Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a343030303a3a2f33362d3336203d3e20323637383331.roa
File:                     323830333a383436303a343030303a3a2f33362d3336203d3e20323637383331.roa (raw, json)
Hash identifier:          WLDtVjSVbpnUV6Zau3rIWV/ETHmjm4UE8SXuluK+1hw=
Subject key identifier:   D1:B6:AA:67:05:47:8F:D9:AD:6C:AB:B7:B5:33:DD:02:7D:48:86:BC
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       15FFE7E56C60C463DA57905081411831836FB421
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a343030303a3a2f33362d3336203d3e20323637383331.roa
Signing time:             Tue 05 Mar 2024 18:18:50 +0000
ROA not before:           Tue 05 Mar 2024 18:13:50 +0000
ROA not after:            Tue 04 Mar 2025 18:18:50 +0000
asID:                     267831
IP address blocks:        2803:8460:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ff:e7:e5:6c:60:c4:63:da:57:90:50:81:41:18:31:83:6f:b4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Mar  5 18:13:50 2024 GMT
            Not After : Mar  4 18:18:50 2025 GMT
        Subject: CN=D1B6AA6705478FD9AD6CABB7B533DD027D4886BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:c8:fb:f8:c7:5f:2c:5a:bb:62:1f:01:10:
                    e4:d0:8f:36:da:32:c3:8d:9d:00:cb:ea:a5:89:80:
                    38:a7:5b:11:8b:8f:7e:c8:6b:e4:67:81:54:76:b9:
                    b1:c0:b6:25:73:8f:1c:30:06:4c:eb:54:e7:9c:13:
                    f0:a1:94:12:6c:2b:76:0a:0e:9d:61:89:18:5d:d2:
                    30:fd:8a:b1:16:f9:e5:c5:51:50:fc:52:8b:18:bb:
                    ac:43:f3:d9:9d:2e:f0:00:ba:c2:b3:8f:4f:c6:62:
                    4a:cd:5d:2e:31:bc:5e:92:39:25:17:0e:e1:a2:19:
                    e7:7e:9e:4a:fc:a0:b7:41:a2:4f:2b:62:33:e9:4f:
                    74:56:8b:2a:88:31:3c:67:3d:b4:15:c0:1e:85:e9:
                    dc:3d:49:42:8d:d9:cb:22:5f:c8:39:d2:6a:6a:0c:
                    79:62:50:63:45:26:0e:f1:65:97:93:d4:58:a3:23:
                    9b:42:05:32:7e:51:23:c4:cc:87:c9:68:4e:10:60:
                    4d:dd:78:de:d5:4b:7e:4b:e9:0c:54:7b:1e:cf:cc:
                    3d:cd:4e:81:c3:30:ae:25:69:e3:16:97:86:cb:82:
                    62:7b:ac:41:16:c4:de:cd:68:3d:cd:f8:25:a9:7e:
                    ed:04:ef:71:5a:0b:78:64:a5:57:3c:d2:ea:ec:54:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B6:AA:67:05:47:8F:D9:AD:6C:AB:B7:B5:33:DD:02:7D:48:86:BC
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a343030303a3a2f33362d3336203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c1:ca:94:3c:a4:0e:e2:6a:a5:92:09:af:78:ab:92:87:1f:9b:
         09:8a:0f:f5:08:02:60:a6:dc:2d:5b:03:ca:2b:41:78:cb:06:
         69:a5:f9:3a:3d:37:1c:6a:25:0b:da:e9:c0:4e:3c:8f:38:23:
         f6:7c:f6:81:a0:9f:51:ea:6e:e1:2d:91:69:71:89:26:e7:49:
         b8:cc:58:f9:84:35:ed:58:72:e4:ce:e4:1e:6c:6f:7e:d8:55:
         36:94:78:90:44:57:b6:3d:1d:de:8b:ba:df:51:ac:bc:7b:e3:
         c6:cf:16:e2:32:b2:62:0f:cc:74:03:b9:84:fd:44:73:a3:0c:
         b3:22:91:90:b4:da:da:fc:83:1b:f9:30:00:29:89:ec:24:81:
         3d:ae:8e:d1:84:d9:ed:60:9a:07:49:a4:d4:d0:06:1f:a1:51:
         48:29:26:f8:5c:9d:18:8b:27:9b:58:55:af:dd:cc:b4:d1:29:
         85:aa:ce:66:47:61:70:7e:e2:08:2e:05:8c:e7:d6:ee:09:75:
         b4:bd:96:cc:c9:a6:83:72:6a:08:51:c3:39:70:86:fb:60:a8:
         a3:26:dd:86:b1:99:88:83:03:94:7b:ac:7c:26:5d:04:e9:a2:
         14:fd:70:cf:46:50:d9:45:61:8d:b3:97:df:3e:2c:e4:28:07:
         8e:1b:60:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org