Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a3a2f33322d3634203d3e203532343538.roa
File:                     323830333a3438303a3a2f33322d3634203d3e203532343538.roa (raw, json)
Hash identifier:          4Qy66xNN9gqBWvMlUMyOl4z8PNQCjO5yVxPiuH5MQYU=
Subject key identifier:   B6:E5:35:92:EF:A7:3C:4F:F3:24:1C:AB:FB:45:1F:67:1F:0C:B8:C6
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       4F35C14ED214E418E76ABF5D638F46085D11F7A4
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a3a2f33322d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:07 +0000
ROA not before:           Tue 05 Mar 2024 17:50:07 +0000
ROA not after:            Tue 04 Mar 2025 17:55:07 +0000
asID:                     52458
IP address blocks:        2803:480::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:35:c1:4e:d2:14:e4:18:e7:6a:bf:5d:63:8f:46:08:5d:11:f7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:07 2024 GMT
            Not After : Mar  4 17:55:07 2025 GMT
        Subject: CN=B6E53592EFA73C4FF3241CABFB451F671F0CB8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:90:d7:2c:0f:80:36:e2:27:01:82:ae:5e:f0:
                    96:51:f5:7e:c9:4d:2e:f9:7a:86:71:19:11:93:dc:
                    77:b0:94:31:ff:75:43:be:1a:b6:0e:ad:c8:ab:36:
                    a5:ff:eb:5d:7f:50:a9:2b:bc:19:3c:6b:a3:97:28:
                    ff:81:96:b2:67:ba:13:3f:ba:54:96:4c:d6:7f:cb:
                    ae:36:00:a3:0e:c0:57:a3:68:02:e1:dd:51:dd:c3:
                    0e:36:92:b1:69:8a:03:9b:66:5d:b3:e6:f8:36:a5:
                    1b:c4:75:04:0f:6a:d3:58:f0:50:79:c7:23:97:ba:
                    d0:2e:6e:ed:69:bf:fc:a4:50:32:9c:c3:d7:57:4a:
                    fc:88:91:da:a0:7f:d6:b0:a5:b9:3b:e2:17:80:6e:
                    e3:cb:f5:2a:b4:41:95:31:b0:86:e3:d8:9e:b3:6f:
                    1b:43:0a:49:d5:a4:2b:82:83:a6:63:47:66:74:41:
                    3a:57:7a:95:6d:41:1d:9e:70:aa:ed:bb:a1:dd:fa:
                    fb:42:18:be:9b:21:44:ac:9d:44:4c:88:97:3d:35:
                    b9:e3:d4:e5:5a:24:2c:fa:6c:ff:9a:79:90:02:7c:
                    f7:01:1c:a6:17:ce:e3:5e:48:45:66:86:bc:f4:b7:
                    00:e2:26:ef:64:14:7f:79:ef:d9:95:dc:c3:5e:0a:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E5:35:92:EF:A7:3C:4F:F3:24:1C:AB:FB:45:1F:67:1F:0C:B8:C6
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a3a2f33322d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:c9:45:05:41:d6:a0:50:72:e2:ad:2b:af:51:94:e0:a2:
         bc:9f:ca:f3:a3:ac:98:76:12:42:ab:4b:27:87:10:4a:f1:fb:
         6f:10:cc:6f:07:05:fc:38:f9:68:5a:b3:d2:fb:c6:2b:9a:c7:
         57:8d:f2:de:9b:3c:d3:ab:d8:d8:99:d0:63:c5:f2:9b:6a:32:
         bd:0f:3c:13:10:c2:dd:0e:07:9d:59:06:e0:96:3f:c9:31:11:
         16:ec:87:2a:67:6f:b1:fb:d6:08:6f:df:58:c2:cd:a0:a6:70:
         1f:b9:e8:a1:b3:ae:1f:05:7e:3c:e5:63:af:cc:6e:8f:9a:80:
         77:b2:1d:3a:9b:dc:d6:54:a6:2f:36:9c:e7:c2:ce:98:11:86:
         0f:5a:9a:2f:ed:27:57:95:fc:f2:27:d5:20:1f:1d:ec:9b:44:
         d1:d3:c2:36:ba:41:8e:f1:e2:93:b0:f1:86:43:d5:a1:00:59:
         01:89:ea:ba:71:75:52:30:a6:60:b1:cc:f8:74:61:68:27:ab:
         e0:59:b8:83:20:63:44:e1:76:47:a1:b2:9d:91:eb:5a:b1:84:
         85:4d:24:49:08:42:a4:1e:23:f6:fb:fa:a2:30:fb:a7:52:80:
         2b:d1:32:e6:2c:b7:51:b4:d6:04:66:eb:d5:ae:8e:ca:76:ab:
         54:ca:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org