Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a373a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a373a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          YEfZJZ8uz0BPyCKdJh9KETrPqveRaZb1obQ6TnuB6lg=
Subject key identifier:   3A:F7:1D:68:D6:4D:1F:76:1B:68:8B:2B:77:00:25:4F:4B:74:C5:43
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       13FDB92E89309FBF59DE0505D595B793C8E40DF3
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a373a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:12 +0000
ROA not before:           Tue 05 Mar 2024 17:50:12 +0000
ROA not after:            Tue 04 Mar 2025 17:55:12 +0000
asID:                     52458
IP address blocks:        2803:480:7::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fd:b9:2e:89:30:9f:bf:59:de:05:05:d5:95:b7:93:c8:e4:0d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:12 2024 GMT
            Not After : Mar  4 17:55:12 2025 GMT
        Subject: CN=3AF71D68D64D1F761B688B2B7700254F4B74C543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:92:7b:f9:2b:34:c4:5e:84:6a:58:7c:72:
                    70:e7:70:98:9e:5d:0c:3c:26:56:bd:57:ee:49:fd:
                    f1:cc:a9:19:65:1d:63:66:3f:49:c8:e2:d5:bf:5a:
                    8f:e8:47:c8:dc:78:be:c6:a9:f6:8e:2c:dd:d7:e2:
                    d3:77:6e:f1:92:d3:79:f5:9a:55:28:68:31:8c:79:
                    e6:51:51:cf:c8:33:29:7f:d1:2c:68:40:a2:56:48:
                    ca:53:3b:cd:0c:2b:21:6c:01:b7:ea:33:ae:c0:03:
                    2d:c1:a8:bc:14:a9:43:cd:d7:26:04:2b:e1:71:64:
                    9a:19:04:b0:be:fe:a8:74:20:6d:55:f2:f4:51:ac:
                    90:3c:f8:4a:5b:73:e9:67:0b:54:0f:ee:d4:53:19:
                    80:6b:c1:f6:d6:06:91:9a:26:34:9e:11:5d:f5:c1:
                    51:65:4c:a0:2e:93:7f:04:92:ac:8e:0e:58:40:e9:
                    57:e8:64:92:d8:07:dc:31:34:54:23:a3:10:39:3a:
                    f6:5e:15:e6:60:02:ec:64:e0:76:1a:9b:35:b5:06:
                    4d:d2:d1:03:af:88:83:43:71:bf:8c:12:e2:d6:62:
                    13:50:83:30:63:b9:1a:15:ba:29:8d:ad:21:1d:a5:
                    13:48:3d:5b:ba:6c:ea:f1:21:f9:92:d9:d8:94:0e:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F7:1D:68:D6:4D:1F:76:1B:68:8B:2B:77:00:25:4F:4B:74:C5:43
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a373a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:7::/64

    Signature Algorithm: sha256WithRSAEncryption
         04:7c:c7:75:da:e4:92:f1:47:8b:06:2f:5d:01:26:3b:6f:fc:
         95:d0:a5:75:9e:df:6e:3f:41:2c:90:a1:6c:97:7c:7e:d5:92:
         73:fd:53:ac:b2:4e:fc:b8:35:83:56:98:6a:18:8d:c3:4f:e4:
         1a:12:ca:24:ae:3c:2b:d0:83:b8:f7:64:01:22:2b:ac:a3:d4:
         f6:a1:81:17:a6:a3:e2:17:db:98:f2:a6:be:86:b9:fb:5a:d4:
         4b:d6:14:63:07:03:66:41:f3:bb:36:a1:4c:e2:18:57:39:ef:
         99:92:de:cc:94:b9:f6:be:b6:31:33:63:73:43:d7:ab:d1:90:
         08:c1:06:f7:22:0e:31:6b:0d:4a:9f:63:89:d6:c2:5c:a4:b4:
         a3:d7:d5:56:2c:58:45:d9:c8:07:89:da:e2:3b:60:91:ba:2b:
         43:e0:b4:90:59:30:b6:00:c1:10:14:10:b3:31:fb:c1:30:47:
         68:45:8a:a0:8f:ef:7f:8b:1a:cd:36:c5:eb:b1:28:2e:e3:17:
         81:25:a0:9f:6a:24:10:af:13:72:1c:78:26:96:37:e9:b5:6a:
         2d:b1:f9:64:da:1c:e3:7c:e0:8e:1b:50:18:e7:69:ad:0b:87:
         03:fc:60:fc:a8:62:bf:d6:f4:11:7f:9c:96:e9:d8:4f:3c:bd:
         d6:dc:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org