Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a373a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a373a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          JufyHpDi6tU0tTIewB+C3veucnfYBmFpUBNF5Q4K6HI=
Subject key identifier:   47:6C:B9:14:12:F7:1E:AC:24:43:C3:3F:37:74:82:85:2E:8D:40:08
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       1CCB9036AE4C1B00511E79F5A819622419AF5AAC
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a373a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 04 Feb 2025 18:24:23 +0000
ROA not before:           Tue 04 Feb 2025 18:19:23 +0000
ROA not after:            Tue 03 Feb 2026 18:24:23 +0000
asID:                     52458
IP address blocks:        2803:480:7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cb:90:36:ae:4c:1b:00:51:1e:79:f5:a8:19:62:24:19:af:5a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Feb  4 18:19:23 2025 GMT
            Not After : Feb  3 18:24:23 2026 GMT
        Subject: CN=476CB91412F71EAC2443C33F377482852E8D4008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d8:93:05:73:18:3f:a8:84:81:ac:30:81:52:
                    e9:82:4f:0b:3d:c6:56:77:a7:d6:41:91:27:7b:28:
                    e1:32:d6:98:e2:aa:83:5a:df:e9:3c:62:61:33:87:
                    4f:60:cf:5f:27:94:39:81:4f:19:45:58:4e:5e:c3:
                    c0:18:b2:76:24:0e:ed:7d:6a:20:de:ea:22:b1:9b:
                    a5:8a:82:0e:d7:9a:4f:1f:c7:80:2c:36:d5:bc:89:
                    1b:f0:6d:93:85:dd:f2:c7:2f:cf:0d:2d:35:f9:50:
                    16:26:92:cf:2a:01:d8:57:a0:96:d7:f4:7f:4f:df:
                    2f:ab:f9:94:6b:29:40:f6:3d:a3:de:f0:76:46:92:
                    9a:38:82:b0:8b:08:5f:91:b6:49:c5:74:0b:e0:1f:
                    b5:12:93:c7:2c:1b:48:c7:0c:a3:b3:93:8e:53:b3:
                    43:8a:03:f1:d5:96:76:3c:87:4b:a9:14:08:cb:d3:
                    e0:8f:d6:ed:40:c4:ef:ca:e5:87:8b:06:19:51:1b:
                    f7:95:e1:dc:66:b1:58:45:0c:a9:d4:fb:dd:99:49:
                    e7:3c:bc:d1:5f:24:53:75:6b:d7:52:7a:02:6c:81:
                    7f:d0:d1:b3:6d:d1:3e:cf:8d:90:81:60:01:2c:b3:
                    29:d5:dd:8a:8d:29:bd:42:af:43:99:f6:6d:29:6f:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6C:B9:14:12:F7:1E:AC:24:43:C3:3F:37:74:82:85:2E:8D:40:08
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a373a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:7::/64

    Signature Algorithm: sha256WithRSAEncryption
         4f:e7:3f:b1:73:f9:b3:d7:cd:4d:9b:87:60:58:0c:f2:c0:c9:
         0e:13:0c:76:be:ae:e3:78:57:92:73:cb:3a:7a:f6:9e:1e:ce:
         75:a9:db:bc:ed:95:28:7d:a4:b8:17:1a:9a:a1:b9:0c:b3:ef:
         9f:38:ac:86:54:7c:f1:17:60:53:b5:41:9a:db:a7:18:96:9f:
         f1:80:a5:9f:79:ba:6e:20:50:ff:f4:51:20:5b:d7:36:16:68:
         ab:4a:bf:d0:10:e7:f7:9e:31:49:54:e2:58:4f:85:5e:e3:9a:
         82:05:67:e7:5c:97:de:fa:3e:96:bb:1a:4e:06:b7:e7:b8:9e:
         77:6c:12:90:b6:67:3c:0b:17:bf:76:7a:e4:d3:a2:34:b5:03:
         d5:c2:ad:5e:44:03:54:d1:fb:3d:a8:eb:31:5c:b0:38:57:8c:
         cc:5a:d9:a7:3f:9c:55:d8:cc:39:b2:0a:a3:07:c8:b3:54:e5:
         18:fb:0d:60:21:ee:3b:97:0b:56:ef:48:62:0a:ae:c1:fc:70:
         ac:df:c7:0f:1f:20:44:56:02:5f:3d:ae:80:1a:76:98:22:c0:
         4b:39:6d:58:fc:86:17:6f:66:41:a6:dc:d7:cd:b3:19:e4:81:
         0a:31:74:f5:3f:52:41:a8:09:a3:bd:cb:0c:40:61:c1:da:db:
         f4:02:62:ee
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUHMuQNq5MGwBRHnn1qBliJBmvWqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG
RjQ3NzAyODAeFw0yNTAyMDQxODE5MjNaFw0yNjAyMDMxODI0MjNaMDMxMTAvBgNV
BAMTKDQ3NkNCOTE0MTJGNzFFQUMyNDQzQzMzRjM3NzQ4Mjg1MkU4RDQwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO2JMFcxg/qISBrDCBUumCTws9
xlZ3p9ZBkSd7KOEy1pjiqoNa3+k8YmEzh09gz18nlDmBTxlFWE5ew8AYsnYkDu19
aiDe6iKxm6WKgg7Xmk8fx4AsNtW8iRvwbZOF3fLHL88NLTX5UBYmks8qAdhXoJbX
9H9P3y+r+ZRrKUD2PaPe8HZGkpo4grCLCF+RtknFdAvgH7USk8csG0jHDKOzk45T
s0OKA/HVlnY8h0upFAjL0+CP1u1AxO/K5YeLBhlRG/eV4dxmsVhFDKnU+92ZSec8
vNFfJFN1a9dSegJsgX/Q0bNt0T7PjZCBYAEssynV3YqNKb1Cr0OZ9m0pbwIPAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUR2y5FBL3HqwkQ8M/N3SChS6NQAgwHwYDVR0j
BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4
OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0
RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy
OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz
QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTM3M2Ez
YTJmMzYzNDJkMzYzNDIwM2QzZTIwMzUzMjM0MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACgDBIAA
BwAAMA0GCSqGSIb3DQEBCwUAA4IBAQBP5z+xc/mz181Nm4dgWAzywMkOEwx2vq7j
eFeSc8s6evaeHs51qdu87ZUofaS4FxqaobkMs++fOKyGVHzxF2BTtUGa26cYlp/x
gKWfebpuIFD/9FEgW9c2FmirSr/QEOf3njFJVOJYT4Ve45qCBWfnXJfe+j6WuxpO
BrfnuJ53bBKQtmc8Cxe/dnrk06I0tQPVwq1eRANU0fs9qOsxXLA4V4zMWtmnP5xV
2Mw5sgqjB8izVOUY+w1gIe47lwtW70hiCq7B/HCs38cPHyBEVgJfPa6AGnaYIsBL
OW1Y/IYXb2ZBptzXzbMZ5IEKMXT1P1JBqAmjvcsMQGHB2tv0AmLu
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:21 2025 by rpki-client