Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31303a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          e+NOCI0dtQ1Gq77byzuH6kcgNedMPg+U0vKA7R8EKFE=
Subject key identifier:   D7:25:4E:4C:B4:4B:4B:32:C0:CE:42:2D:8A:E3:FF:A0:10:81:3C:F3
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       22A3CDD5C30609240FD62DA41E3A1FDF56076372
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31303a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:46 +0000
ROA not before:           Tue 04 Feb 2025 19:59:46 +0000
ROA not after:            Tue 03 Feb 2026 20:04:46 +0000
asID:                     262191
IP address blocks:        2800:b70:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 13:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a3:cd:d5:c3:06:09:24:0f:d6:2d:a4:1e:3a:1f:df:56:07:63:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:46 2025 GMT
            Not After : Feb  3 20:04:46 2026 GMT
        Subject: CN=D7254E4CB44B4B32C0CE422D8AE3FFA010813CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:98:af:f6:81:9c:30:23:b2:fc:41:42:e1:
                    79:60:d7:20:26:16:74:54:fe:bc:d9:c3:77:9a:9f:
                    e7:09:61:4b:3b:1d:03:04:cb:89:3e:bc:66:a6:7a:
                    28:5b:f8:53:16:5a:54:84:e6:36:1d:e5:4b:a6:ca:
                    0e:40:e0:15:d9:81:5b:43:b4:35:19:16:3f:cf:72:
                    16:de:96:70:8f:bf:e9:11:b6:fe:be:d2:d5:ff:94:
                    73:2a:7a:31:30:70:a8:dd:8f:12:1d:07:c8:56:a6:
                    fd:ab:90:36:fc:33:e6:83:e1:83:b1:18:05:02:60:
                    28:d8:de:fd:e7:84:26:a4:32:c8:41:0e:64:6d:4a:
                    aa:c1:dd:32:ca:0a:77:5a:38:a3:37:f6:a8:10:04:
                    3a:4f:aa:0d:52:d4:bc:53:41:90:44:cb:3a:2f:34:
                    63:20:cc:79:ef:bb:e0:a2:46:a5:2d:87:73:de:79:
                    94:f8:46:84:52:da:5e:bb:35:9f:a7:20:52:71:5e:
                    ee:89:a1:9d:9a:60:dd:95:72:04:62:ea:36:00:d7:
                    56:00:ab:07:dc:43:82:a5:19:b2:d6:45:dc:b2:ea:
                    ec:df:40:02:70:ea:bb:ba:84:c4:79:c1:4b:d1:6b:
                    98:98:39:8c:0d:4a:9a:55:2f:ce:fd:f7:15:c1:3f:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:25:4E:4C:B4:4B:4B:32:C0:CE:42:2D:8A:E3:FF:A0:10:81:3C:F3
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31303a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:0e:52:52:3d:b9:dd:59:74:da:9b:3f:6b:79:d3:2c:d7:
         ec:33:2e:0b:e0:d3:9b:37:1d:60:f0:62:30:b8:85:d8:d8:df:
         a1:51:81:f2:d6:38:7c:dd:9a:c0:9c:e8:8b:00:5a:e1:f4:5d:
         26:73:cf:26:b0:06:06:03:3c:81:87:57:70:42:78:69:d9:25:
         35:e2:ad:6b:0b:dc:de:aa:ee:ba:4c:4c:53:33:0f:54:fc:aa:
         f5:a1:10:04:2d:42:0e:86:c5:89:47:1c:cf:32:de:81:12:8b:
         46:cf:f2:3e:ba:4e:db:60:c1:f6:5d:53:6c:06:a8:01:e6:59:
         36:bd:7d:b2:69:81:a7:0d:f6:57:d2:d8:64:a1:18:66:eb:30:
         9e:6d:4e:9b:ac:17:2f:dd:67:0f:77:b3:fd:3a:87:15:05:b3:
         fe:50:a3:39:28:75:a3:5e:ae:13:11:8d:c3:8b:d9:67:2d:7a:
         5d:4c:8a:25:7c:db:d3:28:cf:68:5c:17:d9:1d:50:8d:05:42:
         e6:ad:ea:bd:3a:2b:6f:be:0a:06:e5:0a:69:56:46:f6:2c:1e:
         ad:7d:5d:b8:46:16:71:51:54:31:08:c6:79:ca:08:1a:28:db:
         ef:43:3e:27:37:44:f2:75:a2:61:da:bc:93:eb:78:d4:66:47:
         f0:24:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:09:45 2025 by rpki-client