Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31313a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          EBL1HJ6t9xP1I6ZDtODVDg6ZMsBLuN8KbWJfcgA73XM=
Subject key identifier:   57:3D:FE:93:9C:E3:35:0A:E0:C9:18:86:5B:8B:96:71:26:BC:BB:7B
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       370623695DFB58AC35A1E01C889172392641AC54
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31313a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:47 +0000
ROA not before:           Tue 04 Feb 2025 19:59:47 +0000
ROA not after:            Tue 03 Feb 2026 20:04:47 +0000
asID:                     262191
IP address blocks:        2800:b70:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 16:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:06:23:69:5d:fb:58:ac:35:a1:e0:1c:88:91:72:39:26:41:ac:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:47 2025 GMT
            Not After : Feb  3 20:04:47 2026 GMT
        Subject: CN=573DFE939CE3350AE0C918865B8B967126BCBB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:8e:5e:c7:19:47:06:19:a1:d3:a6:65:bd:
                    86:02:2a:18:63:6e:0a:1c:f4:fa:06:07:28:70:ee:
                    a5:6a:0a:4d:f2:b2:07:cc:38:54:24:35:28:60:47:
                    6a:dc:0a:a1:e8:0d:52:70:69:f1:24:9f:33:fe:6b:
                    4c:dc:f5:92:6d:30:35:8a:d9:2b:c9:53:fc:b9:e1:
                    db:80:24:c6:4d:33:18:92:f0:cb:13:b2:b6:a7:cf:
                    fa:c2:ed:82:e2:99:0b:c3:1d:00:49:ce:58:d1:90:
                    ad:f8:54:c3:b0:3e:3f:db:a2:68:4e:0b:a7:fe:dc:
                    c3:52:cd:dd:41:df:60:22:9c:44:d5:eb:8f:43:db:
                    56:72:56:2d:90:0c:86:61:9b:7b:46:7b:57:10:32:
                    e6:a4:02:ab:36:39:33:24:ec:91:05:09:10:ee:43:
                    43:54:94:cc:da:d4:16:12:ae:99:bc:1f:42:44:48:
                    eb:01:5a:53:01:24:d5:b0:a1:44:32:5b:24:37:b5:
                    8f:c7:80:77:bb:19:5c:5a:2e:e6:a4:19:9b:2c:c8:
                    8d:f4:db:b6:4c:cb:3e:13:e7:3d:12:e3:c4:e9:17:
                    56:35:58:57:8a:34:d6:62:94:52:82:45:37:88:7a:
                    69:53:15:19:45:91:78:ce:16:7a:88:54:ab:f6:9c:
                    ba:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:FE:93:9C:E3:35:0A:E0:C9:18:86:5B:8B:96:71:26:BC:BB:7B
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31313a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:b0:9f:9e:e4:92:78:d2:86:75:9c:ee:64:87:57:11:37:0c:
         98:d0:da:41:5c:b9:01:72:0c:ea:f6:dd:b4:17:b1:ac:df:5a:
         05:a4:a9:2c:da:a2:af:c1:4e:02:88:7e:5d:94:a7:95:74:7f:
         d4:a3:6e:97:a8:40:46:f6:fe:02:8f:89:e2:ec:c6:4f:a9:cb:
         92:d6:5c:11:81:8b:ea:34:ac:16:ae:28:e8:4f:da:d7:1d:86:
         11:dd:00:3e:fb:f3:3e:3d:3b:4d:82:fe:aa:67:6d:35:82:e0:
         1d:d3:80:cd:c4:ab:8b:91:1e:07:00:ab:06:09:3d:a6:f8:9f:
         18:54:e1:a6:54:3a:2a:10:37:ed:2f:48:a7:d6:3a:9d:97:bd:
         2a:33:0c:f9:39:c2:c0:0e:7d:a1:f8:e7:63:30:a2:84:27:09:
         ba:c7:f7:16:a4:7d:8c:66:ee:7f:0a:20:d1:f7:08:61:bd:4d:
         5d:97:5e:e2:43:d8:d7:bc:a8:86:60:3f:da:bb:35:97:f9:ed:
         85:23:30:b9:19:58:97:3f:8b:0b:5b:5d:62:16:1f:a7:d8:70:
         3a:5e:10:3e:42:c0:1d:8e:33:a2:c4:69:6d:8b:97:7e:46:e1:
         df:87:e0:c5:2a:4e:77:1b:8e:8e:ed:0b:6a:e7:79:3f:be:c9:
         7a:bb:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:01 2025 by rpki-client