Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/323830313a31313a313030303a3a2f34382d3438203d3e20323634363333.roa
File:                     323830313a31313a313030303a3a2f34382d3438203d3e20323634363333.roa (raw, json)
Hash identifier:          3GkxxEAVLbjgPcWboBW8exlCyPr2KhajF1CNkvML5zs=
Subject key identifier:   11:8A:B9:1F:40:82:EF:CC:CA:2C:E2:B5:28:E5:99:1C:9D:72:62:30
Certificate issuer:       /CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
Certificate serial:       4493ED8B4B6FA1845FCE113E151523EB3CC76B82
Authority key identifier: 25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/323830313a31313a313030303a3a2f34382d3438203d3e20323634363333.roa
Signing time:             Tue 04 Feb 2025 18:31:48 +0000
ROA not before:           Tue 04 Feb 2025 18:26:48 +0000
ROA not after:            Tue 03 Feb 2026 18:31:48 +0000
asID:                     264633
IP address blocks:        2801:11:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:93:ed:8b:4b:6f:a1:84:5f:ce:11:3e:15:15:23:eb:3c:c7:6b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
        Validity
            Not Before: Feb  4 18:26:48 2025 GMT
            Not After : Feb  3 18:31:48 2026 GMT
        Subject: CN=118AB91F4082EFCCCA2CE2B528E5991C9D726230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:fa:85:92:72:70:d6:1c:5a:0d:72:0b:49:
                    f7:e6:2f:df:63:bb:e7:79:30:fa:7a:82:e0:2d:01:
                    c5:b3:9d:5c:dd:fc:7d:52:ca:5d:2a:e3:c2:88:d8:
                    ec:c8:c9:bd:8a:d5:52:a0:6b:c1:ce:33:ea:67:81:
                    18:4b:a7:89:7c:a6:dd:99:b9:67:f3:be:66:2c:e6:
                    0c:02:2c:be:a1:51:ab:bd:7e:ea:06:15:26:81:59:
                    75:17:f0:37:fb:fc:10:17:5b:07:43:a0:7e:ab:ee:
                    68:44:7d:ff:ca:61:c3:99:42:82:f6:43:9c:3a:99:
                    e7:0c:9a:7f:e9:28:72:c1:e6:cc:f0:9e:de:be:ca:
                    92:f0:fb:74:3a:9c:48:d9:37:5e:b0:5a:6b:a3:bb:
                    14:e8:83:40:c4:27:ac:43:4e:a3:97:d6:fb:12:1a:
                    82:27:75:b5:33:43:85:c0:28:ac:dd:f3:70:be:a1:
                    c3:2e:8d:50:86:46:85:c9:e6:b1:f5:95:21:47:79:
                    a0:f3:bd:25:4b:6e:84:72:b6:ff:ff:28:b6:53:72:
                    05:fc:ee:68:5d:80:54:2d:89:30:65:d6:27:97:b1:
                    5c:55:28:ef:db:f2:e6:bc:07:48:79:87:7f:a9:1b:
                    41:71:ea:91:3b:d6:8e:84:d8:22:8a:ef:14:5c:6c:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8A:B9:1F:40:82:EF:CC:CA:2C:E2:B5:28:E5:99:1C:9D:72:62:30
            X509v3 Authority Key Identifier:
                keyid:25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/323830313a31313a313030303a3a2f34382d3438203d3e20323634363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:45:22:6b:c5:b4:f6:35:b8:3c:44:46:51:65:92:dd:c8:e5:
         71:e2:ac:19:3b:15:dc:65:c4:f4:e8:40:18:47:95:79:cf:1a:
         2a:bf:f9:0c:9e:06:41:9d:c7:3a:75:fa:1a:d4:e5:44:ee:03:
         0d:54:57:1a:f3:d2:7d:0a:6a:3b:74:25:db:73:65:e8:bf:69:
         a6:5a:0c:da:63:0c:64:f8:e0:74:87:2e:c5:5e:ce:d0:e8:f2:
         ca:e6:51:42:d6:5a:43:25:37:d5:3d:ef:40:c7:e6:56:0d:f5:
         b3:b2:b8:ac:75:a1:2f:60:7e:ae:42:cf:fb:d4:de:ad:b0:04:
         31:2a:24:62:9b:c5:b7:aa:f3:41:00:29:c9:95:df:76:c5:bc:
         88:fe:3a:66:16:03:39:34:c6:4c:0c:11:71:d9:41:12:2b:8c:
         4b:25:8c:33:46:f9:02:9d:ad:e0:95:d8:1c:e2:7d:9a:10:e3:
         33:a0:d4:9d:a5:7c:72:51:bb:db:02:85:12:b1:da:8b:88:a3:
         e3:15:3c:34:42:39:00:ec:fa:92:d7:c8:e4:07:16:c3:af:08:
         09:b5:56:52:31:06:4d:c8:35:9d:05:82:54:13:72:ce:49:75:
         81:a9:75:ea:37:86:d5:81:ea:7d:28:1a:90:db:3d:3c:18:3d:
         85:d6:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:31 2025 by rpki-client