Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3434203d3e203134303830.roa
File:                     323830313a3137633a3a2f34342d3434203d3e203134303830.roa (raw, json)
Hash identifier:          hNRsHwkAbeubl+CghbeROiRmDE4rVAKPqscX3FV821g=
Subject key identifier:   69:2D:94:EF:80:34:87:E0:B4:DD:91:AB:6D:AE:6D:38:B2:85:5B:61
Certificate issuer:       /CN=81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB
Certificate serial:       35EE5E98399BEDF0B0DEDE85B92A14DCE04AE284
Authority key identifier: 81:26:4D:0C:F8:45:C6:5F:EB:8A:7B:CD:B3:CE:DC:BA:64:65:2E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3434203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:04:00 +0000
ROA not before:           Tue 04 Feb 2025 17:59:00 +0000
ROA not after:            Tue 03 Feb 2026 18:04:00 +0000
asID:                     14080
IP address blocks:        2801:17c::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ee:5e:98:39:9b:ed:f0:b0:de:de:85:b9:2a:14:dc:e0:4a:e2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB
        Validity
            Not Before: Feb  4 17:59:00 2025 GMT
            Not After : Feb  3 18:04:00 2026 GMT
        Subject: CN=692D94EF803487E0B4DD91AB6DAE6D38B2855B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:7d:dd:b1:4d:a1:fb:f4:60:86:e0:ed:82:
                    33:46:19:a7:76:bc:04:bb:9d:85:d0:dc:36:68:5e:
                    f0:27:ab:7d:0d:d0:8a:bd:5c:70:3f:60:0b:4b:da:
                    1c:e1:b4:21:1f:9e:c9:ba:04:7a:89:5d:7e:57:73:
                    09:3c:dd:4b:0b:c6:25:92:dc:2d:86:a6:61:f3:1a:
                    94:08:bc:17:3b:0c:ed:f4:e0:c6:c2:69:bd:b8:67:
                    68:91:86:97:13:93:f7:3a:2a:d2:ee:eb:36:83:e4:
                    b7:be:4b:e1:7c:08:72:fa:2f:11:d6:87:96:3f:93:
                    54:02:b6:bc:a6:fa:0a:52:1e:ce:10:05:36:db:19:
                    89:58:cd:0f:2d:41:e4:a2:0a:80:09:b7:dd:b3:a9:
                    9e:e0:34:66:25:f9:5b:d7:6c:b9:ec:4f:eb:46:4a:
                    ac:9e:fb:2a:f8:52:fd:87:00:3d:1d:10:0e:ed:ba:
                    c5:cf:0a:61:0c:e8:3a:2b:5f:15:94:ab:be:1f:ff:
                    8b:74:67:41:35:73:3a:49:d6:c4:f8:3e:ef:a0:33:
                    3b:1e:f9:ff:f1:60:a4:e7:65:26:ee:36:15:07:eb:
                    17:90:98:b2:4e:d2:d3:ce:3a:12:6f:71:6c:d9:fc:
                    dc:3f:8c:0c:18:ed:d4:9b:ad:98:4e:5a:7e:aa:7e:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2D:94:EF:80:34:87:E0:B4:DD:91:AB:6D:AE:6D:38:B2:85:5B:61
            X509v3 Authority Key Identifier:
                keyid:81:26:4D:0C:F8:45:C6:5F:EB:8A:7B:CD:B3:CE:DC:BA:64:65:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3434203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17c::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:b0:54:3d:1d:2d:bb:4a:f1:1f:ed:33:38:f9:7d:c7:69:e9:
         7c:d0:dd:d2:12:e6:c5:6f:7b:57:9f:53:ab:0b:75:06:80:ca:
         03:bf:df:6e:9b:3e:6c:8a:7a:aa:34:47:93:69:55:df:70:aa:
         af:8f:59:e5:e5:8d:c6:24:60:f8:24:df:b8:79:19:f1:d3:3e:
         57:30:2c:2f:67:7c:6e:2e:4a:96:5b:53:7f:64:06:fb:42:9f:
         7e:23:0d:16:f6:88:8c:19:cc:8c:4f:2b:7c:bc:f8:8c:ec:16:
         8a:f5:c4:42:52:dc:e6:d8:67:1a:c0:36:35:3e:40:9a:be:d4:
         63:7b:7d:30:77:a9:4b:4e:b4:dc:18:80:b7:47:11:d7:20:17:
         39:46:8d:c5:b7:d4:56:68:1e:ce:e1:5a:06:19:f3:90:06:de:
         4b:f0:56:50:ca:4e:67:32:ff:3a:d2:33:5b:76:28:52:64:1a:
         d4:09:fa:68:1b:2c:31:1a:ac:dc:d3:0c:03:20:81:18:99:c8:
         ac:de:59:ee:78:e8:00:02:86:69:5e:61:6b:e1:bf:07:71:ea:
         cd:1d:70:14:63:ab:61:43:2e:53:5f:79:d0:fd:99:0c:8a:75:
         50:53:f5:99:27:a6:14:4f:9a:1f:c3:d2:ed:47:2c:02:9d:29:
         3c:1f:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:46 2025 by rpki-client