Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31333a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a31333a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          IFQVjs25CAey/Mu5DWUL1GRDGlBOlitF+7VRUlwPcf4=
Subject key identifier:   61:6A:D4:66:8C:65:20:38:E4:E5:47:59:42:CD:EE:A0:BF:CF:22:D9
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       639842B32A4270A79833A493ADB21894FAC071C3
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31333a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:11 +0000
ROA not before:           Tue 05 Mar 2024 17:50:11 +0000
ROA not after:            Tue 04 Mar 2025 17:55:11 +0000
asID:                     52458
IP address blocks:        2803:480:13::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:98:42:b3:2a:42:70:a7:98:33:a4:93:ad:b2:18:94:fa:c0:71:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:11 2024 GMT
            Not After : Mar  4 17:55:11 2025 GMT
        Subject: CN=616AD4668C652038E4E5475942CDEEA0BFCF22D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:4c:d6:d7:8c:f0:6c:a2:51:16:ca:83:84:
                    9d:9a:ae:33:4b:a9:3a:43:13:ba:97:b2:12:92:d9:
                    d3:ad:19:4b:96:a5:d4:44:d3:cf:9c:92:db:f3:9f:
                    f4:f8:39:fe:1a:ad:1a:8c:24:ad:12:b2:a8:2c:75:
                    cc:36:c5:2b:ce:67:92:13:7f:47:6b:dc:ef:0e:49:
                    3d:67:ad:27:ec:59:73:30:24:a9:9c:5f:86:98:96:
                    ee:f9:5a:0a:41:fb:0a:f5:38:2e:f8:d5:2e:59:29:
                    ab:44:56:e7:42:36:ab:39:c3:a2:f2:a9:e7:08:c6:
                    76:aa:dc:83:d4:fe:4d:68:80:b1:cd:72:83:6b:54:
                    d8:9c:29:18:97:d5:de:42:a9:bf:f4:ee:0a:73:eb:
                    ea:82:21:e3:1d:eb:b3:cd:2b:2f:fe:3e:d3:55:c7:
                    76:b3:38:75:a3:4f:30:b9:74:a1:a7:76:a9:da:b5:
                    fb:a2:64:b0:4b:86:f6:07:ce:86:d0:8b:1a:ea:9a:
                    5b:59:90:03:06:69:ca:e0:5b:66:ce:fc:74:5f:a1:
                    03:5d:75:ad:5f:97:82:4e:d2:4b:32:e1:6e:1a:55:
                    36:34:89:0e:b1:e0:0f:ba:12:13:e4:37:e8:34:84:
                    17:cc:d1:61:63:fa:a0:47:7a:ec:ba:65:2c:a8:3b:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6A:D4:66:8C:65:20:38:E4:E5:47:59:42:CD:EE:A0:BF:CF:22:D9
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31333a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:13::/64

    Signature Algorithm: sha256WithRSAEncryption
         c3:23:2e:c3:89:6b:b2:e2:bd:2b:a1:10:5b:a1:fc:cc:2e:a1:
         ea:25:19:dc:4e:e0:2a:bc:90:4f:b6:b1:99:2d:b9:5c:30:98:
         9c:f0:84:07:32:ba:2c:e7:08:20:19:a5:07:c5:42:56:26:23:
         dd:f0:0b:7f:44:85:65:f9:62:73:da:a1:31:2b:ca:39:c4:91:
         bd:94:13:11:ce:39:65:84:42:6d:87:24:09:37:f2:50:2e:f6:
         51:22:84:2f:7c:d3:38:ae:a6:73:04:9a:fe:31:2d:b9:5a:d8:
         19:3c:81:ae:b2:20:a8:ed:3c:1f:a1:10:38:39:34:aa:b5:eb:
         70:11:06:bd:56:82:e2:b1:ac:27:3d:d8:fd:c0:93:e2:99:c0:
         e3:d9:29:30:32:21:d1:65:11:f2:e1:6d:50:2a:62:49:2a:c4:
         e9:91:bf:db:45:0f:2a:75:57:d4:8d:05:47:17:2e:ac:b6:97:
         b3:3e:73:88:06:4b:76:10:01:0d:ae:5a:68:23:86:66:6c:a1:
         72:27:f1:bc:22:65:29:e7:4d:94:18:28:60:cf:cb:4b:b8:e2:
         7e:22:8b:d7:1e:29:5b:36:12:c0:e2:5b:a0:7c:35:e4:1e:0b:
         08:2f:cb:b4:79:ac:e6:71:61:56:38:fe:c8:05:41:64:3a:9c:
         81:8f:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:19:42 2024 by rpki-client on console-ams.rpki-client.org