Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e203130373533.roa
File:                     323830313a3135633a323a3a2f34382d3438203d3e203130373533.roa (raw, json)
Hash identifier:          CJCT25EeKAgZ6x4U3BlZ+BXLfuRT0qd53W0wv3kX8Tg=
Subject key identifier:   A5:ED:66:56:7C:9F:46:54:FA:CF:1B:4F:EF:AC:33:E7:E6:66:44:21
Certificate issuer:       /CN=728EC5445CEE97191BF04E1B6FE632CB14937698
Certificate serial:       1FF963AAA60E9CE9568EED64D2DA251DCC24E5A3
Authority key identifier: 72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e203130373533.roa
Signing time:             Tue 04 Feb 2025 18:46:15 +0000
ROA not before:           Tue 04 Feb 2025 18:41:15 +0000
ROA not after:            Tue 03 Feb 2026 18:46:15 +0000
asID:                     10753
IP address blocks:        2801:15c:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f9:63:aa:a6:0e:9c:e9:56:8e:ed:64:d2:da:25:1d:cc:24:e5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EC5445CEE97191BF04E1B6FE632CB14937698
        Validity
            Not Before: Feb  4 18:41:15 2025 GMT
            Not After : Feb  3 18:46:15 2026 GMT
        Subject: CN=A5ED66567C9F4654FACF1B4FEFAC33E7E6664421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:74:60:72:48:18:16:06:36:b3:11:fd:5b:
                    ab:a7:cb:00:b0:eb:c2:5d:9a:a1:ad:ec:91:fd:c6:
                    d3:2e:bf:b1:e5:e6:60:81:af:63:5f:3a:57:66:32:
                    f0:39:24:09:67:84:c8:95:ca:d2:71:01:d4:28:26:
                    67:f3:70:bc:36:ad:b0:b0:21:56:d1:a8:a9:d1:13:
                    f4:e0:d9:30:f8:56:e6:a4:e0:0d:fb:28:e3:32:d7:
                    ae:72:a6:30:a7:9a:e1:51:18:2d:1a:11:2f:f2:b7:
                    f7:9d:64:bc:f3:d8:28:23:88:41:ba:01:cf:63:8e:
                    4d:50:c4:0d:a1:0d:af:24:76:5e:a2:fe:55:c6:f7:
                    2c:5c:eb:0b:5f:9a:f8:69:00:84:5e:37:e8:f2:49:
                    27:ad:a9:76:9c:0b:8f:d9:5a:cf:51:46:5f:2a:fb:
                    74:2f:bf:05:c8:fb:0c:65:e3:98:59:f0:47:bf:80:
                    4c:ed:dd:20:36:03:f0:32:10:21:6e:86:4e:bb:89:
                    cf:45:16:18:c5:44:23:2c:4f:76:bf:87:3f:21:e9:
                    6d:4a:38:ff:69:6f:14:3b:ef:4a:ec:97:11:28:fb:
                    41:e4:5e:77:e5:6e:6d:0b:3f:6d:c5:d4:f3:93:85:
                    cc:8f:f9:d5:25:fa:c4:91:d8:3c:73:0d:99:bb:36:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:ED:66:56:7C:9F:46:54:FA:CF:1B:4F:EF:AC:33:E7:E6:66:44:21
            X509v3 Authority Key Identifier:
                keyid:72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15c:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:a2:7d:67:cc:1d:9c:86:9e:a1:52:3b:20:9d:62:f1:8e:1a:
         e6:92:96:5e:4b:f9:74:15:59:89:e3:1f:81:88:3d:3e:e8:bc:
         4f:6e:66:38:19:6b:ee:9b:9a:e3:61:40:6c:0f:86:73:89:13:
         76:0e:ce:f5:02:4c:ae:3b:51:cb:ab:47:ce:f1:87:aa:8e:05:
         e4:ca:8a:a9:07:a2:55:97:62:e9:b1:7f:6d:18:66:c7:d8:62:
         61:8c:80:20:8e:f3:fd:26:73:ba:8e:2b:28:4c:2a:a1:e8:9d:
         01:e8:7e:5b:96:fd:21:04:7f:c7:e3:a3:63:0a:a2:da:7f:f5:
         8e:de:bf:7f:27:9c:e7:98:17:1c:d8:28:86:ad:10:8c:74:44:
         b4:60:06:03:b4:0f:bb:b4:1b:8e:b6:5b:0a:3c:51:21:67:00:
         9a:de:48:63:5f:45:a8:9a:56:ee:83:ef:d6:21:39:82:54:97:
         fb:e4:d2:33:ca:fb:af:e0:4b:4b:02:b7:1d:15:65:bf:47:5d:
         85:5c:b9:b1:42:7b:8b:45:19:33:b1:2b:18:36:ae:78:a7:c0:
         47:bd:7d:42:ed:52:14:52:6f:08:87:9d:bb:e1:79:f6:7e:bf:
         b9:15:b6:20:6e:b3:b5:31:61:f4:07:b0:75:db:2f:2b:53:cd:
         fa:c3:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:14 2025 by rpki-client