Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a336330303a3a2f33392d3339203d3e20323637383331.roa
File:                     323830333a383436303a336330303a3a2f33392d3339203d3e20323637383331.roa (raw, json)
Hash identifier:          NlKFTyktUI5DcGXVOcsr5QgkqDGoukSIVfz+SMBZhZw=
Subject key identifier:   BF:01:69:AF:63:40:02:B2:B2:51:BF:5C:62:44:BB:8C:8F:5E:75:82
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       5F293023B910C1AD1A3B01B9CEB4536B591C6B95
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a336330303a3a2f33392d3339203d3e20323637383331.roa
Signing time:             Tue 05 Mar 2024 18:18:53 +0000
ROA not before:           Tue 05 Mar 2024 18:13:53 +0000
ROA not after:            Tue 04 Mar 2025 18:18:53 +0000
asID:                     267831
IP address blocks:        2803:8460:3c00::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:29:30:23:b9:10:c1:ad:1a:3b:01:b9:ce:b4:53:6b:59:1c:6b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Mar  5 18:13:53 2024 GMT
            Not After : Mar  4 18:18:53 2025 GMT
        Subject: CN=BF0169AF634002B2B251BF5C6244BB8C8F5E7582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5a:60:76:d1:52:fc:28:5c:1d:2c:49:62:d8:
                    d1:0b:ef:bc:8e:39:92:5a:c6:b0:a4:ce:05:80:a7:
                    a3:7f:a2:0b:33:44:3f:d9:4a:a5:dd:a2:cc:31:2d:
                    85:bb:60:a9:5e:b3:b1:8d:17:77:5a:99:c0:74:a1:
                    d8:9a:ca:57:f5:ae:cf:a2:d1:a4:b0:91:b7:28:fd:
                    36:9c:7b:ba:72:c2:8a:60:2f:11:95:4a:b2:2c:35:
                    5a:68:72:97:eb:52:7d:2c:59:16:1f:f1:08:be:f8:
                    d5:92:1f:82:e6:38:ae:55:54:1f:80:75:03:d8:b2:
                    6f:d0:db:52:c3:8f:53:13:f4:bb:98:8e:cc:20:3f:
                    67:23:ef:91:42:56:d0:41:7c:4c:16:29:7e:52:b3:
                    fb:6b:de:a2:8e:9c:9c:ab:db:79:10:ee:c8:bf:66:
                    6d:25:ec:fe:bb:08:a8:ff:60:c2:0b:a6:99:cf:d2:
                    77:df:c7:82:d9:38:be:ca:be:95:0b:25:0d:92:f3:
                    62:c7:c4:02:e8:16:f8:fa:59:28:dc:01:44:a9:f4:
                    40:07:1d:56:5b:2b:22:8c:51:9e:12:bb:cf:94:0a:
                    0f:25:c8:b0:7a:b8:52:59:61:e3:d7:a9:63:c4:d9:
                    2b:75:22:79:28:56:ed:11:6a:56:80:5e:d3:b1:6d:
                    1a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:01:69:AF:63:40:02:B2:B2:51:BF:5C:62:44:BB:8C:8F:5E:75:82
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a336330303a3a2f33392d3339203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:3c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         52:40:bc:89:30:2e:1c:8c:f9:03:b2:a0:90:ca:59:9b:60:40:
         bf:4b:4a:1f:32:3f:7b:11:d8:73:72:00:13:8d:af:53:00:ec:
         6b:42:6b:de:9e:df:52:12:5c:b9:30:ba:17:98:16:2c:54:5b:
         5e:50:12:bb:78:c7:30:30:71:6c:fb:db:b9:78:41:28:b8:3c:
         1b:0a:c6:b0:f6:6f:ad:e0:1b:91:68:7f:ff:5d:c3:c4:dd:38:
         56:b5:a6:fd:70:02:9e:b5:57:3d:69:aa:e7:97:05:6c:f0:72:
         b5:b5:e4:0a:68:bd:b7:6f:f4:f5:51:af:7a:e9:47:63:1a:6b:
         05:cf:06:65:11:de:a5:37:7f:1f:56:12:d2:ce:44:eb:a3:45:
         be:67:2d:b7:f8:63:60:3f:9b:92:7d:5c:f6:47:9b:1d:49:7f:
         0a:df:7c:99:33:47:40:d7:5b:0e:c8:cd:cd:bd:89:85:e7:08:
         09:71:6d:9c:ef:3d:47:7e:a3:b2:5c:e1:33:9e:d5:7b:60:0a:
         b0:aa:8a:a9:87:e3:05:38:3c:b6:c1:a6:eb:77:77:3c:fa:0a:
         4a:9a:3c:87:b4:0d:bc:6a:47:60:e8:b5:32:c1:5f:9d:d2:7f:
         71:d0:eb:4f:03:5c:b8:e9:80:97:14:7f:7f:ba:74:12:0f:2f:
         c0:ab:ae:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 17 04:44:08 2024 by rpki-client on console-ams.rpki-client.org