Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333630303a3a2f33392d3339203d3e20323637383331.roa
File:                     323830333a383436303a333630303a3a2f33392d3339203d3e20323637383331.roa (raw, json)
Hash identifier:          x5qKOG47gTFpz0ntrBXypTW4DFgYlFXmbSt8BLtUq3I=
Subject key identifier:   F2:80:78:C8:E8:22:F0:C5:45:AF:5A:0A:91:30:E7:1D:BA:CD:83:C9
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       5F1D9EF88E8FC54B824DF7764079405AF7E51FDF
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333630303a3a2f33392d3339203d3e20323637383331.roa
Signing time:             Tue 05 Mar 2024 18:18:51 +0000
ROA not before:           Tue 05 Mar 2024 18:13:51 +0000
ROA not after:            Tue 04 Mar 2025 18:18:51 +0000
asID:                     267831
IP address blocks:        2803:8460:3600::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1d:9e:f8:8e:8f:c5:4b:82:4d:f7:76:40:79:40:5a:f7:e5:1f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Mar  5 18:13:51 2024 GMT
            Not After : Mar  4 18:18:51 2025 GMT
        Subject: CN=F28078C8E822F0C545AF5A0A9130E71DBACD83C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:5d:bb:02:3d:58:21:4b:a5:7a:48:7a:8c:
                    e8:d8:63:20:9f:88:d5:0a:91:83:83:d4:18:bd:7c:
                    26:a9:b3:88:ba:c4:1a:20:df:c9:dd:89:70:16:62:
                    64:73:8a:04:5a:fd:04:b0:ed:ef:67:3e:ca:97:58:
                    79:6b:59:19:ee:84:b2:e9:e4:f9:70:87:e1:07:81:
                    37:45:6a:24:64:26:b7:9b:ee:69:90:72:9d:dc:49:
                    3f:0e:2d:cd:c4:2a:da:6e:8b:3e:fd:2a:e2:0a:3f:
                    96:e8:c4:b6:2e:80:a8:f2:6a:80:ec:ee:d9:3a:f9:
                    b2:d8:5d:c2:cc:d1:cc:a2:d4:93:d1:36:4d:8b:e8:
                    97:a9:96:ce:14:b6:49:26:4e:78:5e:bc:0f:b2:07:
                    ac:56:cb:0f:4e:50:99:d4:b7:c1:b6:c0:35:c1:93:
                    53:9c:42:e2:a6:c4:10:8a:08:36:ec:87:bd:0b:33:
                    4b:68:51:72:99:39:9e:08:8d:53:8b:63:01:74:14:
                    1e:72:04:2c:10:8d:c4:89:6c:c7:36:05:18:ee:98:
                    e6:1e:06:5f:2d:2a:79:91:82:10:80:49:82:15:a9:
                    aa:dd:38:75:78:43:a5:9c:a8:42:03:ce:95:db:39:
                    25:d8:fd:92:44:29:29:67:fd:5d:98:b5:aa:6e:d7:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:78:C8:E8:22:F0:C5:45:AF:5A:0A:91:30:E7:1D:BA:CD:83:C9
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333630303a3a2f33392d3339203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:3600::/39

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:46:0e:1e:51:e6:cb:4f:f4:ed:18:82:22:c1:f5:ee:ff:
         41:69:de:e4:1b:d3:cb:e5:38:5e:ee:ae:68:b0:54:d5:f0:19:
