Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa
File:                     323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa (raw, json)
Hash identifier:          MtzB50KWznAWFKc8w9K8kM8TeYjg9s77lBKocYfGOzI=
Subject key identifier:   9F:B1:35:69:3E:C1:27:8D:6D:0E:9A:20:0F:1C:5B:60:1F:0A:8A:90
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       6FB4E3FBE216066AD159309202D023F96BB9B779
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa
Signing time:             Tue 04 Feb 2025 18:24:25 +0000
ROA not before:           Tue 04 Feb 2025 18:19:25 +0000
ROA not after:            Tue 03 Feb 2026 18:24:25 +0000
asID:                     52458
IP address blocks:        2803:480:22::/47 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b4:e3:fb:e2:16:06:6a:d1:59:30:92:02:d0:23:f9:6b:b9:b7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Feb  4 18:19:25 2025 GMT
            Not After : Feb  3 18:24:25 2026 GMT
        Subject: CN=9FB135693EC1278D6D0E9A200F1C5B601F0A8A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:bd:2f:f4:53:27:9f:22:6c:c5:57:08:bd:
                    9b:0b:e4:1e:fe:7a:c0:5a:0e:69:fd:fb:0b:3b:07:
                    11:4c:b3:da:68:9f:89:d5:5b:38:2b:2e:25:bb:94:
                    55:fc:ad:66:07:a5:ad:13:b7:a7:d8:d9:4a:36:b8:
                    87:ac:60:01:f3:5e:2c:03:aa:03:9a:40:b4:96:07:
                    e0:72:29:31:cf:f2:90:bd:90:58:1c:c4:9d:d5:cd:
                    a3:ca:ed:64:48:23:9b:4d:90:21:4c:99:ea:04:0f:
                    91:29:3f:56:f8:61:84:d4:48:31:52:45:5b:99:08:
                    e4:ac:b9:d2:65:0b:58:de:4d:88:5b:63:e6:ca:c0:
                    d0:fd:79:78:7a:18:f3:42:a5:6e:ff:20:e9:8d:30:
                    bd:69:3b:f1:8b:f8:0f:72:19:5e:12:d3:05:a3:ec:
                    de:7d:74:ab:d9:05:da:4b:7f:a5:36:42:bb:ff:84:
                    fa:69:71:c2:5d:7a:bd:e7:4c:9c:34:37:05:54:ba:
                    29:de:a7:e7:ad:c6:65:7c:05:92:d5:85:bd:77:5a:
                    0c:c4:9b:5b:c2:9c:89:5a:6e:c6:b6:80:91:62:0c:
                    d5:00:72:0e:0e:1c:5b:55:a3:cd:6f:12:26:e8:4f:
                    19:08:91:f6:6a:64:54:9b:57:46:9a:69:0a:6c:81:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B1:35:69:3E:C1:27:8D:6D:0E:9A:20:0F:1C:5B:60:1F:0A:8A:90
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:22::/47

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:49:c9:74:7f:0f:94:f6:2d:22:23:0e:7d:c3:2d:8e:2a:
         21:75:e1:3b:48:db:12:37:c1:39:34:5e:d8:f4:8c:3c:5e:ef:
         59:04:4f:9e:9f:2b:b3:a1:f3:b3:7c:bd:3b:e4:be:74:3d:11:
         88:09:7d:ec:e5:98:a6:8b:64:7a:60:76:a6:fd:70:c9:09:a9:
         53:c2:5a:fe:8e:b9:35:23:a6:01:e0:3b:de:45:fc:f8:12:41:
         45:a0:97:61:d4:5b:a8:2b:3f:9b:62:20:b2:c0:f1:39:91:b4:
         04:53:04:48:15:9b:88:ff:56:89:6a:ca:8c:01:86:6f:04:25:
         33:04:ad:a2:6e:9b:71:88:45:b5:3d:7e:ae:a1:3b:10:0b:fe:
         c2:bf:0b:46:41:aa:fd:0b:42:90:f8:c7:fa:d8:79:ed:69:d2:
         e2:92:05:0c:4e:38:b2:44:97:ec:47:3d:30:76:9d:57:37:e4:
         be:08:59:1d:aa:3e:f8:50:57:80:68:11:90:dd:7b:0a:a5:d2:
         be:03:a7:95:d5:b7:07:f3:c2:ce:3f:8e:68:aa:09:26:55:58:
         0c:87:8d:2a:23:82:fa:63:b4:67:80:f2:cb:e0:03:bb:df:bc:
         9b:17:23:b6:a2:0c:b4:c8:4b:0f:03:77:67:80:64:be:83:39:
         ac:69:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:51:08 2025 by rpki-client