Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/323830313a31633a663030303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a31633a663030303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          zplIYHGVQHZ2PVlQT3sROGICWr9VjY6Qk+pPpL9z3Sw=
Subject key identifier:   19:47:7E:C6:6C:67:79:D7:CE:A7:7D:C8:62:34:37:4F:D6:CF:0B:26
Certificate issuer:       /CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
Certificate serial:       3CF2112583EEF4A2FED742D6DCA6EB0CDBB6D991
Authority key identifier: 46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/323830313a31633a663030303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:39:26 +0000
ROA not before:           Tue 04 Feb 2025 18:34:26 +0000
ROA not after:            Tue 03 Feb 2026 18:39:26 +0000
asID:                     27947
IP address blocks:        2801:1c:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f2:11:25:83:ee:f4:a2:fe:d7:42:d6:dc:a6:eb:0c:db:b6:d9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
        Validity
            Not Before: Feb  4 18:34:26 2025 GMT
            Not After : Feb  3 18:39:26 2026 GMT
        Subject: CN=19477EC66C6779D7CEA77DC86234374FD6CF0B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:47:e0:b7:56:55:8a:ba:7c:fd:9a:92:fa:
                    b1:8e:fc:94:b3:4f:69:d1:7e:4e:dd:a7:7e:48:1f:
                    38:19:fc:75:96:1d:41:36:ec:71:73:cb:09:e8:47:
                    9b:48:0e:a9:bc:6e:f8:d2:07:21:32:a9:de:fd:c8:
                    0b:a2:72:00:98:fd:6d:93:ab:5e:05:ce:44:c2:6a:
                    67:0c:49:d6:34:b7:33:7c:a9:d1:76:14:b4:ef:c7:
                    67:4b:0a:4a:25:c6:4c:fe:bc:24:2a:cb:61:f5:c1:
                    35:9f:00:38:01:ab:d4:a2:cd:1d:e4:e7:22:a6:a1:
                    61:00:e5:fc:e2:52:f2:43:93:11:95:1e:2f:bb:a5:
                    93:94:c4:1e:76:89:5e:13:47:70:78:93:0b:69:49:
                    c2:92:2e:43:b8:6f:1a:ae:14:f3:c6:a0:25:19:f7:
                    b5:86:aa:b2:c2:f7:60:82:00:45:5d:95:75:41:50:
                    ce:9d:39:82:13:bf:85:ee:27:06:60:61:0a:2e:93:
                    db:99:c8:ac:e4:fa:68:f1:46:b5:1a:42:61:76:ee:
                    1c:47:5e:24:24:20:b4:08:e7:d2:3a:66:da:8f:8e:
                    14:87:f5:da:60:a2:d5:dc:b0:b1:4e:21:9f:72:1e:
                    91:83:c7:41:85:5b:c9:c2:f8:91:b1:9d:4f:76:d2:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:47:7E:C6:6C:67:79:D7:CE:A7:7D:C8:62:34:37:4F:D6:CF:0B:26
            X509v3 Authority Key Identifier:
                keyid:46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/323830313a31633a663030303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:e6:28:53:6f:db:f9:81:33:cf:fe:5e:78:a5:bb:d5:51:34:
         b5:b1:02:b0:89:62:54:52:d6:ff:88:a9:83:0b:34:1e:30:41:
         a4:6c:cc:3d:9b:81:43:d9:e8:04:7d:28:74:77:a9:67:9e:c6:
         ab:7e:62:90:47:05:1e:91:d6:fc:da:79:4d:7d:c1:e5:ce:bc:
         af:2d:30:77:15:0f:ec:77:5f:f5:f7:e4:53:fa:6c:d4:37:23:
         a0:e2:48:c2:fb:0d:87:1e:0a:f5:15:58:71:7c:58:6a:03:5f:
         c5:85:80:b2:dc:71:dd:aa:ca:f4:36:0a:e9:6a:31:6f:8f:cc:
         ab:82:52:04:d5:61:ec:e7:88:23:83:b6:68:fb:ed:0e:69:ff:
         d8:7d:b4:5a:1f:91:04:04:13:2a:28:09:1e:dd:29:dd:14:31:
         70:87:0e:69:01:61:7f:be:ef:76:63:4d:c7:44:51:d7:bf:dd:
         18:fd:50:31:bd:1d:70:6d:eb:23:29:92:8f:18:24:4d:c5:55:
         3f:68:fe:7e:57:cc:0f:fa:71:de:ff:f9:bd:de:62:35:e1:67:
         e9:3e:fd:cc:6f:4a:0d:f2:cb:80:35:d5:12:75:80:62:10:6c:
         e9:a7:72:dc:bc:49:45:6d:4f:8f:c5:09:a2:83:af:d8:c5:59:
         31:1e:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:57 2025 by rpki-client