Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31323a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a31323a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          74YfN3mHRgGoGa3tn6uBFYhHlkjxfMvwb0tmhUxFVA0=
Subject key identifier:   7A:8A:E4:AE:59:54:22:EC:48:B9:4F:0F:D4:95:8C:E6:74:63:26:A8
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       7BD5A05116AE2B23590B9BCA7A7904D2E18F122A
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31323a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:12 +0000
ROA not before:           Tue 05 Mar 2024 17:50:12 +0000
ROA not after:            Tue 04 Mar 2025 17:55:12 +0000
asID:                     52458
IP address blocks:        2803:480:12::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d5:a0:51:16:ae:2b:23:59:0b:9b:ca:7a:79:04:d2:e1:8f:12:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:12 2024 GMT
            Not After : Mar  4 17:55:12 2025 GMT
        Subject: CN=7A8AE4AE595422EC48B94F0FD4958CE6746326A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:51:9e:ea:92:9c:a6:d7:01:25:b8:f7:02:2c:
                    96:06:66:97:b5:0b:df:5f:65:0f:8f:d9:b0:8e:70:
                    36:23:a2:c7:6a:36:68:aa:93:14:b1:8b:c9:5b:d5:
                    47:cf:5f:23:1d:bb:e4:7c:4f:85:c4:85:4f:c9:65:
                    cd:23:01:a8:e1:16:1f:7e:db:73:df:68:5e:66:ca:
                    e6:a7:ac:3c:92:16:dd:84:d0:59:1c:7e:7f:ca:54:
                    94:29:d2:67:6f:24:c2:04:68:00:c4:8b:00:25:01:
                    cd:f0:e9:27:81:d3:10:d8:0d:a4:40:07:70:ab:da:
                    6c:0a:81:48:91:d0:c1:4f:37:96:5e:63:eb:cc:4a:
                    65:a1:94:4f:e9:33:39:c0:e1:62:2c:f7:5b:20:d0:
                    12:b7:e6:1d:50:45:32:e8:00:b5:7f:22:00:ea:df:
                    8b:08:fd:37:ff:ed:74:93:50:35:55:0e:df:28:84:
                    7d:7c:38:ec:88:46:1d:ca:c0:6c:a6:9e:87:d6:c2:
                    ef:e7:99:4c:6a:53:29:9c:86:03:89:ec:e4:3b:c9:
                    c0:fb:b0:66:1e:7a:f4:b4:f9:01:10:c3:67:28:ec:
                    e1:21:46:25:85:ec:ce:34:00:c8:42:97:30:20:bc:
                    e9:bf:20:03:76:9f:d4:e7:bd:b3:16:5e:c6:a6:7c:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8A:E4:AE:59:54:22:EC:48:B9:4F:0F:D4:95:8C:E6:74:63:26:A8
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31323a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:12::/64

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:4c:04:0b:6d:f0:c2:be:39:30:81:63:bc:4e:cd:85:d4:
         a3:29:cc:48:02:05:1d:e7:b2:3c:ed:51:6d:ff:49:f4:50:15:
         60:23:42:d8:f3:62:4b:11:32:8b:59:6f:32:d5:3f:b1:e9:b8:
         66:bc:c8:9f:a8:70:bf:b5:32:08:63:1e:2b:63:12:bc:bf:7b:
         9e:3b:eb:f9:c0:92:b6:a1:f2:cc:b5:78:f0:79:ec:29:f8:ff:
         2a:05:c4:9e:c0:97:e3:62:0e:0f:94:d9:06:04:35:54:15:18:
         2f:8b:a6:70:ce:7c:d2:ba:be:ee:cd:05:1e:19:01:66:6a:57:
         2f:e7:2b:b1:54:cf:d9:f8:6c:8b:74:94:08:07:7e:d7:ac:7b:
         de:f6:57:3a:53:75:a5:93:a8:1a:ac:ce:e1:7c:a1:0b:82:5b:
         1c:68:76:8a:11:28:3b:be:e2:d8:eb:f6:95:88:bb:6d:46:95:
         5a:60:23:73:b6:5d:9d:9f:a5:17:e1:e3:6c:cb:81:d0:79:f2:
         58:1e:46:59:1b:e1:17:46:5c:64:0d:fc:5e:81:3c:41:33:fb:
         ca:4d:17:59:d8:1f:86:e0:6c:ad:2c:8b:97:a2:c4:de:9c:fc:
         fe:b5:5d:01:af:c3:42:46:6e:27:ff:0b:3b:ad:23:94:f3:ef:
         e6:93:ba:43
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUe9WgURauKyNZC5vKenkE0uGPEiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG
RjQ3NzAyODAeFw0yNDAzMDUxNzUwMTJaFw0yNTAzMDQxNzU1MTJaMDMxMTAvBgNV
BAMTKDdBOEFFNEFFNTk1NDIyRUM0OEI5NEYwRkQ0OTU4Q0U2NzQ2MzI2QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvUZ7qkpym1wEluPcCLJYGZpe1
C99fZQ+P2bCOcDYjosdqNmiqkxSxi8lb1UfPXyMdu+R8T4XEhU/JZc0jAajhFh9+
23PfaF5myuanrDySFt2E0Fkcfn/KVJQp0mdvJMIEaADEiwAlAc3w6SeB0xDYDaRA
B3Cr2mwKgUiR0MFPN5ZeY+vMSmWhlE/pMznA4WIs91sg0BK35h1QRTLoALV/IgDq
34sI/Tf/7XSTUDVVDt8ohH18OOyIRh3KwGymnofWwu/nmUxqUymchgOJ7OQ7ycD7
sGYeevS0+QEQw2co7OEhRiWF7M40AMhClzAgvOm/IAN2n9TnvbMWXsamfCQ9AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUeorkrllUIuxIuU8P1JWM5nRjJqgwHwYDVR0j
BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4
OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0
RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy
OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz
QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTMxMzIz
YTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzNTMyMzQzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKAME
gAASAAAwDQYJKoZIhvcNAQELBQADggEBAFZKTAQLbfDCvjkwgWO8Ts2F1KMpzEgC
BR3nsjztUW3/SfRQFWAjQtjzYksRMotZbzLVP7HpuGa8yJ+ocL+1MghjHitjEry/
e5476/nAkrah8sy1ePB57Cn4/yoFxJ7Al+NiDg+U2QYENVQVGC+LpnDOfNK6vu7N
BR4ZAWZqVy/nK7FUz9n4bIt0lAgHftese972VzpTdaWTqBqszuF8oQuCWxxodooR
KDu+4tjr9pWIu21GlVpgI3O2XZ2fpRfh42zLgdB58lgeRlkb4RdGXGQN/F6BPEEz
+8pNF1nYH4bgbK0si5eixN6c/P61XQGvw0JGbif/CzutI5Tz7+aTukM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org