Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          YWYdBtnGbdKiGo1gA5L4tqkANKTIOIDqpuMEH0Ug9mk=
Subject key identifier:   B5:D7:90:1F:C9:B6:03:54:F4:BF:8A:57:49:70:77:09:60:30:35:E4
Certificate issuer:       /CN=0CBCF0206A415643408AB138E12C0382581355FF
Certificate serial:       48FB2CAC68BF627FA9D6044227738363B5937E3B
Authority key identifier: 0C:BC:F0:20:6A:41:56:43:40:8A:B1:38:E1:2C:03:82:58:13:55:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:28:25 +0000
ROA not before:           Tue 04 Feb 2025 18:23:25 +0000
ROA not after:            Tue 03 Feb 2026 18:28:25 +0000
asID:                     19429
IP address blocks:        2801:14:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fb:2c:ac:68:bf:62:7f:a9:d6:04:42:27:73:83:63:b5:93:7e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CBCF0206A415643408AB138E12C0382581355FF
        Validity
            Not Before: Feb  4 18:23:25 2025 GMT
            Not After : Feb  3 18:28:25 2026 GMT
        Subject: CN=B5D7901FC9B60354F4BF8A5749707709603035E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c5:71:56:95:aa:64:70:cc:15:07:30:7a:ce:
                    1c:18:da:33:8a:e0:dd:86:34:24:28:83:0c:c1:cc:
                    13:f1:a6:bb:90:6f:5f:35:bb:f5:a3:6c:9a:6b:20:
                    dd:fb:9f:71:00:b8:81:6a:e7:ea:32:97:f8:37:c0:
                    d6:ca:78:37:6a:15:f3:39:cb:32:40:9d:10:f5:9d:
                    3e:e1:59:0c:60:3a:cb:72:ac:2a:02:7c:ef:d1:1e:
                    12:0e:b9:e2:aa:5d:0d:b8:50:43:92:3a:f8:29:1e:
                    f8:75:ea:74:0d:b9:49:db:56:b5:d2:68:d5:ee:4f:
                    ad:8b:71:7e:11:f3:3c:7e:a9:69:19:c5:3d:7d:18:
                    cd:24:4d:69:5c:1d:97:be:61:8b:53:06:a0:cd:07:
                    86:86:88:16:2b:8e:8c:b8:c7:b4:7e:95:18:1e:16:
                    6a:8c:72:24:81:85:09:32:8e:43:af:29:57:18:0a:
                    02:01:05:55:00:4d:f9:0a:ce:23:72:d6:b7:39:4d:
                    cf:7f:7d:8a:ea:88:2e:f4:bb:68:07:ce:8d:c7:ae:
                    f1:f8:95:4c:37:23:72:0c:01:45:9f:86:bf:6a:86:
                    c3:88:58:47:a9:b9:f2:0a:e2:ab:06:a8:2e:f1:14:
                    f9:8c:f2:31:de:ad:a7:c0:20:6a:6a:59:07:c4:79:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D7:90:1F:C9:B6:03:54:F4:BF:8A:57:49:70:77:09:60:30:35:E4
            X509v3 Authority Key Identifier:
                keyid:0C:BC:F0:20:6A:41:56:43:40:8A:B1:38:E1:2C:03:82:58:13:55:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:6f:e2:88:6e:7f:48:94:59:a1:53:3a:97:a1:e0:ab:55:4e:
         35:32:d8:f9:63:f9:1f:39:4b:2c:c6:2d:61:ab:ea:39:e1:61:
         1c:cd:00:b0:13:44:2c:66:13:1a:43:04:53:66:62:e3:7c:09:
         91:d8:b9:d3:5f:50:0a:61:33:58:1c:bd:f7:bf:01:82:e4:36:
         bd:95:48:af:cb:97:d6:ef:48:10:5c:2f:52:7d:63:87:5b:30:
         a3:a1:06:89:dd:50:af:b1:fc:9c:12:a7:5f:30:4c:e8:2c:ac:
         98:19:62:83:9e:66:72:86:c9:f6:69:a1:47:c3:32:61:39:44:
         89:7b:8c:02:25:97:18:20:40:ac:9b:ec:bf:dc:ee:49:da:56:
         c8:6a:02:0f:b3:10:4f:08:e1:3b:1e:bf:24:e2:fc:76:22:3f:
         ff:7b:14:a0:74:f0:6a:66:e3:7c:f3:d7:70:9c:fa:f2:55:d6:
         9a:fa:2f:26:ac:cc:a1:d3:25:d7:5f:a6:17:df:74:c7:b7:96:
         83:ca:91:88:6f:b3:00:8f:24:de:a6:a7:d7:2b:33:1c:0d:21:
         48:88:93:9b:b4:07:52:d6:18:2b:f3:dc:fe:7d:30:f4:39:fe:
         99:1c:07:f1:63:1c:58:7c:69:57:e4:0f:3c:cd:ca:e4:a4:95:
         36:41:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:05 2025 by rpki-client