Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/323830313a3137313a3a2f34352d3435203d3e20323732313135.roa
File:                     323830313a3137313a3a2f34352d3435203d3e20323732313135.roa (raw, json)
Hash identifier:          0DWQM3vrY6Eh7pxFIu/TnssXaqHcCDzcXsL3FieexqE=
Subject key identifier:   14:5F:4E:2A:4C:3D:C3:CE:3B:13:49:37:15:D1:3C:0A:E7:7B:7A:95
Certificate issuer:       /CN=D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1
Certificate serial:       06795913A51CC1B2D532B9C883F11F52348AF649
Authority key identifier: D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/323830313a3137313a3a2f34352d3435203d3e20323732313135.roa
Signing time:             Tue 04 Feb 2025 20:07:27 +0000
ROA not before:           Tue 04 Feb 2025 20:02:27 +0000
ROA not after:            Tue 03 Feb 2026 20:07:27 +0000
asID:                     272115
IP address blocks:        2801:171::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:79:59:13:a5:1c:c1:b2:d5:32:b9:c8:83:f1:1f:52:34:8a:f6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1
        Validity
            Not Before: Feb  4 20:02:27 2025 GMT
            Not After : Feb  3 20:07:27 2026 GMT
        Subject: CN=145F4E2A4C3DC3CE3B13493715D13C0AE77B7A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:a2:c1:a8:fc:09:51:a9:0e:83:4d:91:53:
                    e8:37:73:57:be:f8:ef:6b:5b:d0:9f:c4:e2:63:e0:
                    0b:0e:00:77:4f:fa:22:d2:ae:05:6e:89:77:c4:3c:
                    82:7f:d0:e4:07:65:c6:b8:e8:c6:41:35:4d:92:23:
                    e9:de:68:a8:5e:e3:bb:75:28:82:da:3d:36:6f:35:
                    22:e1:9d:77:0c:72:0f:dc:cb:13:50:6f:bd:85:e3:
                    97:b5:e1:cf:d5:51:9e:e4:17:c0:7c:e5:73:b4:3d:
                    32:9c:1c:16:4e:5e:90:8c:7e:36:6c:c4:91:93:b2:
                    ee:6b:47:5c:c8:7d:48:01:bd:a1:88:de:55:9b:d4:
                    67:b5:70:5e:33:26:90:86:61:43:de:2d:d8:f2:73:
                    f0:78:40:de:8f:39:c8:e1:df:a7:e2:f0:76:a7:5b:
                    14:1d:bc:88:c1:9c:be:1f:14:20:5c:70:b6:16:f1:
                    9f:e9:35:60:55:85:56:b9:2a:7a:25:81:75:84:8f:
                    46:30:60:a8:89:b0:5f:b1:dd:26:73:3e:48:24:b0:
                    70:86:7c:cf:8c:e1:ce:6d:54:19:f5:b1:cd:8b:01:
                    da:7c:0b:4c:65:1f:83:04:56:b0:93:33:7f:25:3f:
                    02:5a:a3:47:f1:78:b4:cb:be:4c:7a:7b:68:cf:f9:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5F:4E:2A:4C:3D:C3:CE:3B:13:49:37:15:D1:3C:0A:E7:7B:7A:95
            X509v3 Authority Key Identifier:
                keyid:D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/323830313a3137313a3a2f34352d3435203d3e20323732313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:171::/45

    Signature Algorithm: sha256WithRSAEncryption
         29:85:b3:1e:c9:e2:06:a2:10:aa:33:7f:89:6c:d9:ec:8c:af:
         63:5a:32:b2:80:2a:d9:89:86:b7:57:24:c7:d3:03:d3:c6:11:
         55:fc:5e:6f:5d:82:b5:69:c9:50:65:b3:5c:95:e2:6e:e9:fd:
         84:e4:41:37:b7:50:1c:e9:50:b6:2e:98:41:44:3c:51:0e:3f:
         d4:5b:c8:c1:13:13:01:55:09:90:75:cc:94:28:69:6a:5a:a8:
         3a:3f:86:f2:a8:6b:90:eb:94:be:2e:a0:87:b0:0b:e0:b2:af:
         4a:10:c2:63:c4:4f:e8:60:86:35:7f:e7:d2:a7:23:26:87:5e:
         52:29:e6:68:81:9a:9f:4d:7f:b1:38:7a:47:ca:a6:5a:76:ec:
         bc:25:93:a0:d0:da:b9:8d:43:e1:0a:cf:a5:8e:68:c7:bc:56:
         4c:a2:16:9d:96:af:fa:7c:81:da:2d:9d:25:d7:db:34:4d:72:
         da:b2:e2:cf:e3:32:77:96:25:cb:c5:4c:62:f1:01:f4:e1:7d:
         5e:32:85:0b:fe:d1:56:dc:32:b6:dc:6c:b5:d3:72:fb:8f:be:
         04:c0:a8:c0:b0:fd:14:e5:b9:60:8d:1e:c9:f0:43:42:83:e9:
         4f:9d:5b:d9:9d:dd:15:31:e7:78:66:5b:aa:a5:64:78:0f:d3:
         d0:f2:ee:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:47:40 2025 by rpki-client