Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31313a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a31313a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          C7RTmJ+K0ERk2iB2O0eAN4eiI/Jdgc0eS1k3e2C678E=
Subject key identifier:   71:71:AB:A2:07:1F:75:A6:59:8F:20:E4:7A:67:DE:A2:B9:28:7E:FD
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       5C81A27B098F58282648C77B02005FD5C919C99A
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31313a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:10 +0000
ROA not before:           Tue 05 Mar 2024 17:50:10 +0000
ROA not after:            Tue 04 Mar 2025 17:55:10 +0000
asID:                     52458
IP address blocks:        2803:480:11::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:81:a2:7b:09:8f:58:28:26:48:c7:7b:02:00:5f:d5:c9:19:c9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:10 2024 GMT
            Not After : Mar  4 17:55:10 2025 GMT
        Subject: CN=7171ABA2071F75A6598F20E47A67DEA2B9287EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:87:b7:31:96:72:23:9e:9c:a3:f5:97:00:
                    e9:52:34:f8:d5:ba:45:c0:2d:0c:29:f7:84:2e:23:
                    ab:b6:b8:03:d2:88:da:aa:3e:88:2e:ea:80:d4:a3:
                    03:04:0d:69:16:ba:b3:64:e6:31:52:73:9e:cd:6e:
                    fd:09:d5:39:17:c2:85:af:2c:c0:61:fc:25:1b:de:
                    b9:0e:9c:97:9a:60:17:83:9a:e7:20:5e:96:1c:ae:
                    46:d2:c1:81:48:3c:95:f6:45:79:9e:19:1c:db:51:
                    29:cc:00:af:36:3c:bd:3f:72:4e:07:c0:1c:69:59:
                    88:b8:2e:0b:3b:d3:8a:ad:96:b6:18:7e:f7:f9:e7:
                    cd:2f:6a:0c:fb:3a:8c:a8:26:5b:9d:f6:49:b7:95:
                    05:9e:82:05:6c:bf:0d:84:cd:14:6a:fa:e6:a1:ff:
                    b3:32:36:c9:c5:a4:de:dd:d8:c9:0c:d1:5c:8d:e7:
                    d4:6a:08:c0:f8:21:ca:98:8f:56:07:f7:2d:20:e0:
                    2f:c1:76:b9:a1:07:91:05:02:80:0d:9d:f0:08:b7:
                    19:04:e4:88:85:6c:70:0c:70:9f:7b:09:99:61:73:
                    7b:80:a5:d6:cf:e6:da:d7:94:5a:5f:b1:53:61:22:
                    c6:57:99:c1:b6:46:f1:6e:c0:e6:41:7b:5f:94:0e:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:71:AB:A2:07:1F:75:A6:59:8F:20:E4:7A:67:DE:A2:B9:28:7E:FD
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31313a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:11::/64

    Signature Algorithm: sha256WithRSAEncryption
         53:65:98:38:92:42:4b:88:e2:d7:0f:c2:aa:ef:85:0d:0c:d8:
         52:b1:49:81:49:c9:c8:69:df:73:ce:73:d0:6f:84:aa:65:00:
         a0:69:de:69:99:b2:4d:71:9d:dd:94:49:d7:b8:c1:b5:08:32:
         27:b4:a9:13:8c:9e:d6:38:62:c3:93:fc:9c:ca:33:29:5e:d1:
         9c:62:38:a3:6b:9e:5d:66:40:61:dd:77:fa:47:4c:7b:6a:f3:
         19:86:d0:8c:50:fa:0f:4b:20:f0:b2:90:6e:e2:f6:b8:47:64:
         01:ad:01:87:96:bc:da:a9:0c:59:24:51:88:75:8a:bf:17:e6:
         48:bd:8f:47:08:0d:c3:80:e0:25:2d:07:ab:55:f7:99:34:e2:
         2c:db:19:ce:94:f9:87:98:b2:73:16:b4:9c:89:78:a5:da:e5:
         e3:a1:83:f2:63:c6:cd:7f:c1:39:d7:74:db:db:b6:5b:46:93:
         15:b1:e9:2e:ec:76:d8:ad:79:6a:76:ec:b6:34:06:8b:2d:bd:
         4b:0c:30:84:2c:40:27:76:7c:61:cf:f0:12:6e:0d:24:7a:dc:
         7a:1e:39:89:1c:ab:08:2f:cf:75:4e:b7:66:61:67:d3:58:2a:
         6a:ff:4d:7c:e0:85:77:2e:ae:dc:98:a5:68:32:81:f2:8d:ac:
         28:26:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org