Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          OjC3tSgKtzYsleApPn0A7HQQBt6ik7MrR6IsgyZ55g8=
Subject key identifier:   BD:44:AB:09:4E:D7:E0:FF:AA:56:71:11:9F:8D:83:D0:CF:F9:DD:2F
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       24621108AC6947E07783B3B5D39606BD913B781D
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 04 Feb 2025 18:24:27 +0000
ROA not before:           Tue 04 Feb 2025 18:19:27 +0000
ROA not after:            Tue 03 Feb 2026 18:24:27 +0000
asID:                     52458
IP address blocks:        2803:480:19::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:62:11:08:ac:69:47:e0:77:83:b3:b5:d3:96:06:bd:91:3b:78:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Feb  4 18:19:27 2025 GMT
            Not After : Feb  3 18:24:27 2026 GMT
        Subject: CN=BD44AB094ED7E0FFAA5671119F8D83D0CFF9DD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:38:81:04:e5:91:0a:2d:51:31:1e:f6:d7:
                    8b:d1:ce:52:76:66:0f:b6:a3:f2:4d:0e:7b:a0:fe:
                    af:b0:9c:d1:7d:df:b3:26:95:44:f0:03:ca:bd:eb:
                    52:aa:53:33:07:d8:3f:d3:94:0f:2b:25:85:00:4a:
                    f6:85:73:e7:66:a4:73:17:4f:97:c8:e8:65:1d:95:
                    5b:12:31:76:49:91:03:9c:80:ff:a7:b9:92:00:18:
                    82:b1:d8:0d:7b:19:66:b7:43:69:0c:b6:dc:74:c4:
                    1a:01:7b:22:c1:15:8a:7c:e9:f7:e2:33:1b:4a:7e:
                    9d:0d:a0:98:36:b0:e6:ee:49:92:08:63:a4:c7:f1:
                    c2:d1:79:fe:81:39:b6:db:1a:37:9b:03:47:67:d6:
                    8e:38:eb:9a:b2:d6:aa:f3:01:ab:38:d7:cd:29:5f:
                    a3:8c:5c:89:e5:8c:18:2f:17:77:4c:66:03:12:fa:
                    49:9c:56:ba:93:c1:11:02:43:03:1d:05:a8:46:67:
                    68:f3:18:3e:ce:48:9f:c7:86:c3:1d:ab:96:95:75:
                    1e:3a:e2:73:d7:e0:f6:38:a2:1f:c7:69:30:62:27:
                    a4:2e:b4:b1:b6:2f:c8:88:a2:e4:8c:09:bc:2d:8c:
                    d7:a6:70:c9:7e:87:86:b5:db:b6:84:0f:19:bf:2a:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:44:AB:09:4E:D7:E0:FF:AA:56:71:11:9F:8D:83:D0:CF:F9:DD:2F
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:19::/64

    Signature Algorithm: sha256WithRSAEncryption
         63:37:52:bc:0a:59:29:37:5e:5e:f2:b7:a3:12:91:eb:2a:52:
         31:78:b2:1a:b3:e4:26:56:8e:43:7d:9c:2d:5f:a0:12:2f:04:
         db:23:0d:69:68:ac:dd:66:3c:6d:0a:78:1d:9c:2e:64:1c:3d:
         ea:7b:25:4e:93:b1:bd:ee:e9:e3:5c:f3:c4:e1:40:c8:8d:f5:
         f6:dd:2c:31:18:85:68:7b:52:a3:c9:8d:8f:43:59:92:15:f2:
         b3:1d:6d:57:00:5e:9f:39:db:23:d8:dc:4b:e3:4f:69:ea:04:
         00:df:dd:3f:fb:57:48:39:6e:f1:6b:73:9a:87:f0:45:37:a7:
         47:7b:4c:f6:1b:ae:8e:e6:e8:23:9f:84:f0:d8:db:9c:59:8a:
         05:7f:bf:49:4a:64:86:73:0d:52:a3:ae:4f:63:75:33:2f:2f:
         b9:04:3a:c7:73:cb:ac:d5:fd:49:38:fd:d3:7a:44:49:a9:2a:
         81:2f:27:23:2b:7f:42:46:5d:53:d2:07:e1:37:83:37:9b:4d:
         5b:b8:2b:2b:5c:5e:37:40:f1:2a:61:be:eb:60:1a:49:ea:47:
         f6:8b:c8:54:63:77:51:d4:a0:1c:d4:2a:9f:db:af:a2:fd:f2:
         f2:4c:cf:27:87:26:5a:0a:5b:9e:16:44:ce:38:4a:b4:ed:ef:
         ba:8c:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:01:00 2025 by rpki-client