Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/323830313a31343a613030303a3a2f34372d3438203d3e203631343535.roa
File:                     323830313a31343a613030303a3a2f34372d3438203d3e203631343535.roa (raw, json)
Hash identifier:          2pKYx3ro0kq0stbogGVpwhhqBIwvd/p+1VmMhRvS4Ok=
Subject key identifier:   3A:CD:1A:84:4F:9E:86:28:76:DB:61:5E:05:E5:B8:56:D3:63:5E:6A
Certificate issuer:       /CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
Certificate serial:       28D3B2EA2978AE40DB11839545450AB855EE5BE9
Authority key identifier: 1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/323830313a31343a613030303a3a2f34372d3438203d3e203631343535.roa
Signing time:             Tue 04 Feb 2025 18:16:03 +0000
ROA not before:           Tue 04 Feb 2025 18:11:03 +0000
ROA not after:            Tue 03 Feb 2026 18:16:03 +0000
asID:                     61455
IP address blocks:        2801:14:a000::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d3:b2:ea:29:78:ae:40:db:11:83:95:45:45:0a:b8:55:ee:5b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
        Validity
            Not Before: Feb  4 18:11:03 2025 GMT
            Not After : Feb  3 18:16:03 2026 GMT
        Subject: CN=3ACD1A844F9E862876DB615E05E5B856D3635E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e2:b1:99:af:a1:45:ec:c5:c4:0d:48:18:92:
                    a2:dc:54:a7:f5:80:18:46:bb:f5:23:c0:c9:d5:1c:
                    db:94:16:8a:97:97:b6:de:9b:db:89:ed:37:fe:b6:
                    dc:8f:75:f6:df:2a:a3:ad:32:09:5a:7d:f4:4d:8a:
                    bc:6d:63:e5:27:37:fc:57:01:b1:2b:32:06:40:52:
                    db:53:27:da:b3:98:3f:bc:e5:15:58:3b:30:12:dd:
                    a3:6d:46:82:02:0e:8d:70:14:cc:f5:89:41:dc:75:
                    25:08:3d:cd:34:1f:0a:fe:fd:1b:ed:a0:41:05:b5:
                    c9:ff:7d:f5:c7:65:4a:21:fb:02:49:4b:c2:5d:e2:
                    7f:b2:19:d0:14:63:c6:2f:c2:e6:76:76:e4:e0:31:
                    74:9b:d7:f9:20:a4:1e:6d:a5:6e:a8:3c:78:1e:38:
                    65:31:69:06:68:55:e0:28:50:7c:2d:06:3c:a3:e8:
                    33:e8:90:44:e7:6f:bc:26:22:c8:58:d4:90:73:eb:
                    02:cf:ea:40:15:af:0c:5f:bf:f2:ee:65:73:d5:72:
                    01:13:0b:2a:f6:55:8b:e7:33:37:f3:53:b3:8b:33:
                    82:2a:a2:1f:17:19:9c:0f:3b:50:16:30:e1:07:9a:
                    ea:ee:df:b4:ad:56:2d:85:df:ad:61:23:01:5a:48:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CD:1A:84:4F:9E:86:28:76:DB:61:5E:05:E5:B8:56:D3:63:5E:6A
            X509v3 Authority Key Identifier:
                keyid:1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/323830313a31343a613030303a3a2f34372d3438203d3e203631343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:a000::/47

    Signature Algorithm: sha256WithRSAEncryption
         d0:ca:f1:59:c6:ae:6a:55:90:d1:f4:8d:52:b1:ea:d5:bd:55:
         a0:ee:24:73:63:40:a9:98:66:d5:36:d3:93:65:e0:70:b7:4a:
         af:85:b2:6f:3a:a8:e7:51:ef:62:b6:0f:dd:f8:64:5a:21:61:
         ab:2e:bf:8f:58:2e:1b:07:3e:cd:77:90:54:2b:b4:ab:c4:54:
         09:e4:22:29:17:c3:33:4f:f3:a3:4c:f5:9e:d3:05:e7:2a:81:
         d6:10:b4:69:22:8d:c0:1e:35:7f:cf:54:98:ab:41:15:7d:26:
         32:35:a7:14:be:c9:de:61:fa:02:b5:23:dc:af:7e:e3:b8:2d:
         27:22:33:02:34:c7:45:34:4c:77:14:57:d9:0a:16:b3:74:07:
         e4:d3:5d:0a:72:54:5b:a3:a8:57:79:21:43:ec:30:52:d7:d8:
         5e:44:bc:15:68:3b:f9:82:1e:7b:97:32:b3:8b:9e:ba:8c:a8:
         e9:93:00:49:4a:d2:53:b0:3b:bf:f6:f3:72:42:46:f0:3b:3c:
         b8:8f:c7:20:72:c0:89:4c:07:09:b2:ee:20:a5:56:d8:c9:54:
         9c:60:e8:f5:fa:67:72:c2:36:83:b5:01:10:51:64:00:ac:7a:
         ff:a0:1a:54:17:e4:23:04:6a:9a:18:78:c7:42:e3:7b:0e:54:
         d3:19:3c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:14 2025 by rpki-client