Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a353a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a353a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          hY9d989WmgkpNdHrPa132Dc/hba9OQstzIFTBI72jzw=
Subject key identifier:   7B:EA:49:C5:C1:8A:00:BE:CC:E3:56:9F:72:14:89:C6:9D:7E:CE:83
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       3ED95559177ADDAD0B3C74A8CAA7F5367AD08D56
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a353a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:08 +0000
ROA not before:           Tue 05 Mar 2024 17:50:08 +0000
ROA not after:            Tue 04 Mar 2025 17:55:08 +0000
asID:                     52458
IP address blocks:        2803:480:5::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d9:55:59:17:7a:dd:ad:0b:3c:74:a8:ca:a7:f5:36:7a:d0:8d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:08 2024 GMT
            Not After : Mar  4 17:55:08 2025 GMT
        Subject: CN=7BEA49C5C18A00BECCE3569F721489C69D7ECE83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:07:f3:d0:fc:d6:79:cb:ae:e2:65:f2:1d:
                    e8:56:bb:b0:bc:43:b7:05:81:28:6f:9f:ed:e5:4a:
                    a4:fe:9b:93:c8:49:a9:8a:dc:81:1d:14:14:de:3d:
                    96:de:12:82:cf:da:a7:35:09:ab:5c:d1:1d:af:b8:
                    4b:83:6e:92:ac:04:a2:6c:dc:9a:c8:9b:54:2b:de:
                    86:28:20:e6:c1:ca:46:6a:1c:0d:0c:40:89:5c:70:
                    c7:70:b3:71:fa:48:c0:41:3d:fd:67:77:a2:04:d1:
                    ac:0e:4e:1d:36:a5:be:6d:f4:ea:a6:07:de:b9:c9:
                    cc:3b:2b:24:19:65:8c:77:80:2e:93:00:97:e7:cd:
                    0b:21:b0:14:1e:f1:40:9b:bc:32:d8:4b:99:f3:18:
                    e3:ae:90:5d:b9:e5:17:36:f6:e1:f8:de:1d:98:e9:
                    89:55:c6:b7:1a:d8:0b:de:99:34:40:2c:e9:33:20:
                    a2:e8:8b:9c:33:de:ad:17:d4:50:f4:6d:ed:f5:9a:
                    10:8f:6d:3d:06:f8:25:cb:c5:45:93:04:1b:c3:ae:
                    9b:8d:a4:35:92:2e:e5:fe:f2:9b:28:34:69:7f:6a:
                    62:0d:bb:6c:96:4b:17:5d:5a:b9:e2:1e:29:e8:cf:
                    37:9f:8d:7c:2b:03:c1:47:c6:35:b3:7f:8f:0a:31:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EA:49:C5:C1:8A:00:BE:CC:E3:56:9F:72:14:89:C6:9D:7E:CE:83
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a353a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:5::/64

    Signature Algorithm: sha256WithRSAEncryption
         0a:d8:23:cf:9a:43:3b:fd:77:c9:a6:ff:a8:fd:7f:33:7e:77:
         77:b4:72:a6:ce:b1:80:34:16:86:ed:3b:8f:71:0a:d7:a2:c2:
         9f:cb:bb:b0:c9:ae:3e:e2:a4:0b:5b:02:4d:07:1c:dc:72:12:
         c5:11:37:87:37:84:86:45:c1:8a:b4:a9:ec:6b:ae:e4:2a:4d:
         3f:2f:2c:08:24:7d:04:60:b7:a5:d9:92:fc:f9:4d:f8:97:13:
         0e:8d:3c:42:2f:77:a3:e3:75:de:70:fc:66:59:95:14:70:79:
         6d:ce:f5:78:83:6e:88:4a:00:f3:79:df:7d:49:6f:82:77:be:
         56:a0:6f:f9:09:b5:d3:d2:1c:ac:01:c1:73:25:02:a7:ba:f0:
         f8:0f:b2:90:d6:e4:a7:14:2a:71:7c:6c:fe:04:0a:cd:8c:da:
         10:cb:3c:d1:b8:68:cb:91:fd:a4:38:e7:9f:f6:22:65:eb:44:
         00:2b:be:69:0f:51:d6:53:1a:dc:32:8c:e4:57:b2:8c:a0:dd:
         4d:e0:94:61:99:61:8e:e4:79:2d:e0:a5:c9:cc:40:6a:f0:55:
         cc:f1:55:c0:6f:02:7b:1e:38:ef:4d:22:26:71:f2:18:6e:d6:
         e1:04:8f:9e:0b:6e:6a:75:99:02:5d:f5:fb:1d:6c:2d:e0:bd:
         0e:37:2f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:49:15 2024 by rpki-client on console-fra.rpki-client.org