Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31343a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a31343a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          zRkwiBFKwqI2oYjerEO184S3/hRGrylgLuC1zu5bSSo=
Subject key identifier:   C4:16:9F:5A:AB:36:6A:67:A1:2B:BF:82:13:14:DA:56:5D:7A:6E:B7
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       60A46C9B24E63499857704EA4FFCFE672BA79C46
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31343a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:12 +0000
ROA not before:           Tue 05 Mar 2024 17:50:12 +0000
ROA not after:            Tue 04 Mar 2025 17:55:12 +0000
asID:                     52458
IP address blocks:        2803:480:14::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a4:6c:9b:24:e6:34:99:85:77:04:ea:4f:fc:fe:67:2b:a7:9c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:12 2024 GMT
            Not After : Mar  4 17:55:12 2025 GMT
        Subject: CN=C4169F5AAB366A67A12BBF821314DA565D7A6EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:21:da:12:22:45:ba:7e:d7:67:23:8a:b3:
                    e6:40:98:b0:72:ac:57:fc:4d:7f:d8:bb:29:a2:49:
                    96:6c:73:22:96:87:f8:0e:0f:e7:9a:95:96:88:98:
                    d6:35:26:c4:5b:e5:06:bf:c3:37:cc:0e:46:4e:34:
                    e1:6a:bb:e9:c9:95:c4:04:57:3c:9c:b4:20:21:3e:
                    fd:99:6f:5d:bf:14:8c:77:a0:43:03:b7:67:1b:21:
                    57:27:1a:63:ad:aa:ea:e3:f0:63:0a:c6:68:9d:af:
                    4e:ea:d9:b4:7b:1a:7d:30:81:8d:a6:3d:53:df:f1:
                    dc:3c:51:b2:1c:b1:60:dc:aa:dd:fc:b2:ce:41:82:
                    6a:a8:62:2b:6e:a5:82:aa:6c:23:40:30:ce:99:c4:
                    aa:5d:af:08:f8:8d:41:3d:3c:1a:e5:9e:d1:7b:10:
                    6a:a8:16:a0:51:6a:ae:52:ad:7e:60:97:b2:84:ca:
                    19:0f:6f:48:c2:3d:59:ba:86:24:75:f7:87:64:3e:
                    a4:30:64:6e:66:75:0a:07:e3:23:5f:1a:30:5e:3e:
                    f0:55:6b:1b:ec:c2:c3:61:79:d2:1b:1d:0e:e6:ef:
                    09:d8:d8:a4:2f:e5:38:16:96:c9:cd:54:1d:07:4d:
                    9d:22:e7:f7:c2:10:8b:d9:e0:79:de:d5:a2:78:f6:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:16:9F:5A:AB:36:6A:67:A1:2B:BF:82:13:14:DA:56:5D:7A:6E:B7
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31343a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:14::/64

    Signature Algorithm: sha256WithRSAEncryption
         1e:f8:1f:6c:22:fa:89:d3:66:b0:5e:17:9c:f6:bc:58:17:ae:
         5c:e1:b4:90:c3:91:77:d6:d1:07:fb:ef:32:f5:5e:12:fa:24:
         ab:02:c7:51:55:8c:11:1f:88:f4:25:f5:6d:99:55:cb:97:ac:
         13:ec:5c:93:ec:52:5c:af:6d:63:c8:ca:38:61:3d:00:45:97:
         03:3b:89:47:ee:54:18:02:aa:6b:f0:0c:37:5a:3f:90:14:11:
         23:6f:5e:cc:48:60:f0:9a:b2:2e:29:67:2e:9a:e2:04:91:81:
         af:4f:6b:e7:5c:3a:76:ad:c2:9c:9c:ed:0f:37:4f:f9:05:2f:
         7d:98:1b:bb:3f:26:18:61:29:76:55:fb:70:45:8b:11:db:2d:
         8c:8b:7e:d5:94:84:f0:d2:39:8d:fd:8f:2f:8f:83:b2:da:f0:
         36:c6:a1:d1:8b:8d:bc:0e:8d:b6:78:86:a6:d6:97:9b:2f:f9:
         7a:40:11:36:17:54:3f:ea:5a:c3:2f:d4:68:df:f5:48:71:af:
         47:db:a8:65:bf:52:bf:ab:70:9e:41:59:d2:d9:38:97:62:68:
         46:e3:e2:af:67:f9:04:95:88:d9:6a:96:a4:3b:fb:39:74:e9:
         97:4b:b4:46:7d:15:29:17:2d:8e:1d:12:e7:c2:8f:3f:3d:7b:
         9a:97:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org