Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32313a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a32313a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          lbT4sSvIjEe/oYCkpwWFoByUNERWpHktqolhFEm3SDo=
Subject key identifier:   EE:4C:FE:D6:EA:74:26:A2:DD:B7:D5:36:35:AA:B7:D4:C2:54:E5:54
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       47696A13E1AA25EE8A1E422FF0A4FFB287329EE4
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32313a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 04 Feb 2025 18:24:25 +0000
ROA not before:           Tue 04 Feb 2025 18:19:25 +0000
ROA not after:            Tue 03 Feb 2026 18:24:25 +0000
asID:                     52458
IP address blocks:        2803:480:21::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:69:6a:13:e1:aa:25:ee:8a:1e:42:2f:f0:a4:ff:b2:87:32:9e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Feb  4 18:19:25 2025 GMT
            Not After : Feb  3 18:24:25 2026 GMT
        Subject: CN=EE4CFED6EA7426A2DDB7D53635AAB7D4C254E554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:c5:5f:06:b3:18:2d:e3:9f:45:ac:99:f6:
                    81:74:87:40:6d:06:50:96:f9:be:2d:14:be:84:bc:
                    ce:e4:e6:92:a0:a4:8e:b6:4e:88:90:c3:d8:31:d8:
                    e0:4c:e6:21:ff:2f:a4:00:79:39:a2:35:d9:76:cf:
                    ab:dc:6e:a4:10:6e:bf:5a:c3:0b:36:26:98:df:7b:
                    12:a7:68:47:7b:0a:4e:a5:cb:2b:4b:d3:97:37:eb:
                    f7:5a:3e:ca:79:db:03:79:ea:87:94:89:93:a1:2f:
                    78:ec:da:75:47:cc:e4:2e:3c:00:99:b9:a9:4a:53:
                    d8:df:26:9f:d9:44:b3:86:6d:ca:ce:99:96:bc:2b:
                    c5:53:54:75:e9:e7:0b:a3:e3:e2:00:c6:a7:a0:cb:
                    f1:bf:43:48:3f:52:8f:ca:33:e6:1f:84:a7:f4:6e:
                    8a:8c:1d:ee:ad:07:e0:fa:95:d0:9d:ce:d5:b6:5a:
                    93:99:1f:c0:bb:06:e1:8a:64:f6:98:06:1b:ff:6d:
                    c0:eb:64:e2:96:e6:01:07:b7:cb:6f:e3:97:67:6a:
                    81:52:4c:3b:49:d8:84:2c:55:8b:94:17:8f:f6:26:
                    18:ff:31:02:9f:f2:21:b2:25:0d:4b:07:7d:fe:47:
                    32:fc:16:76:3f:f9:b6:86:28:f3:5d:f2:81:fc:d1:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4C:FE:D6:EA:74:26:A2:DD:B7:D5:36:35:AA:B7:D4:C2:54:E5:54
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32313a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:21::/64

    Signature Algorithm: sha256WithRSAEncryption
         35:9e:db:62:38:a6:bc:88:78:db:9f:32:33:1a:41:ba:6b:fa:
         7e:09:76:38:08:dc:50:f2:1b:4b:58:9a:e5:9a:7b:fb:98:3b:
         d0:46:dd:8a:9e:7f:63:a8:d0:fd:96:ea:7f:27:d8:1d:4a:88:
         c9:74:6d:34:64:2f:0a:27:c8:cf:4e:7d:1b:be:93:9a:fa:39:
         ed:77:b9:6f:ca:cd:b5:60:9c:67:2b:9a:ed:4d:99:b0:d1:94:
         78:1c:ed:3c:d7:f1:f2:fb:f9:f2:cd:4f:ae:2c:99:54:a2:b1:
         74:9f:c2:ca:8c:9a:bf:ba:4c:85:a9:ab:fb:69:74:c5:c2:c1:
         02:a5:eb:5c:c5:26:06:3b:6e:ee:35:a4:b2:b2:fd:4c:29:29:
         ad:a7:e4:60:ff:05:9e:19:f4:ad:ed:35:52:d4:35:ef:c6:b1:
         4d:f8:55:12:ea:fc:85:cf:ca:95:00:2d:ab:ce:f3:89:0a:cd:
         97:56:47:98:dd:c6:50:6f:21:7d:64:02:ef:98:31:1f:8b:37:
         4d:90:05:5a:d9:85:a9:88:f1:7c:ef:9c:65:31:1a:29:b8:d0:
         38:88:01:e4:fd:53:26:2d:ba:80:f8:01:a2:93:25:70:84:cf:
         9a:d4:22:ec:09:a7:5c:cf:fe:1b:00:e9:c6:29:01:38:21:b1:
         f8:18:89:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:30 2025 by rpki-client