Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31323a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a31323a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          1M+9NlOdTNUQl0LBeyGIIrq++Xj8fM8UdbSNwR0npDQ=
Subject key identifier:   F9:77:1E:10:3D:03:09:39:37:EA:DE:AF:C4:19:F3:A0:B5:FC:30:F9
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       4B4BFBA71B8107637088B80BE851673C7FBC2F20
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31323a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 04 Feb 2025 18:24:27 +0000
ROA not before:           Tue 04 Feb 2025 18:19:27 +0000
ROA not after:            Tue 03 Feb 2026 18:24:27 +0000
asID:                     52458
IP address blocks:        2803:480:12::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4b:fb:a7:1b:81:07:63:70:88:b8:0b:e8:51:67:3c:7f:bc:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Feb  4 18:19:27 2025 GMT
            Not After : Feb  3 18:24:27 2026 GMT
        Subject: CN=F9771E103D03093937EADEAFC419F3A0B5FC30F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:01:05:91:1d:9a:7a:24:de:2e:42:d1:30:56:
                    f9:95:4a:02:eb:30:04:bd:4c:93:59:db:36:76:7d:
                    17:29:42:19:db:95:fe:04:ec:da:86:27:0f:64:79:
                    e3:41:0e:f3:a9:d5:ee:d4:82:1e:ef:3e:73:9b:18:
                    3f:60:50:a0:86:9a:f9:2c:c9:55:df:63:9f:c2:7e:
                    35:e6:fb:3a:de:eb:cf:c5:26:1a:52:3b:f8:bb:77:
                    aa:87:1f:e2:43:56:51:3d:66:eb:04:0d:9a:85:34:
                    02:11:74:df:66:ca:23:cd:7e:a5:0f:6f:67:a6:9f:
                    5c:5a:da:b8:68:4f:84:cb:cd:7f:ab:42:9a:5d:73:
                    22:75:e5:e3:c7:09:44:00:74:72:92:63:97:b3:2e:
                    75:14:65:8c:cb:83:ed:f3:ed:f6:dc:02:54:67:d7:
                    48:97:28:d7:ad:07:f3:0b:e1:d9:19:6e:00:ed:5b:
                    95:a6:91:bf:d6:de:0f:8d:02:c9:59:bc:b9:cf:c3:
                    91:42:2b:29:ed:2a:7b:78:76:76:2b:66:17:d3:3f:
                    f1:1f:42:91:de:99:dd:e6:9c:b0:48:df:dd:02:89:
                    f3:4f:60:12:1c:2c:78:16:93:b9:a7:2f:fb:c4:db:
                    c8:a7:60:33:e8:4b:29:c2:7d:d9:10:0a:bf:5b:8e:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:1E:10:3D:03:09:39:37:EA:DE:AF:C4:19:F3:A0:B5:FC:30:F9
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31323a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:12::/64

    Signature Algorithm: sha256WithRSAEncryption
         87:9b:82:6b:88:67:04:38:e5:1c:ba:84:0c:e1:d5:db:c0:9d:
         62:77:1a:90:1e:53:8e:75:3a:92:73:7b:9b:2b:8e:14:7c:24:
         87:38:6f:52:27:9c:4b:7f:e0:8a:1a:9b:53:6f:c9:a6:0c:d3:
         50:24:76:8c:16:b2:6c:69:1f:1f:8f:d9:7b:39:f0:06:fe:48:
         79:af:3a:f1:f3:0b:9d:d7:45:00:66:e8:5e:ea:c1:30:39:6a:
         76:96:a4:49:21:56:55:1f:16:76:27:ee:fd:51:32:59:18:a2:
         3c:a7:81:89:30:8f:3a:e2:9a:35:e3:4c:9b:f7:5b:2f:58:3e:
         dd:36:4e:e7:b5:d5:7f:41:31:80:c8:91:7d:e9:ba:fb:6c:34:
         58:05:07:d2:70:cb:14:a3:ac:ae:7a:f9:6c:f8:92:3a:89:91:
         5f:60:f4:58:78:c8:e3:19:8c:a3:5b:9e:bd:e1:52:9f:e1:03:
         bf:b7:d1:64:ef:b1:b1:35:43:b7:77:b5:2a:06:e0:00:9b:f5:
         07:49:7b:38:e3:87:df:5e:00:d8:b1:a8:57:cc:c1:25:81:a1:
         15:b9:28:c2:7c:8c:5b:52:32:ff:57:f6:bc:ae:e8:ea:71:b5:
         8c:fc:b2:76:2b:5a:fc:dd:88:b8:fc:08:1e:1e:8e:a3:49:fc:
         3a:38:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:25 2025 by rpki-client