2MDA3QTAeFw0yNDAzMDUxODEzNTFaFw0yNTAzMDQxODE4NTFaMDMxMTAvBgNV
BAMTKDE2MjgwQUI5QURGMzJERjZEOTE2QjE1MzkzMjdBNjgyRkM1ODg2NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgEBBeUYCq3X0m3UkdGn5xc5W
ArCJ/UEhSXdI9f795kwbW5L5NyxftSh6pA1dU4/OB35BwzjqIEDXm0r2PCy8B/YY
o46Ab/4pRi3LZtmVScZkY1ZXgiCX4YJ7yNIhbF+fD8rUNSHmgpeHyOzT9aC4ng6m
DguAb8Wokt1xV+v/felELh7mgVSpZ4Fu7wEKywwFzvSTTuEGBU8Ai65BpN2iHBUy
wBIaAkX2sIEZaZGL7rN4enX04VK3tBzaicRrEZ9ibUjnBnAtFuGgBEWqgpiFjDF7
E2AYUNg37CLmi6F8qO6pu0oDZz1POv24yZ7Gmzwj8RsexNPB1jmR3WPh4ppjAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUFigKua3zLfbZFrFTkyemgvxYhk0wHwYDVR0j
BBgwFoAUgOfxy0wb96MgGryHiFMWnLzmAHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTVGOTdGMTFBQkVENzU5RjY5NEI1Nzc1MUIyMzlGQ0Uz
OUVCMEVDOTdCMzg3OTcyQTcyMzA5RTUyMDlBRUU0LzAvODBFN0YxQ0I0QzFCRjdB
MzIwMUFCQzg3ODg1MzE2OUNCQ0U2MDA3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEU3RjFDQjRDMUJGN0EzMjAx
QUJDODc4ODUzMTY5Q0JDRTYwMDdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzk1Rjk3RjExQUJFRDc1OUY2OTRCNTc3NTFCMjM5RkNFMzlFQjBFQzk3
QjM4Nzk3MkE3MjMwOUU1MjA5QUVFNC8wLzMyMzgzMDMzM2EzODM0MzYzMDNhMzMz
MDMwMzAzYTNhMmYzMzM5MmQzMzM5MjAzZDNlMjAzMjM2MzczODMzMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEoA4RgMDANBgkqhkiG9w0BAQsFAAOCAQEAmmNmLCnS58UXpjO63wpvQfNM
HEegJBDGMRp0ehMlJiJZN9eYPFBOkhimtNhgpyCerwtGurXdlxCwjedAX9NqaF5U
nuTrBsY99XMQI0y6i02+TAKZtIdPg3I23S08LCLdcxA7VE6W8R+Q5GEfQgUzEd16
khy5/xSaZ8ZXi8UImG8Y9Qpnj0kPXmLjz6pBIMAAnc4PEiA7OzSdzHjdPul/E+jM
86xoGsJ+e8/nRtttY4oJ3JoL1mzHNpYvk6OuUjsbxjAXCca4yEKMy5jLTI6zHPOJ
RiqIi31ffUxxR88bkVr4p+wFWddjTNVeBk3Jm1ihp4fca7N0O2usYdmTD5lVeA==
-----END CERTIFICATE-----
Generated at Fri May 17 04:44:08 2024 by rpki-client on console-ams.rpki-client.org