Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa
File:                     323830313a303a34303a3a2f34382d3438203d3e203238303637.roa (raw, json)
Hash identifier:          tXnTfr2fbzlVsl+anIYTEs0DCDqd1C2S+aN03aVTf5I=
Subject key identifier:   46:62:83:DA:5B:02:15:78:B1:A3:30:E3:35:CB:CC:31:E0:9A:11:60
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       A27423BD1738C37704A435F11B2CF96C1731BF
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa
Signing time:             Tue 04 Feb 2025 18:29:11 +0000
ROA not before:           Tue 04 Feb 2025 18:24:11 +0000
ROA not after:            Tue 03 Feb 2026 18:29:11 +0000
asID:                     28067
IP address blocks:        2801:0:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a2:74:23:bd:17:38:c3:77:04:a4:35:f1:1b:2c:f9:6c:17:31:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Feb  4 18:24:11 2025 GMT
            Not After : Feb  3 18:29:11 2026 GMT
        Subject: CN=466283DA5B021578B1A330E335CBCC31E09A1160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:c5:e9:32:62:f8:b6:a4:15:6a:eb:b5:ae:
                    8e:29:bd:e9:f0:2f:7b:ae:a3:c2:19:1f:59:fd:6e:
                    9b:11:bf:db:bc:2d:55:87:11:29:5b:de:3b:ff:5f:
                    4e:91:05:dd:b9:3a:69:e2:c2:df:3e:6e:f3:65:ad:
                    55:7e:82:d7:c3:56:aa:8e:04:8b:65:26:26:9a:f9:
                    3f:18:04:27:16:83:13:8b:54:3a:bb:54:50:09:a1:
                    bd:1b:9b:b5:86:3b:b2:4e:7b:3f:5f:db:0f:e2:bb:
                    41:2d:e7:4e:3a:d4:23:e2:0e:f1:e4:4e:ef:b4:19:
                    8c:fc:55:fb:f7:8c:1a:3d:f6:f7:f8:67:2c:ba:07:
                    ba:3c:7d:f0:fb:0b:ba:fb:7b:fe:99:42:f4:57:53:
                    a8:e7:94:36:38:18:51:c9:e4:02:7b:c8:80:97:88:
                    c7:d5:f1:ce:5c:d2:73:9c:be:a2:95:7f:5b:bb:86:
                    f2:9d:3c:3a:2f:11:0a:19:cd:91:7e:f8:eb:e9:51:
                    5f:f9:6e:09:ee:91:97:d2:41:ff:3a:b4:03:c3:5f:
                    3b:f2:57:b6:86:4c:9a:49:96:cc:cb:30:89:d8:f5:
                    98:a8:b4:c8:5c:44:ba:34:53:ee:4c:80:24:7e:c1:
                    2e:39:2b:b1:c0:f9:28:1d:a4:6d:a1:1c:e6:1a:b4:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:83:DA:5B:02:15:78:B1:A3:30:E3:35:CB:CC:31:E0:9A:11:60
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:09:02:79:10:3c:33:49:1d:e7:dc:08:c8:2f:f0:1d:c3:52:
         9f:8f:96:8f:a2:13:1a:25:40:5a:92:0e:da:a1:8b:f2:76:8f:
         b7:b7:63:5d:21:c2:c5:7b:77:84:bf:5c:12:f4:f5:28:77:6a:
         f2:22:10:1a:79:24:a0:c2:a1:ae:35:11:d0:51:d3:56:9a:15:
         c0:c9:75:8d:c3:60:b7:72:96:59:12:c1:5f:bf:56:87:40:47:
         d9:46:93:60:ac:68:24:b2:0d:8c:63:4f:a4:cd:65:aa:6c:42:
         75:3b:8a:07:c0:de:0a:5c:8a:17:ef:f7:d2:fa:ca:bd:8c:92:
         9a:76:6f:e3:fa:de:7a:5b:cf:33:fd:09:a2:de:56:84:de:ec:
         c7:49:6b:fb:51:e5:c9:17:6d:a9:26:7f:6c:55:66:65:35:9a:
         81:3d:a1:0f:46:d9:ab:6b:ad:11:af:4f:55:0c:69:8c:a1:48:
         ac:4e:4a:0a:4e:cd:1c:5c:8b:68:f1:d9:96:13:5a:d7:0b:e2:
         85:e6:ba:89:32:9c:79:fe:03:eb:17:33:9d:d7:c0:6c:f1:44:
         ff:bb:94:4f:1b:e4:0d:59:b2:05:16:6a:be:bd:3d:d2:d3:30:
         53:1a:a3:b4:cd:5f:94:ff:5a:97:75:7e:bd:98:a2:ce:11:cb:
         67:5a:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:00 2025 by rpki-client