Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31363a3a2f34372d3634203d3e203532343538.roa
File:                     323830333a3438303a31363a3a2f34372d3634203d3e203532343538.roa (raw, json)
Hash identifier:          vEWXosfQlYuCXe37KozKg9AR7RTMrJUqiBxPPMxl1EA=
Subject key identifier:   CB:28:05:FD:43:13:54:70:ED:B3:12:A7:B4:39:1D:3A:81:0B:42:E7
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       28DB2B74F0C4036CEBADF17CA1892F5502469E9F
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31363a3a2f34372d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:10 +0000
ROA not before:           Tue 05 Mar 2024 17:50:10 +0000
ROA not after:            Tue 04 Mar 2025 17:55:10 +0000
asID:                     52458
IP address blocks:        2803:480:16::/47 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:db:2b:74:f0:c4:03:6c:eb:ad:f1:7c:a1:89:2f:55:02:46:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:10 2024 GMT
            Not After : Mar  4 17:55:10 2025 GMT
        Subject: CN=CB2805FD43135470EDB312A7B4391D3A810B42E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:5d:b4:28:4b:fe:22:dc:22:58:ec:d9:44:
                    0c:a1:7d:dd:22:ef:c5:5e:5d:1d:e0:11:34:ce:f0:
                    1e:26:76:0c:d5:a1:5c:d7:d1:0b:4c:0e:a6:5f:1f:
                    1c:62:f1:3c:83:66:4a:79:a2:d6:6a:bc:50:14:b3:
                    82:fa:c9:9a:05:6e:b7:4c:95:8f:1c:d2:cb:87:70:
                    66:0c:cc:a3:24:f7:0c:5e:c9:8b:5d:00:4f:a5:a3:
                    d0:5d:22:58:57:e3:4c:1c:c9:d5:54:30:ad:89:af:
                    9d:7c:c1:87:03:1b:0e:5d:54:44:0c:2d:a7:fe:ac:
                    4a:0e:c7:84:73:ff:d3:b9:0f:35:ee:26:52:25:98:
                    a2:68:d8:0c:a2:46:3a:e1:fd:7b:0d:08:dd:2e:f2:
                    60:b4:3d:a2:08:c1:ab:78:40:23:78:49:3c:42:43:
                    77:88:00:ce:1e:89:4f:90:03:df:22:6a:54:bf:c2:
                    9f:34:d1:2b:ff:11:9e:a3:7e:db:ec:71:00:3a:49:
                    ca:e3:de:26:80:d2:cc:1b:f7:f4:83:6b:9a:1a:4f:
                    d8:35:bc:4e:c4:92:de:f3:9f:8a:2b:89:01:7e:a3:
                    ea:53:43:76:3e:73:08:2b:d2:09:07:4d:17:a6:5b:
                    18:fc:be:3a:de:0e:bf:e5:9c:56:91:33:3c:4f:83:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:28:05:FD:43:13:54:70:ED:B3:12:A7:B4:39:1D:3A:81:0B:42:E7
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31363a3a2f34372d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:16::/47

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:e5:11:90:d3:02:e6:33:35:b2:0b:7d:62:e4:e4:04:d3:
         43:dc:65:cd:14:22:0e:6c:f8:9e:a8:bb:32:40:c2:e2:9f:61:
         e4:21:fe:52:5e:6b:ed:1a:68:14:95:5e:81:6e:5e:d6:6b:b2:
         ab:59:06:95:db:34:cd:1f:4c:61:4b:50:40:30:e5:2d:9e:c3:
         09:a4:e5:f4:8c:64:d3:e0:4c:a2:1f:4d:69:88:c4:c5:f1:f8:
         5e:94:ce:62:2b:8a:68:03:b6:06:96:13:19:0d:88:22:60:a2:
         a9:6a:e8:ef:b8:8f:8b:14:1f:f0:a4:b3:86:6b:cd:17:a9:18:
         7e:33:ce:27:bf:7f:d8:e1:4a:b7:22:d5:8e:62:90:4e:34:8f:
         35:4b:fc:ab:de:68:e2:f5:e8:eb:a9:22:6b:ef:ab:0a:3d:f4:
         88:22:09:d0:c4:b4:9c:8d:b2:e7:22:cc:25:3f:28:bd:b4:7b:
         a4:d7:59:65:f3:59:04:2f:68:61:8a:ea:4c:1f:62:3c:7d:af:
         81:5d:36:db:04:f0:dd:c5:ec:3d:c0:01:bf:34:82:02:98:66:
         5c:29:f4:9f:94:fc:5c:84:2a:57:64:0c:8e:b9:fe:a5:27:a3:
         70:aa:f4:02:9c:4d:b9:28:14:6e:ef:c3:05:6e:7f:31:67:63:
         d4:94:44:37
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUKNsrdPDEA2zrrfF8oYkvVQJGnp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG
RjQ3NzAyODAeFw0yNDAzMDUxNzUwMTBaFw0yNTAzMDQxNzU1MTBaMDMxMTAvBgNV
BAMTKENCMjgwNUZENDMxMzU0NzBFREIzMTJBN0I0MzkxRDNBODEwQjQyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQjF20KEv+ItwiWOzZRAyhfd0i
78VeXR3gETTO8B4mdgzVoVzX0QtMDqZfHxxi8TyDZkp5otZqvFAUs4L6yZoFbrdM
lY8c0suHcGYMzKMk9wxeyYtdAE+lo9BdIlhX40wcydVUMK2Jr518wYcDGw5dVEQM
Laf+rEoOx4Rz/9O5DzXuJlIlmKJo2AyiRjrh/XsNCN0u8mC0PaIIwat4QCN4STxC
Q3eIAM4eiU+QA98ialS/wp800Sv/EZ6jftvscQA6Scrj3iaA0swb9/SDa5oaT9g1
vE7Ekt7zn4oriQF+o+pTQ3Y+cwgr0gkHTRemWxj8vjreDr/lnFaRMzxPgxJPAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUyygF/UMTVHDtsxKntDkdOoELQucwHwYDVR0j
BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4
OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0
RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy
OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz
QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTMxMzYz
YTNhMmYzNDM3MmQzNjM0MjAzZDNlMjAzNTMyMzQzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAME
gAAWMA0GCSqGSIb3DQEBCwUAA4IBAQATbOURkNMC5jM1sgt9YuTkBNND3GXNFCIO
bPieqLsyQMLin2HkIf5SXmvtGmgUlV6Bbl7Wa7KrWQaV2zTNH0xhS1BAMOUtnsMJ
pOX0jGTT4EyiH01piMTF8fhelM5iK4poA7YGlhMZDYgiYKKpaujvuI+LFB/wpLOG
a80XqRh+M84nv3/Y4Uq3ItWOYpBONI81S/yr3mji9ejrqSJr76sKPfSIIgnQxLSc
jbLnIswlPyi9tHuk11ll81kEL2hhiupMH2I8fa+BXTbbBPDdxew9wAG/NIICmGZc
KfSflPxchCpXZAyOuf6lJ6NwqvQCnE25KBRu78MFbn8xZ2PUlEQ3
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org