Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a3a2f33362d3336203d3e20323637383331.roa
File:                     323830333a383436303a3a2f33362d3336203d3e20323637383331.roa (raw, json)
Hash identifier:          KHog0FZzyvKU3tlq72ZrE3S3i/8U3JpnF6kKXrJQkk0=
Subject key identifier:   4C:63:42:C9:66:BE:51:70:12:71:2D:49:D1:8F:F8:11:A9:B9:AB:8B
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       245337ADF7F9E80D29AC9AA4BE6A99566A4DD20D
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a3a2f33362d3336203d3e20323637383331.roa
Signing time:             Tue 05 Mar 2024 18:18:52 +0000
ROA not before:           Tue 05 Mar 2024 18:13:52 +0000
ROA not after:            Tue 04 Mar 2025 18:18:52 +0000
asID:                     267831
IP address blocks:        2803:8460::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:53:37:ad:f7:f9:e8:0d:29:ac:9a:a4:be:6a:99:56:6a:4d:d2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Mar  5 18:13:52 2024 GMT
            Not After : Mar  4 18:18:52 2025 GMT
        Subject: CN=4C6342C966BE517012712D49D18FF811A9B9AB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:93:d9:fa:52:16:a5:b8:c9:ed:46:43:3f:
                    b2:e9:19:15:f7:36:95:d0:ab:ef:e3:fa:b9:3b:94:
                    27:dd:f9:eb:28:1e:b1:79:02:05:98:aa:f0:dd:e8:
                    e2:45:53:8f:da:4b:89:0d:f5:c6:b4:0d:3f:9a:22:
                    89:ca:b8:d1:39:7d:d4:38:64:63:a7:b4:f8:16:00:
                    e5:e8:72:1e:56:56:75:35:8e:15:6c:1f:3d:e4:49:
                    2b:b8:76:26:46:7b:46:1a:2f:39:22:a1:6a:ad:a1:
                    f6:86:aa:e8:e0:ba:8f:f2:28:7d:45:fb:2e:cc:fb:
                    d7:8d:11:81:24:dd:9b:4f:d2:60:75:40:f3:c9:aa:
                    5d:4e:ac:2c:22:f7:99:22:0b:49:8f:ff:c6:99:1e:
                    92:38:d7:5f:dc:07:a7:d4:45:fc:e9:88:cf:e1:d5:
                    51:46:0b:0b:31:56:cc:05:ce:9b:31:3e:c3:d3:7f:
                    da:a0:b0:46:38:be:49:68:f7:3e:2b:86:8e:69:2a:
                    9f:3e:a9:02:a9:4e:68:5f:93:bf:3d:ed:74:d0:cc:
                    af:98:34:e0:6c:93:26:d5:72:92:8f:e0:b8:ac:1b:
                    fd:05:26:5b:85:32:e9:3b:94:d1:5b:0d:85:3b:39:
                    90:29:49:2a:2f:3e:c2:47:81:a4:99:c3:a4:b0:64:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:63:42:C9:66:BE:51:70:12:71:2D:49:D1:8F:F8:11:A9:B9:AB:8B
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a3a2f33362d3336203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:fe:84:ab:b7:e7:fc:f2:a6:39:1b:98:0c:b7:c6:26:3d:
         f5:c8:4c:31:87:56:d6:be:b4:c2:0a:6a:80:50:12:58:61:59:
         82:70:be:34:84:8f:57:96:c5:b2:99:c3:ab:c7:29:48:e7:32:
         86:2e:6f:48:3f:f4:df:f4:2d:7a:a3:e3:57:96:3d:a5:07:ad:
         ef:17:e0:8c:5f:6c:da:9d:46:38:e7:a5:0e:ee:91:21:f0:77:
         6e:25:44:e6:7c:29:34:13:2a:e3:aa:c2:6f:51:24:5a:9a:89:
         9c:e2:22:db:fe:de:e3:68:f0:c3:87:5b:e8:be:65:e2:66:7f:
         d4:59:55:af:0c:c1:f6:88:a8:8f:94:e4:6a:42:ff:4c:cc:ba:
         93:76:ee:a8:6b:e3:a6:fe:84:72:bd:6a:b1:8d:0e:37:15:91:
         5c:5e:bf:39:d1:de:c2:57:d9:95:44:3a:71:17:03:cd:7d:c0:
         c4:74:ee:73:68:28:15:16:a7:ed:10:f7:58:e9:fb:00:7e:a1:
         71:4b:a5:8b:07:1e:d0:dc:fe:5a:ad:c4:5a:f1:8a:38:68:85:
         32:11:69:33:8b:1f:e2:ab:bd:69:34:f2:2b:ca:04:26:95:e5:
         5b:82:c2:bb:86:1e:d4:f0:fb:d4:cf:f0:d6:80:5f:56:83:14:
         8f:6b:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:44:08 2024 by rpki-client on console-ams.rpki-client.org