Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31373a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31373a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          MNdkgF72ohll6e3BwpfIC9dZroHnjmYJKsTbewjLzNo=
Subject key identifier:   70:DC:54:3B:C0:B6:5D:72:58:03:D3:1D:8F:23:18:FC:F5:D4:FF:F9
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       3379E124B93048597EE443B415E24288F8E2DD8C
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31373a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:45 +0000
ROA not before:           Tue 04 Feb 2025 19:59:45 +0000
ROA not after:            Tue 03 Feb 2026 20:04:45 +0000
asID:                     262191
IP address blocks:        2800:b70:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:79:e1:24:b9:30:48:59:7e:e4:43:b4:15:e2:42:88:f8:e2:dd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:45 2025 GMT
            Not After : Feb  3 20:04:45 2026 GMT
        Subject: CN=70DC543BC0B65D725803D31D8F2318FCF5D4FFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:6f:ac:6b:6c:09:1c:7f:e3:13:3d:91:c7:
                    35:c7:86:d3:14:e9:41:42:d6:16:eb:65:60:ce:f9:
                    1b:a8:38:93:f3:78:30:da:9d:c0:35:bf:e4:85:67:
                    b4:b4:31:b4:b4:0a:73:91:c6:91:77:40:b7:d3:27:
                    95:91:9c:6c:9f:c2:d6:e0:28:b6:13:8b:03:39:06:
                    32:7d:3d:8a:84:d0:43:9f:4f:3d:a5:1e:ac:e2:20:
                    79:43:d9:56:31:80:f1:46:47:f2:46:5b:58:c1:7a:
                    fa:09:8d:4e:7c:05:7b:c1:5a:1d:ca:49:63:9d:39:
                    e5:00:cf:89:df:3b:71:b8:97:f3:76:94:11:78:d1:
                    6c:7d:fe:5c:46:a9:b0:79:7f:db:8c:cb:75:10:55:
                    3b:3d:43:48:b8:00:4b:c2:2a:5a:a5:3d:8f:cc:9d:
                    db:cb:c6:c9:3b:8f:75:95:92:68:6e:7c:c9:38:6a:
                    f3:d9:eb:26:3f:27:65:93:84:de:ed:b2:09:2a:75:
                    75:85:45:86:e3:0b:92:e8:50:fa:7b:1c:3c:2c:3a:
                    0e:7d:75:ae:45:72:62:86:8d:76:03:da:ed:90:76:
                    9f:35:ff:74:44:e9:09:74:a5:2c:47:a3:fa:ec:48:
                    fe:75:55:6b:12:c7:8e:9c:df:57:18:7e:a5:df:82:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DC:54:3B:C0:B6:5D:72:58:03:D3:1D:8F:23:18:FC:F5:D4:FF:F9
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31373a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:d2:7f:21:2d:9c:54:d3:19:fe:af:b6:03:61:b1:d9:41:
         fe:4c:8d:b0:3d:4b:79:87:6a:c2:51:0b:3d:8b:ec:59:f2:e1:
         d8:bd:90:89:9d:91:6f:b9:b6:ac:4f:0d:7e:b9:ce:b8:12:55:
         bc:8e:3c:e8:ff:35:0e:e8:7e:88:81:ac:35:19:48:c5:12:f0:
         d7:2d:ae:cf:50:72:bb:c0:ea:6c:64:c5:68:1d:6b:75:61:47:
         54:41:ec:ec:62:d7:21:53:41:0e:4a:04:19:81:9a:25:b1:30:
         af:e5:db:a1:80:ae:1d:7d:0b:99:c7:19:ca:df:94:5b:1e:c9:
         3f:57:57:06:9b:c4:ac:cf:68:86:a5:06:a9:04:fa:2f:ef:28:
         7b:fa:81:62:df:34:a8:cb:c5:da:ba:a0:9c:12:9e:9b:6f:a4:
         d2:a1:8e:db:d5:03:c0:31:f1:4d:78:20:7b:f1:c1:2a:05:a4:
         96:6e:b4:d7:89:32:de:fd:69:b9:37:69:39:fd:72:8c:97:e8:
         37:d4:98:27:09:7e:f3:23:72:9d:53:9b:0a:5c:89:1f:f7:d6:
         7e:3c:38:e7:88:5f:0d:75:17:03:32:28:7a:9a:fb:a7:08:91:
         30:1e:3d:62:f3:38:b3:06:0b:ef:08:63:c6:97:51:53:fd:ac:
         87:79:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:30:15 2025 by rpki-client