Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa
File:                     323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa (raw, json)
Hash identifier:          PVXHlvzrKlTHJpb0oHj+V/SZs2ZG0/lc9dYefzIv3po=
Subject key identifier:   A3:9F:1A:A8:A1:69:C7:C7:FB:89:4D:E9:E5:FF:D2:8F:18:25:05:C1
Certificate issuer:       /CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9
Certificate serial:       7C408F76C4E9F513DA31A55D5C3AF6AAA10C58D4
Authority key identifier: 5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa
Signing time:             Tue 04 Feb 2025 18:51:13 +0000
ROA not before:           Tue 04 Feb 2025 18:46:13 +0000
ROA not after:            Tue 03 Feb 2026 18:51:13 +0000
asID:                     262174
IP address blocks:        2801:0:160::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:40:8f:76:c4:e9:f5:13:da:31:a5:5d:5c:3a:f6:aa:a1:0c:58:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9
        Validity
            Not Before: Feb  4 18:46:13 2025 GMT
            Not After : Feb  3 18:51:13 2026 GMT
        Subject: CN=A39F1AA8A169C7C7FB894DE9E5FFD28F182505C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:65:f3:6f:c0:dc:d6:6a:a2:48:0e:7c:dd:
                    d9:c7:ef:97:71:b0:d4:eb:6d:cb:b2:99:cc:fc:83:
                    bb:2c:bb:33:6a:9b:0d:a6:c5:09:1d:26:20:2f:c9:
                    59:9f:47:d2:be:1f:ee:99:25:d7:28:d3:e0:9a:ca:
                    1e:54:6b:67:4a:79:bd:af:60:de:67:54:94:83:62:
                    80:cd:3a:9e:f5:ee:07:ad:18:10:71:e9:38:73:e6:
                    b9:db:97:34:53:76:3b:6c:89:d9:bf:75:5e:a0:44:
                    c3:fa:65:16:ef:a7:2c:d8:5f:66:e0:9b:0a:9a:37:
                    71:52:3b:a5:79:87:f6:c5:ef:9b:5c:ca:97:c0:84:
                    58:6b:e0:21:5c:a6:f9:68:bf:28:a3:65:2d:16:9c:
                    39:a7:bb:eb:a1:87:8e:ac:a9:29:c6:29:68:d3:88:
                    3c:ef:96:80:7a:d6:7d:52:8b:49:7b:98:47:c1:a3:
                    9b:80:9f:43:0c:de:97:7b:fe:1c:9c:ca:08:0a:5b:
                    48:7b:7c:92:af:35:61:8d:9a:8f:2d:ae:84:a0:da:
                    35:67:70:40:b7:72:5f:78:dc:9d:80:90:0c:95:63:
                    1a:be:93:c7:58:42:e5:9f:cd:61:e5:3c:1d:4b:91:
                    b5:c8:fd:4e:3c:1f:bc:7e:10:13:57:37:12:e3:e9:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9F:1A:A8:A1:69:C7:C7:FB:89:4D:E9:E5:FF:D2:8F:18:25:05:C1
            X509v3 Authority Key Identifier:
                keyid:5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:1b:cf:2f:4e:0e:f6:12:8e:f6:25:80:2b:9e:b0:3b:76:
         68:44:40:9e:a0:fa:8b:9b:e0:84:de:8d:ff:48:aa:84:c0:69:
         f6:a6:c1:0c:81:0f:47:b9:a9:87:22:55:da:f1:8d:58:e6:5c:
         92:29:e3:aa:61:2c:75:0c:4f:75:50:47:71:1c:0d:c7:dc:3c:
         a3:fe:a7:cf:2e:af:76:11:72:6f:b1:97:ce:f2:f5:fd:1d:6e:
         65:17:35:1f:8e:91:fa:f2:5b:49:3e:35:3d:6b:96:1e:7c:b6:
         e2:91:c3:3f:dd:b2:18:92:75:61:fa:95:a2:89:25:53:22:69:
         e6:79:45:e1:fc:a3:ea:b6:e4:7b:1a:e3:25:4a:0d:b1:fb:24:
         f0:87:3c:85:b6:ce:89:da:19:5a:08:4e:2b:2a:d7:20:d4:c1:
         5b:91:38:62:b0:70:60:10:27:43:62:d9:c6:7a:53:7d:75:39:
         9e:59:25:0d:db:6f:23:e9:a1:4e:5d:42:a1:3b:2e:57:f6:b0:
         d1:97:5b:42:07:66:02:fc:a1:38:d9:8c:cd:58:2e:dd:e4:ae:
         90:6c:7c:0a:a9:7d:50:66:ad:b6:25:20:2f:a3:60:4e:14:fb:
         fd:26:10:3d:6b:28:95:5b:7b:ee:2d:63:a0:22:0c:18:10:1a:
         a4:e2:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:45:41 2025 by rpki-client