Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS11311.roa
File:                     AS11311.roa (raw, json)
Hash identifier:          arzq0cghQbXbplOF9ET57non3We4uaSxhQdnVt7Ygpw=
Subject key identifier:   79:48:FD:94:AF:C2:19:2D:50:14:86:AA:87:D8:53:F2:20:CD:78:30
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       3BDC2D36B3FC7A71FD9B58AF0B5CE9360D703C76
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS11311.roa
Signing time:             Tue 05 Mar 2024 18:07:55 +0000
ROA not before:           Tue 05 Mar 2024 18:02:55 +0000
ROA not after:            Tue 04 Mar 2025 18:07:55 +0000
asID:                     11311
IP address blocks:        168.226.64.0/20 maxlen: 20
                          186.61.176.0/20 maxlen: 20
                          190.50.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dc:2d:36:b3:fc:7a:71:fd:9b:58:af:0b:5c:e9:36:0d:70:3c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:55 2024 GMT
            Not After : Mar  4 18:07:55 2025 GMT
        Subject: CN=7948FD94AFC2192D501486AA87D853F220CD7830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:19:7b:57:4c:59:94:63:b5:66:cd:26:aa:0a:
                    22:7e:d9:d1:f7:04:9b:41:bc:13:99:26:3f:67:53:
                    eb:e6:7c:b0:c8:b1:d0:37:f5:c9:7c:e4:6b:a3:47:
                    a6:f5:07:41:e2:37:71:9a:85:a6:eb:f3:5f:74:6d:
                    ca:d1:c3:3c:fa:d1:d9:a0:d2:bf:bc:6d:bc:bb:0d:
                    ee:e0:5a:ff:cb:be:de:ae:f4:d6:bf:fc:c4:85:4d:
                    98:3c:12:ed:e2:1c:3c:c3:a7:f3:62:81:24:64:7c:
                    ff:e2:17:0a:7e:60:16:19:82:a1:21:6f:0a:76:a3:
                    46:d8:45:fe:11:cb:92:6c:9f:da:f2:8f:b4:4a:e1:
                    37:ca:91:20:4c:c0:91:4b:8f:6f:fc:50:8b:ba:f0:
                    c3:bf:2d:48:dd:70:c8:74:6b:6c:fe:fc:ec:a6:37:
                    26:10:15:cb:8d:77:3d:ed:52:6b:bc:c3:77:5f:9d:
                    99:0a:87:50:d7:d5:e0:0c:e1:ab:58:41:21:09:30:
                    04:96:90:b8:6e:1c:7f:8a:07:1e:12:1a:fe:1b:53:
                    07:26:b5:d9:02:85:be:f4:d7:f0:e5:60:73:5c:37:
                    81:46:88:bf:ab:db:37:23:ae:e1:6d:f3:ee:e4:26:
                    96:5f:ad:7a:1e:5e:5c:64:72:89:37:81:a9:c9:b5:
                    3f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:FD:94:AF:C2:19:2D:50:14:86:AA:87:D8:53:F2:20:CD:78:30
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS11311.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.226.64.0/20
                  186.61.176.0/20
                  190.50.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:6c:b2:d4:2a:f5:dd:fa:23:6d:83:96:7e:f5:a3:08:46:b4:
         ce:b0:55:9a:50:1e:94:8d:a2:57:26:8c:17:9e:c8:73:e7:4b:
         9f:04:43:1c:77:fa:02:72:62:c3:7b:0a:1d:01:86:87:d3:bd:
         3f:54:16:50:2c:9d:82:a5:f8:5b:55:9e:d0:fc:4e:f4:bc:e8:
         c9:8a:71:33:16:58:49:d1:ed:07:ce:30:f6:f8:c8:f5:fa:cc:
         2c:f8:88:c5:d5:ee:66:e9:f9:7d:7b:32:ee:c1:a9:19:f1:ea:
         6d:ad:7c:13:6b:90:d2:4c:bd:dd:2a:d0:90:cf:67:fb:2b:da:
         40:ed:4b:10:7d:47:01:31:fd:29:fd:21:42:c0:48:d5:13:72:
         25:23:c2:97:9b:6c:8c:71:98:9c:0c:c0:5d:43:32:5f:60:c0:
         8c:34:f7:e3:50:21:55:fa:4b:97:27:72:c5:90:59:76:22:31:
         7e:d7:1f:a6:83:09:93:09:98:0b:13:21:58:a9:d0:38:57:e6:
         32:f3:9f:a4:ee:6a:05:df:ca:be:66:c0:3a:d7:bd:10:62:61:
         9e:da:75:8f:3a:71:b7:b8:cd:df:3a:f0:57:60:6d:79:9f:57:
         10:b9:5c:96:0a:71:49:f1:42:45:59:78:14:d9:0a:6e:d4:93:
         a1:8c:42:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org