Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a38303a3a2f34342d3438203d3e203634313436.roa
File:                     323830313a3135353a38303a3a2f34342d3438203d3e203634313436.roa (raw, json)
Hash identifier:          djFki0X7kdi7sVrIz805LTRNcmIXbi1ow7D1muM3Eoc=
Subject key identifier:   CE:57:74:51:DF:44:26:A9:12:08:40:71:44:02:2D:78:0C:04:51:0F
Certificate issuer:       /CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
Certificate serial:       0997F126E78EC718E3525AC00BEB9D686B2AB54D
Authority key identifier: 70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a38303a3a2f34342d3438203d3e203634313436.roa
Signing time:             Tue 15 Jul 2025 00:00:00 +0000
ROA not before:           Mon 14 Jul 2025 23:55:00 +0000
ROA not after:            Tue 14 Jul 2026 00:00:00 +0000
asID:                     64146
IP address blocks:        2801:155:80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:97:f1:26:e7:8e:c7:18:e3:52:5a:c0:0b:eb:9d:68:6b:2a:b5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
        Validity
            Not Before: Jul 14 23:55:00 2025 GMT
            Not After : Jul 14 00:00:00 2026 GMT
        Subject: CN=CE577451DF4426A91208407144022D780C04510F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:79:6c:1b:a4:c2:a8:3c:6f:35:b2:31:e1:
                    fd:1e:0b:d0:6b:a5:56:ed:3e:12:c2:e8:50:a9:30:
                    2f:dc:66:2a:4c:86:bb:ad:f6:9a:55:d0:40:37:0a:
                    8c:52:cb:cd:62:60:44:7c:a8:ed:f4:c2:d5:5c:6e:
                    27:38:ed:34:b6:6f:a9:83:6e:2b:22:0c:a8:95:f9:
                    2f:fc:9d:1c:bc:f0:44:17:9e:c9:9e:c1:fa:03:a8:
                    04:4e:ea:08:bf:c7:a0:96:f6:e5:50:1c:a5:e8:04:
                    ca:d3:b2:06:b3:fe:aa:80:4a:65:6d:c3:90:d1:e4:
                    de:b3:0d:83:87:dd:bb:f9:df:c9:16:d0:02:a7:57:
                    91:12:0e:a8:38:da:fa:7b:00:52:7f:b5:c6:fe:4d:
                    19:a6:2f:8e:47:aa:79:41:e4:db:11:09:2d:c0:7f:
                    8e:fc:9e:21:85:d9:b7:f1:60:dc:3e:36:4b:21:41:
                    8c:01:83:a3:9f:8c:29:3f:a0:f8:a0:a7:e2:dd:27:
                    15:f0:0d:c6:a6:b0:56:53:db:16:e5:ab:9d:1e:02:
                    df:ff:9d:b2:d5:32:30:52:49:d5:be:26:af:34:d1:
                    b8:e0:51:c4:4b:5e:3a:1d:4d:9d:a8:d5:16:1e:93:
                    fd:f2:f6:45:28:42:db:a1:37:c6:cd:df:71:89:95:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:57:74:51:DF:44:26:A9:12:08:40:71:44:02:2D:78:0C:04:51:0F
            X509v3 Authority Key Identifier:
                keyid:70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a38303a3a2f34342d3438203d3e203634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:155:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:1d:e1:ec:f1:a4:8b:08:18:66:32:5b:b7:d6:22:aa:fa:01:
         ae:78:94:1d:a1:50:88:29:df:f8:ea:c0:73:e7:35:9d:ab:d3:
         92:bc:07:63:c8:5e:3c:6f:3c:56:0c:3d:df:39:64:17:ab:a3:
         33:15:88:b3:00:8d:f0:f0:62:d9:69:bf:20:26:d0:e3:27:f8:
         9d:a3:34:77:83:51:d9:9a:f8:2c:cb:29:e5:50:cf:2e:37:b1:
         d9:87:88:b3:37:91:a4:04:50:54:2f:3f:23:e0:e8:a1:1d:45:
         eb:84:40:fe:e9:69:fe:08:0e:85:16:d2:5b:9a:e0:0b:4d:88:
         0f:cf:a0:14:e6:bb:1b:58:6c:a7:3e:03:5f:24:89:e2:31:f0:
         cb:9f:7f:2b:56:45:0d:91:9d:92:5d:ec:bc:49:7c:00:4e:18:
         a6:7d:08:03:19:b4:38:02:4a:5e:82:15:a2:38:6e:ba:44:47:
         ca:4e:e2:ef:21:de:4a:b4:ec:1d:ac:ef:76:2f:a8:87:a1:1c:
         09:58:9a:8b:0d:bf:8d:6c:ea:03:dc:ec:24:5e:fc:e6:f8:17:
         5f:24:5b:e6:ae:c9:2f:1d:50:67:e7:f1:d3:84:65:60:1e:5b:
         7d:84:f9:29:0d:16:0a:1c:eb:b1:09:5d:15:f4:65:12:14:16:
         97:19:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:11:44 2025 by rpki-client