Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31383a3a2f34372d3634203d3e203532343538.roa
File:                     323830333a3438303a31383a3a2f34372d3634203d3e203532343538.roa (raw, json)
Hash identifier:          lql/mbWjdhKk/kdHVjH5sOS1orZS1GSwubi3XvK9W7Y=
Subject key identifier:   45:98:0F:B5:29:06:4A:99:75:23:AE:FF:65:97:E3:AF:7A:43:85:9C
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       1831F80FB8B44A8EE894B6D77ABDBC0AB199EC3E
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31383a3a2f34372d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:08 +0000
ROA not before:           Tue 05 Mar 2024 17:50:08 +0000
ROA not after:            Tue 04 Mar 2025 17:55:08 +0000
asID:                     52458
IP address blocks:        2803:480:18::/47 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:31:f8:0f:b8:b4:4a:8e:e8:94:b6:d7:7a:bd:bc:0a:b1:99:ec:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:08 2024 GMT
            Not After : Mar  4 17:55:08 2025 GMT
        Subject: CN=45980FB529064A997523AEFF6597E3AF7A43859C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:02:78:61:de:ab:5a:7a:5b:ea:bb:00:fc:
                    a2:72:30:72:f3:94:bd:bd:2f:14:5f:58:18:a6:46:
                    4e:57:37:69:3c:a0:e2:47:1a:31:41:02:41:b8:12:
                    39:ae:16:aa:20:3c:12:3c:da:e7:83:5a:05:8f:65:
                    47:59:18:25:2a:39:35:c3:ce:a8:6b:16:5a:ea:73:
                    67:fc:8f:5f:9e:4d:c1:f4:c5:49:40:ef:5d:58:e4:
                    eb:22:30:ec:cc:41:4e:a9:d3:a0:2c:93:22:f2:28:
                    64:31:c9:05:41:df:a4:4f:79:ae:e0:f7:16:ee:17:
                    45:5e:72:71:3c:87:2c:10:ee:b1:6b:2f:75:85:d7:
                    dd:9e:cd:0b:b4:81:0d:61:86:c2:c0:aa:ee:51:00:
                    93:a0:46:4f:5a:94:eb:6a:ae:44:1f:c7:0c:13:96:
                    c6:37:8b:cd:fd:2c:4b:95:ff:db:17:9b:21:fb:e3:
                    96:11:fa:2a:ac:ff:a3:27:02:f8:3e:8b:ef:78:01:
                    e1:8e:a9:1d:21:5c:3e:40:85:ba:2e:b9:57:20:6b:
                    22:f8:60:db:93:4c:ef:c4:57:59:77:2a:ae:c1:4d:
                    c4:42:a4:aa:4b:2e:d7:e7:e6:f0:c1:1a:c4:9a:0e:
                    fb:92:7c:c4:f9:41:f3:38:62:f1:f4:3c:68:01:9a:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:98:0F:B5:29:06:4A:99:75:23:AE:FF:65:97:E3:AF:7A:43:85:9C
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31383a3a2f34372d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:18::/47

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:0d:d1:70:09:7f:18:4f:e1:bd:a4:cb:05:b2:b5:f8:64:
         2e:ba:37:a1:d2:06:ab:e7:aa:66:e0:46:96:dd:46:9d:13:bd:
         ed:de:3f:50:84:2d:ea:21:36:e7:9f:32:ca:cc:a7:0f:c5:a0:
         0a:75:f8:54:af:36:1c:06:b9:2e:8e:b4:e4:d9:62:0c:d0:06:
         19:89:1a:83:b5:99:fe:d2:75:79:e5:d1:0e:6b:6a:e1:14:e7:
         a4:f0:62:f0:c6:34:27:85:cd:aa:f0:f8:84:9d:bd:93:35:5c:
         3d:46:55:99:92:2e:6d:39:b0:39:c7:69:b6:39:3e:d8:fb:31:
         b4:6f:1c:a5:51:17:7c:bd:c2:50:2a:20:5e:4d:e3:a3:6b:6b:
         ec:83:25:98:e3:b6:86:1d:39:59:ac:3d:9e:38:19:9b:ed:de:
         99:ac:33:75:6b:4c:6b:c2:f5:cf:5b:63:97:5d:23:2a:71:56:
         ba:19:11:c6:e7:57:bc:c2:70:f2:11:f7:09:ee:7c:86:26:76:
         08:36:44:73:0f:c3:6c:54:d3:34:cc:a6:18:42:23:af:c8:e7:
         b8:fc:b7:a5:48:96:9a:06:98:f6:f7:da:de:d5:8f:e9:50:29:
         5d:1f:5b:13:d9:db:b0:75:f5:87:a7:e6:a6:1f:63:60:31:8b:
         8a:ff:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org