         b2:94:a9:66:8f:ab:86:53:15:b3:6f:77:81:9a:c0:7c:69:15:
         f6:f8:c5:f1:ed:d1:02:2e:56:e5:48:79:ca:09:58:81:13:96:
         3e:6d:a6:84:00:be:b5:bd:9d:93:31:b7:32:18:9c:55:61:a2:
         76:b2:bd:e7:5a:00:f1:02:7b:1d:dc:44:3c:4c:68:a6:05:23:
         ad:ca:1e:f3:09:64:6e:45:52:3d:2a:11:01:11:64:1c:b4:a0:
         3e:9f:56:e4:f9:85:8c:d7:ab:10:9f:c5:ab:5a:4e:cf:97:53:
         37:63:fd:38:1a:d4:88:38:68:ab:ad:0b:06:73:2f:23:18:4d:
         2d:e2:4d:a7:7f:a6:cf:82:a3:55:d9:f2:da:99:5f:6d:e7:2c:
         21:9c:b2:12:d1:c2:4e:8b:34:d7:19:a2:c9:42:50:3f:50:85:
         01:36:01:2b:cc:d8:7a:ae:a4:4e:b1:f7:47:51:a9:f0:f6:4f:
         ac:15:d4:8d:83:cb:7b:57:d8:0a:68:31:e4:be:3a:0e:c3:7b:
         bf:4e:3a:ca:f3:ce:d1:b3:50:61:2b:0d:33:c7:dc:d4:e8:77:
         a3:2d:76:ba
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUXx2e+I6PxUuCTfd2QHlAWvflH98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBFN0YxQ0I0QzFCRjdBMzIwMUFCQzg3ODg1MzE2OUNC
Q0U2MDA3QTAeFw0yNDAzMDUxODEzNTFaFw0yNTAzMDQxODE4NTFaMDMxMTAvBgNV
BAMTKEYyODA3OEM4RTgyMkYwQzU0NUFGNUEwQTkxMzBFNzFEQkFDRDgzQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66V27Aj1YIUulekh6jOjYYyCf
iNUKkYOD1Bi9fCaps4i6xBog38ndiXAWYmRzigRa/QSw7e9nPsqXWHlrWRnuhLLp
5Plwh+EHgTdFaiRkJreb7mmQcp3cST8OLc3EKtpuiz79KuIKP5boxLYugKjyaoDs
7tk6+bLYXcLM0cyi1JPRNk2L6Jepls4UtkkmTnhevA+yB6xWyw9OUJnUt8G2wDXB
k1OcQuKmxBCKCDbsh70LM0toUXKZOZ4IjVOLYwF0FB5yBCwQjcSJbMc2BRjumOYe
Bl8tKnmRghCASYIVqardOHV4Q6WcqEIDzpXbOSXY/ZJEKSln/V2Ytapu1yTHAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU8oB4yOgi8MVFr1oKkTDnHbrNg8kwHwYDVR0j
BBgwFoAUgOfxy0wb96MgGryHiFMWnLzmAHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTVGOTdGMTFBQkVENzU5RjY5NEI1Nzc1MUIyMzlGQ0Uz
OUVCMEVDOTdCMzg3OTcyQTcyMzA5RTUyMDlBRUU0LzAvODBFN0YxQ0I0QzFCRjdB
MzIwMUFCQzg3ODg1MzE2OUNCQ0U2MDA3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEU3RjFDQjRDMUJGN0EzMjAx
QUJDODc4ODUzMTY5Q0JDRTYwMDdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzk1Rjk3RjExQUJFRDc1OUY2OTRCNTc3NTFCMjM5RkNFMzlFQjBFQzk3
QjM4Nzk3MkE3MjMwOUU1MjA5QUVFNC8wLzMyMzgzMDMzM2EzODM0MzYzMDNhMzMz
NjMwMzAzYTNhMmYzMzM5MmQzMzM5MjAzZDNlMjAzMjM2MzczODMzMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEoA4RgNjANBgkqhkiG9w0BAQsFAAOCAQEAhcBGDh5R5stP9O0YgiLB9e7/
QWne5BvTy+U4Xu6uaLBU1fAZspSpZo+rhlMVs293gZrAfGkV9vjF8e3RAi5W5Uh5
yglYgROWPm2mhAC+tb2dkzG3MhicVWGidrK951oA8QJ7HdxEPExopgUjrcoe8wlk
bkVSPSoRARFkHLSgPp9W5PmFjNerEJ/Fq1pOz5dTN2P9OBrUiDhoq60LBnMvIxhN
LeJNp3+mz4KjVdny2plfbecsIZyyEtHCTos01xmiyUJQP1CFATYBK8zYeq6kTrH3
R1Gp8PZPrBXUjYPLe1fYCmgx5L46DsN7v046yvPO0bNQYSsNM8fc1Oh3oy12ug==
-----END CERTIFICATE-----
Generated at Wed May 15 01:41:55 2024 by rpki-client on console-ams.rpki-client.org