Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32303a3a2f34382d3634203d3e203532343538.roa
File:                     323830333a3438303a32303a3a2f34382d3634203d3e203532343538.roa (raw, json)
Hash identifier:          DFquVY/smvYWR7ETaKvjo/gONvY7hwZaM0CF6v/UuaU=
Subject key identifier:   AD:6C:A8:94:3B:BD:7B:A0:5C:E9:55:7E:C2:CF:74:52:0B:8C:08:01
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       455AA49E592E7BD1858517E2CBFCAF031931DF8E
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32303a3a2f34382d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:10 +0000
ROA not before:           Tue 05 Mar 2024 17:50:10 +0000
ROA not after:            Tue 04 Mar 2025 17:55:10 +0000
asID:                     52458
IP address blocks:        2803:480:20::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5a:a4:9e:59:2e:7b:d1:85:85:17:e2:cb:fc:af:03:19:31:df:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:10 2024 GMT
            Not After : Mar  4 17:55:10 2025 GMT
        Subject: CN=AD6CA8943BBD7BA05CE9557EC2CF74520B8C0801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:9d:46:1a:12:b6:1f:d1:02:5d:9b:cc:76:
                    c9:5c:98:56:6e:1e:65:5c:8c:19:04:0f:5d:12:87:
                    db:1c:d2:59:67:c0:ca:d4:ff:c0:74:f9:18:19:72:
                    79:e6:24:70:6d:3d:78:58:33:aa:c2:64:f1:3b:8c:
                    24:ff:81:ac:41:97:12:69:35:e9:9c:42:57:9c:7f:
                    18:ed:03:39:35:53:c1:dd:72:57:08:61:42:ea:de:
                    c9:1c:2f:a0:fc:09:88:fa:cb:bb:4e:c9:81:15:c3:
                    6b:55:b9:9c:0c:5f:31:d3:22:14:59:da:5d:5f:76:
                    a3:d9:84:fe:59:16:88:c7:89:98:d5:39:89:02:4f:
                    52:25:fa:e5:03:4c:de:ce:32:0f:fc:94:b5:69:23:
                    29:9c:15:64:95:23:87:03:6e:a8:fd:84:6c:08:8b:
                    02:d3:a1:b6:b7:32:b6:0a:ed:40:7f:d6:e7:27:c4:
                    63:bd:3c:43:e0:54:59:e9:86:57:d4:a9:f6:a5:1f:
                    59:e2:fd:52:c0:e3:ef:16:1b:36:ea:29:73:2c:eb:
                    49:96:dd:f8:e7:dc:4b:49:a6:75:9c:5d:91:a0:5d:
                    76:21:48:8b:24:9d:54:3b:79:53:46:ba:14:f9:9b:
                    af:8e:e9:2d:b2:2e:55:60:ca:e6:11:ae:be:e7:82:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6C:A8:94:3B:BD:7B:A0:5C:E9:55:7E:C2:CF:74:52:0B:8C:08:01
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32303a3a2f34382d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:8d:0b:f0:c4:ce:e2:7f:1a:8e:62:5d:76:8d:81:cb:d6:55:
         c9:7f:ec:b8:64:5e:10:41:1f:3a:4d:f0:36:11:22:47:1f:c1:
         33:3d:69:f8:d2:31:85:15:87:ba:e4:bd:cc:95:12:03:3d:a5:
         62:b1:06:2e:00:41:6b:07:6b:98:ad:f8:47:79:02:df:f8:04:
         70:66:e0:02:9f:85:8a:f2:5c:41:fb:f6:ef:36:d5:b6:af:d3:
         bd:7e:b4:38:15:13:44:be:e7:6d:e6:75:17:e3:e0:4f:63:c8:
         23:f9:d6:00:25:ef:83:de:60:92:ab:6c:a5:fc:58:6a:5f:9d:
         0f:17:2b:ec:3e:df:b2:c8:14:4d:31:70:3a:09:95:33:0a:b7:
         1b:ab:4d:bf:40:7f:a6:b0:74:11:ec:d1:28:31:87:e9:ce:98:
         25:1a:4e:ae:76:9a:40:22:09:0d:8e:ad:d1:17:05:8b:23:d8:
         3a:bc:d3:d1:16:c2:25:eb:92:39:22:83:02:c9:63:a4:15:36:
         20:5c:f4:93:e7:c5:91:ec:f9:53:61:9c:f0:c8:18:2c:28:06:
         0d:0e:23:8d:f4:69:8a:80:c9:95:b9:83:a3:34:36:3f:4c:1b:
         97:ed:c3:38:01:fd:a6:16:7c:db:26:f8:07:1e:22:76:6d:fe:
         c1:6e:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org