Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/323830313a31353a333030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31353a333030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          Czb7Zh4VunN4rTGnGsqNpP/kOi/AQtVWzPgDeMW9dSI=
Subject key identifier:   D3:9B:1A:AB:42:AD:B1:3D:4E:0D:42:15:AE:FE:B2:BB:75:D3:29:1D
Certificate issuer:       /CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9
Certificate serial:       1A7200DA882031641D8CFB5851A6E1E2BE79B00B
Authority key identifier: 1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/323830313a31353a333030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 18:23:28 +0000
ROA not before:           Tue 04 Feb 2025 18:18:28 +0000
ROA not after:            Tue 03 Feb 2026 18:23:28 +0000
asID:                     265696
IP address blocks:        2801:15:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:72:00:da:88:20:31:64:1d:8c:fb:58:51:a6:e1:e2:be:79:b0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9
        Validity
            Not Before: Feb  4 18:18:28 2025 GMT
            Not After : Feb  3 18:23:28 2026 GMT
        Subject: CN=D39B1AAB42ADB13D4E0D4215AEFEB2BB75D3291D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:a8:5a:6c:2f:93:79:55:15:39:62:0f:03:
                    3a:a9:e3:d6:c3:05:4a:d5:1f:26:53:db:85:89:72:
                    c6:c4:75:78:e1:a0:68:7d:9c:b0:4e:66:cd:2a:f8:
                    2a:dd:b8:bd:57:b7:f0:92:66:5b:09:28:22:a1:82:
                    70:8b:f4:1a:6a:3e:3b:c4:b5:bb:08:3c:80:07:5c:
                    1e:55:ae:b3:48:8a:0e:e7:61:86:c0:85:74:28:43:
                    c6:53:f5:88:2b:b3:4b:1a:86:41:4c:5d:eb:bc:b9:
                    fd:3e:3d:cb:4c:d9:a0:7e:f5:fb:05:d2:71:8b:f7:
                    10:3b:d5:95:39:a3:94:22:90:fc:c5:9f:0c:ee:bc:
                    a6:22:c1:2b:69:74:fc:f0:da:f4:ea:8c:5f:06:72:
                    16:fc:aa:49:bd:1d:7d:c4:b7:73:7a:8c:d0:5a:c3:
                    33:43:00:c8:34:16:7e:0e:42:b2:f0:8d:98:8a:4a:
                    fc:25:50:b6:ec:45:9e:59:a9:66:8e:60:47:9d:4c:
                    b2:6c:63:f9:89:5e:ea:66:86:ba:c9:4c:c9:d9:04:
                    da:6f:3b:34:04:4c:55:c9:3e:af:5c:28:7c:e2:94:
                    07:f1:4d:1e:bd:07:3e:36:26:d4:2c:93:4a:a0:d1:
                    32:0c:a7:bb:a2:82:b7:6f:5b:bb:6a:27:d8:93:6f:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:1A:AB:42:AD:B1:3D:4E:0D:42:15:AE:FE:B2:BB:75:D3:29:1D
            X509v3 Authority Key Identifier:
                keyid:1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/323830313a31353a333030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:b8:1f:b6:d6:38:4b:00:e5:89:fd:b4:ce:45:46:91:c7:dc:
         72:e1:fe:a7:81:68:ae:6b:fa:25:51:87:bd:ad:a0:56:37:57:
         8f:4b:2d:99:04:cc:17:98:84:9f:32:f2:91:f1:7c:f1:1e:81:
         dd:05:f3:78:7b:d0:f5:6f:25:b9:3a:2d:4a:1d:a4:ed:5b:c4:
         4e:a7:d0:69:66:0a:e3:b4:4c:a0:3d:dc:9b:1f:05:df:ac:a1:
         a4:75:da:37:6b:92:4e:45:d5:d5:07:27:1a:67:fa:69:6c:e7:
         4d:a2:18:b4:13:1c:c7:45:f8:f0:7d:e2:14:54:36:4c:3c:6a:
         8e:81:7c:02:48:f4:2f:72:6d:01:2a:cd:54:3c:09:54:4f:56:
         b8:bb:24:f4:88:77:00:63:65:58:d8:4d:c9:d2:e1:8b:2e:78:
         bf:99:e3:5b:63:69:4c:b1:4d:98:7e:46:6d:3d:9b:ea:b6:f2:
         3d:68:f4:99:ef:20:bd:23:78:79:b3:96:91:df:f3:ec:fa:81:
         ab:c6:9a:11:6a:d9:73:b2:8b:db:91:ba:22:fa:e8:26:b0:45:
         8a:88:d4:6b:b1:41:5d:db:35:36:bd:90:fb:a7:49:32:d2:f0:
         32:15:9f:34:d8:bd:24:08:8d:e5:c6:94:78:10:b0:1d:e1:17:
         02:22:da:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:15 2025 by rpki-client