Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          2Ejf4AfQiO4lyPtDqI+nxB0reasjK++Tu0CPg8MOvnE=
Subject key identifier:   CF:81:37:8C:D5:C7:35:4E:43:4E:F2:EC:25:40:4F:7C:10:6B:57:0A
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       2AC8DCA8C94CF4B3D2C4B2A506645A9642B01A00
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:47 +0000
ROA not before:           Tue 04 Feb 2025 19:59:47 +0000
ROA not after:            Tue 03 Feb 2026 20:04:47 +0000
asID:                     262191
IP address blocks:        2800:b70:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 13:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c8:dc:a8:c9:4c:f4:b3:d2:c4:b2:a5:06:64:5a:96:42:b0:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:47 2025 GMT
            Not After : Feb  3 20:04:47 2026 GMT
        Subject: CN=CF81378CD5C7354E434EF2EC25404F7C106B570A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:50:a6:c9:50:23:17:68:8a:aa:49:ac:55:
                    c3:b7:86:e3:29:c6:c0:5f:e2:65:45:a3:f4:b2:0b:
                    90:c1:61:13:e4:b8:16:f6:b1:ca:06:e9:c7:20:9c:
                    98:00:6c:de:27:7d:b2:97:e8:59:6a:ce:34:24:64:
                    b5:7b:bf:37:61:0e:b0:fd:8e:5d:7a:dd:79:04:3f:
                    e7:62:e3:95:e1:b5:82:c0:56:ad:d0:9f:61:f5:80:
                    2e:ae:e8:f7:58:d3:81:17:0d:72:cf:7d:5f:f3:88:
                    53:8d:26:67:4e:12:c7:ae:88:81:03:9c:7d:3f:20:
                    7b:01:42:7e:73:4b:e6:5a:7d:f5:92:59:83:96:8a:
                    ba:92:87:2a:7f:22:6a:c5:f8:97:35:66:c9:6a:55:
                    29:bf:64:7a:ef:0a:7e:6a:63:f9:12:8f:58:4d:f1:
                    c2:6d:79:8b:90:c0:ca:b9:c0:fc:c1:a0:1e:49:dd:
                    18:cd:10:bb:93:e9:77:da:d4:06:31:16:77:23:8f:
                    60:13:a1:6b:f3:96:7d:82:4c:d3:cd:a6:f2:1b:02:
                    47:5b:40:0d:ca:e3:c6:33:f3:fe:a4:ff:85:b7:27:
                    9c:bd:b9:b0:ef:d9:6e:15:71:a3:f0:4b:4a:2d:46:
                    26:12:92:c0:52:28:c3:f1:ef:4d:8c:6b:52:ce:f9:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:81:37:8C:D5:C7:35:4E:43:4E:F2:EC:25:40:4F:7C:10:6B:57:0A
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:70:0d:20:60:11:05:3e:39:41:dd:17:22:21:77:bd:27:bf:
         e3:bf:e9:69:04:18:d9:fb:23:6f:d2:0f:c2:c6:03:c0:9e:5e:
         46:5d:33:8b:cb:c1:89:42:13:ac:e0:7d:ad:e9:45:61:4f:7f:
         4a:03:b4:30:2b:d2:12:0e:d2:a3:c3:70:07:20:69:01:7a:2b:
         e2:6f:37:c5:0a:e9:be:36:97:84:81:e1:1c:d2:e9:2a:b1:5c:
         6d:f5:29:5d:a4:85:39:d4:23:a0:89:40:64:4e:5e:1b:8a:75:
         bc:c6:70:fd:7a:56:c6:e0:e3:bd:b3:e6:cf:4e:01:09:ec:34:
         8d:94:ff:6a:7b:5d:6b:94:7f:54:06:3a:e9:51:18:2f:67:93:
         dc:81:3c:3d:9b:ba:92:92:1f:99:81:17:55:5c:78:bf:c4:41:
         44:73:46:64:a4:98:93:03:d8:e8:53:84:0a:00:21:e9:6d:70:
         f9:6b:d5:36:d2:d9:1b:71:45:c0:ba:83:ba:13:65:61:b9:58:
         b5:f8:6d:d3:2f:9f:d5:37:9c:11:11:6a:66:9c:ed:84:59:39:
         ec:d0:59:66:33:be:08:9c:b2:39:93:22:3c:d3:5b:de:b4:ee:
         59:c0:88:2e:05:dd:f8:c0:d4:e2:b9:84:94:82:88:e0:2a:99:
         dd:48:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:40:05 2025 by rpki-client