Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e203532323735.roa
File:                     323830313a31663a363830303a3a2f34382d3438203d3e203532323735.roa (raw, json)
Hash identifier:          2MHlSE/khlfKm4/QqdBoNzGfWJ9sOxyAi0KHDGQKF18=
Subject key identifier:   AD:AB:F9:E8:89:1C:8F:81:17:8A:20:E6:1B:A7:59:B1:D3:81:CA:AC
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       57DA145F6B166EBFE21BF45D2E779DE0CB8D96A2
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e203532323735.roa
Signing time:             Tue 04 Feb 2025 18:54:00 +0000
ROA not before:           Tue 04 Feb 2025 18:49:00 +0000
ROA not after:            Tue 03 Feb 2026 18:54:00 +0000
asID:                     52275
IP address blocks:        2801:1f:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:da:14:5f:6b:16:6e:bf:e2:1b:f4:5d:2e:77:9d:e0:cb:8d:96:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Feb  4 18:49:00 2025 GMT
            Not After : Feb  3 18:54:00 2026 GMT
        Subject: CN=ADABF9E8891C8F81178A20E61BA759B1D381CAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:9e:a9:65:54:70:e9:b7:89:67:a9:4a:14:
                    75:cf:c1:bd:7a:ae:34:16:3c:04:03:29:5f:2a:65:
                    97:37:5e:79:6c:e6:5a:19:39:93:76:67:65:fd:f2:
                    d5:53:2b:21:25:56:13:59:a0:88:07:2c:25:30:b8:
                    6e:10:98:9e:9d:fc:af:22:cf:5e:04:87:a9:eb:29:
                    e8:10:5b:a2:10:b1:b2:29:bc:76:e6:7f:4a:d8:f1:
                    0a:1a:31:24:a5:ee:db:ce:ba:cc:f8:58:1c:56:82:
                    57:16:13:cb:bd:f0:44:73:b5:ac:1d:98:75:7b:f8:
                    bf:e0:6c:be:fa:e5:c4:a6:c5:77:d1:34:05:aa:bb:
                    67:13:99:b9:79:fc:6e:1b:df:ad:ef:8c:99:40:00:
                    29:f3:52:17:42:e1:b0:55:0a:f2:9d:b6:c4:d3:65:
                    24:05:79:0f:62:5c:80:2a:62:4d:0b:ba:96:fe:4f:
                    6d:20:0d:b8:46:e1:16:a3:e8:64:4f:95:aa:43:1e:
                    46:72:e6:20:79:67:32:44:1a:e6:f9:95:ba:43:d9:
                    68:02:1e:49:1a:3b:1a:85:94:e8:22:58:c2:85:ec:
                    f1:0f:eb:7f:04:e1:70:0c:40:45:81:16:1e:80:b3:
                    65:42:0a:a0:9a:df:ad:7e:a3:cc:5b:7b:39:60:78:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AB:F9:E8:89:1C:8F:81:17:8A:20:E6:1B:A7:59:B1:D3:81:CA:AC
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e203532323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:1d:8b:bf:32:70:8b:9e:59:8b:df:94:47:d1:03:2c:0e:
         48:fc:5f:f4:c6:fd:8a:a7:db:91:0a:07:d8:41:03:fb:ba:86:
         a1:9e:f5:4d:af:f5:a5:83:1f:da:14:b7:8f:9d:ea:60:64:5f:
         4c:14:44:ef:f7:84:d0:43:dc:d5:b7:0b:fe:07:6d:ad:88:a7:
         36:7d:a8:7c:2b:38:b2:41:95:4c:2b:19:56:79:30:c0:5a:20:
         d5:ac:0e:dc:b8:1b:b5:ed:da:91:ff:9e:a7:7b:af:19:9d:62:
         6d:dd:bb:96:db:c0:76:2f:7a:53:5d:ee:d3:be:38:6d:ea:5e:
         bc:70:eb:62:6d:9a:91:01:cf:68:2e:e9:ed:2d:e5:27:33:c3:
         5b:94:2f:93:7f:79:77:d6:d6:b4:8a:d0:3c:c9:92:1b:45:bb:
         28:3c:84:58:b5:b5:00:3d:4a:85:c8:eb:00:5e:08:e6:29:db:
         ef:ee:d7:03:cf:ea:f8:25:05:3a:34:80:a8:ad:63:22:e7:94:
         16:4d:70:39:25:0a:c1:dd:7a:e2:a3:88:1f:34:90:49:e7:77:
         3a:0a:05:7d:d6:c9:84:6c:4a:b4:c9:a0:57:60:7a:94:0f:39:
         28:2e:22:94:34:ee:f0:28:07:89:94:28:31:9f:1d:a2:46:59:
         fc:8c:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:33 2025 by rpki-client