Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/323830313a3134653a313a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3134653a313a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          +/ARcIA1laWlC8tjRT5adg2l/lZUghPgZP4Isf1Q1ZM=
Subject key identifier:   76:E7:FF:A9:F8:29:8E:21:FC:B2:AC:97:BC:C6:E3:46:50:E5:30:BF
Certificate issuer:       /CN=F2AC2C4B93199A4F5EB2D116562BF8479BE0935A
Certificate serial:       154C225D0E36250B4E0ED32DE04EC6DD34797878
Authority key identifier: F2:AC:2C:4B:93:19:9A:4F:5E:B2:D1:16:56:2B:F8:47:9B:E0:93:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/323830313a3134653a313a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:56:18 +0000
ROA not before:           Tue 04 Feb 2025 18:51:18 +0000
ROA not after:            Tue 03 Feb 2026 18:56:18 +0000
asID:                     19429
IP address blocks:        2801:14e:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4c:22:5d:0e:36:25:0b:4e:0e:d3:2d:e0:4e:c6:dd:34:79:78:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AC2C4B93199A4F5EB2D116562BF8479BE0935A
        Validity
            Not Before: Feb  4 18:51:18 2025 GMT
            Not After : Feb  3 18:56:18 2026 GMT
        Subject: CN=76E7FFA9F8298E21FCB2AC97BCC6E34650E530BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:04:85:dc:34:f9:01:17:a4:8d:8f:31:07:
                    e4:f7:b6:b8:2c:95:8f:2d:63:a9:cd:b0:53:cf:ea:
                    ac:fb:06:a9:48:d5:44:fd:19:16:53:88:9b:8f:77:
                    00:8a:10:37:93:80:f7:99:0e:df:e2:b0:46:5f:12:
                    4d:65:1b:0e:46:42:10:8d:9e:ea:5f:0b:48:8c:33:
                    97:2b:53:82:bb:a3:9d:bc:74:ad:66:95:c9:e9:98:
                    9b:69:32:c7:b2:38:06:17:70:59:09:59:83:73:d2:
                    32:78:24:3f:c6:15:b3:33:42:25:ea:a6:5b:15:26:
                    73:e2:29:6f:f7:ec:c9:ec:36:cb:da:aa:44:cd:82:
                    c4:94:4b:d4:9e:f0:66:5f:a9:83:d1:4d:17:7f:c1:
                    f8:b6:19:e9:a6:d4:b5:20:46:35:b0:57:72:1d:9b:
                    ef:1b:13:c9:bc:bc:fb:f7:de:30:5e:b9:e5:70:45:
                    83:a2:95:8f:be:bb:19:1a:0f:97:e2:27:c4:6e:1d:
                    6a:fa:1a:97:40:e7:a8:d0:97:55:34:28:61:15:1c:
                    77:da:c7:ff:46:ce:81:bd:e7:08:a8:42:3a:e0:a7:
                    25:c8:cb:c6:c8:e6:2b:11:f2:84:e6:73:c0:a2:fb:
                    6d:a4:a6:53:6c:19:06:16:ff:e8:59:1e:ee:73:83:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E7:FF:A9:F8:29:8E:21:FC:B2:AC:97:BC:C6:E3:46:50:E5:30:BF
            X509v3 Authority Key Identifier:
                keyid:F2:AC:2C:4B:93:19:9A:4F:5E:B2:D1:16:56:2B:F8:47:9B:E0:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/323830313a3134653a313a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14e:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:c1:b9:f3:ec:22:d0:9c:e0:bd:18:b9:70:9f:78:92:3d:
         c8:97:84:71:86:f2:d9:b1:60:5a:b5:b7:91:f1:e2:ad:4d:d4:
         e0:50:1b:8e:75:b1:9e:54:0d:4a:b2:3d:c5:3f:05:78:bc:dc:
         ab:aa:a7:95:c5:95:bd:8e:51:1b:01:6d:73:64:aa:e1:b5:f1:
         a6:70:f6:c6:95:33:b9:ff:13:27:34:e3:95:15:7a:b8:1d:ba:
         97:62:4b:c8:0a:01:61:ab:a0:a3:44:db:e0:d4:43:9f:e5:64:
         c4:91:26:bb:9d:18:dd:db:af:62:f5:a4:2a:b2:de:00:09:3f:
         b9:26:62:dd:5b:8e:0a:a2:45:4b:d7:c2:63:83:ac:d5:17:fe:
         5a:f2:e4:dc:b6:c2:3c:67:4e:df:3b:d8:8f:28:f3:84:be:22:
         dd:b6:25:e3:6e:49:9a:d2:ea:93:45:4e:eb:fe:a1:41:9b:da:
         27:b5:ec:dd:c4:1e:1d:4d:42:e0:70:f5:80:ea:5c:17:64:26:
         5b:0e:1f:63:13:60:42:f2:d0:12:82:6b:c7:8c:10:be:68:a7:
         8b:63:8a:58:e2:b4:23:18:6f:78:52:12:9f:36:31:3a:cc:55:
         c9:d9:5a:60:04:da:4c:e2:52:b4:97:b1:6e:a3:c0:a8:d2:fb:
         18:84:a3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:40:40 2025 by rpki-client