Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          5m1I8LrCKbM1rajLesLk78RYAtrmNjnKEPCZeKLRC1U=
Subject key identifier:   E5:98:4F:70:F4:41:C7:2F:6A:2F:B8:65:33:6A:BA:1F:55:BD:B7:57
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       352B84D61B9F5981CCE32F18F18C5E02ACBE27DE
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:09 +0000
ROA not before:           Tue 05 Mar 2024 17:50:09 +0000
ROA not after:            Tue 04 Mar 2025 17:55:09 +0000
asID:                     52458
IP address blocks:        2803:480:19::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2b:84:d6:1b:9f:59:81:cc:e3:2f:18:f1:8c:5e:02:ac:be:27:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:09 2024 GMT
            Not After : Mar  4 17:55:09 2025 GMT
        Subject: CN=E5984F70F441C72F6A2FB865336ABA1F55BDB757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:df:4d:3d:14:51:7f:0f:34:27:45:08:54:
                    a7:5c:4b:8d:59:ba:38:d1:46:87:2d:89:26:23:bc:
                    88:38:d6:cd:58:91:ae:8e:03:11:82:bd:b1:a9:aa:
                    33:48:c5:c6:18:f8:79:d6:4c:f2:d9:94:99:2e:0b:
                    a4:70:ab:37:7f:b1:b2:33:31:ad:90:1b:3a:0e:de:
                    f7:f4:c6:1a:fc:25:2e:af:60:91:85:86:5b:1d:c2:
                    00:ff:7c:ad:d8:ae:18:e0:e5:36:cd:7c:94:ba:60:
                    65:76:96:8f:bc:35:29:7a:c9:9a:97:47:7e:0f:f0:
                    8d:78:c5:05:8e:e5:d9:41:7f:2d:5a:e7:eb:e5:22:
                    2e:d3:c6:11:d4:1a:db:e9:47:b5:b9:a0:31:ff:df:
                    ce:30:57:b1:21:0b:3d:96:33:bb:7c:7d:94:cd:f5:
                    53:a0:a4:f1:1b:06:91:f4:a1:e5:0a:8c:63:54:0a:
                    e6:2a:b0:4b:d4:d1:10:4c:6c:c4:90:23:91:bf:05:
                    d7:27:96:d3:00:3a:ee:02:71:e6:39:9f:85:a9:45:
                    05:05:e6:c6:eb:c3:00:9b:59:e3:d9:3b:9a:52:88:
                    46:01:f9:71:e0:1f:88:d8:2a:6a:b0:5f:bb:33:4a:
                    35:24:ea:b0:52:5e:24:b0:fc:33:44:6f:b0:d4:81:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:98:4F:70:F4:41:C7:2F:6A:2F:B8:65:33:6A:BA:1F:55:BD:B7:57
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:19::/64

    Signature Algorithm: sha256WithRSAEncryption
         21:90:b6:5d:70:0e:c7:0a:f7:bd:0e:d3:96:57:dd:54:30:48:
         f1:21:69:ad:b9:29:18:f7:06:1b:54:f9:33:82:9f:47:d3:bc:
         6a:10:fa:dd:8e:4f:16:8c:85:be:6c:a0:59:3c:16:c9:cd:72:
         7d:f1:0f:28:22:78:f9:4e:d6:3d:ee:9e:26:7d:fe:13:c2:3d:
         b2:fd:20:0e:72:62:bd:17:19:8e:8f:20:cc:48:a0:51:8c:02:
         c8:76:07:69:76:87:c7:94:1d:60:ed:c5:9f:f7:e0:aa:7a:ca:
         dc:88:6d:dc:3d:4e:a9:d7:f8:ab:23:00:d7:26:df:f9:e6:88:
         23:de:3b:5a:eb:6a:fc:ec:56:2a:45:4b:e1:d2:c2:a3:bb:8a:
         cc:47:3d:11:cb:8f:41:14:95:a6:25:1c:05:fa:cc:d6:f3:bc:
         1d:b7:38:af:aa:4a:fc:de:31:25:e1:f4:94:5d:f4:ad:42:c3:
         96:68:b4:cc:c1:3a:19:c3:1e:49:db:b7:76:bd:a6:8e:36:82:
         d4:0c:72:4b:22:8b:49:5a:52:d6:ae:a1:31:85:65:86:00:b9:
         a2:35:f3:32:42:e4:58:ab:db:ff:0a:83:44:b4:13:31:35:67:
         fa:99:a4:93:fb:b0:d3:b5:71:22:9e:42:fa:3b:37:82:f0:7e:
         01:bf:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org