Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          pWTOSEOJrowUTAZ2u04nOIE3SeMW/kQwz8Pl8bUDta4=
Subject key identifier:   6C:0C:95:21:7D:80:55:1A:C9:9D:85:52:08:E9:62:21:1D:77:BE:EB
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       4EE41B961A407EB1530823C645B53135D8EF0DE2
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:31 +0000
ROA not before:           Tue 04 Feb 2025 19:59:31 +0000
ROA not after:            Tue 03 Feb 2026 20:04:31 +0000
asID:                     262191
IP address blocks:        2800:b70:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e4:1b:96:1a:40:7e:b1:53:08:23:c6:45:b5:31:35:d8:ef:0d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:31 2025 GMT
            Not After : Feb  3 20:04:31 2026 GMT
        Subject: CN=6C0C95217D80551AC99D855208E962211D77BEEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:f1:30:21:02:f7:2e:b4:24:89:63:87:41:
                    c9:2c:b3:27:80:fc:af:f6:12:af:43:eb:34:9e:51:
                    f7:11:e3:e6:4d:db:d0:e3:e0:42:01:a4:e0:8b:87:
                    2a:20:5b:80:79:68:7a:96:49:d9:91:d4:fd:36:2e:
                    8c:bd:db:93:45:ef:d2:3b:25:d8:2c:5e:fa:ce:1e:
                    e3:16:c7:52:8a:58:d9:6c:99:d6:64:9d:19:cb:cd:
                    bc:20:db:47:15:15:3f:f0:14:e3:f4:54:eb:dc:fe:
                    3c:4a:2b:99:13:36:51:e2:44:ba:d0:ac:28:7f:10:
                    c1:74:fd:ca:83:83:0c:9d:e7:dd:3d:85:d1:b8:70:
                    79:ff:b4:4a:43:4c:9a:3c:dc:c5:a0:ff:f8:4d:b7:
                    77:84:b9:de:ad:37:b8:01:51:5b:cb:4e:2d:e6:5e:
                    51:54:68:d3:68:17:dd:cb:a2:ab:88:3e:ac:8d:a2:
                    06:ef:43:2d:d3:5a:84:63:6b:62:3a:7e:48:b4:6a:
                    9c:0a:dd:ba:a6:9e:dd:24:1e:38:6b:ac:80:63:26:
                    15:10:c7:04:4d:af:3a:06:bc:36:74:5c:3a:7d:ac:
                    e5:d2:0f:ab:b4:4f:88:4c:37:c0:af:6a:d2:85:a9:
                    9e:51:f6:bf:7f:05:3d:bd:c6:1a:9f:10:f9:8d:79:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0C:95:21:7D:80:55:1A:C9:9D:85:52:08:E9:62:21:1D:77:BE:EB
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:44:4c:a8:b2:c3:6e:89:d4:6f:09:0d:21:16:37:df:c4:
         6f:3b:83:3b:76:2d:fc:8d:b1:32:b6:a1:b9:14:53:36:f4:c0:
         57:cc:82:ea:56:9a:f2:e0:bb:2c:dd:aa:a8:f6:b3:02:6d:8a:
         63:10:cc:96:4a:72:d1:5a:6f:2c:51:95:56:9c:b4:e9:3a:95:
         a7:cb:0a:ad:a3:b4:f4:3f:a0:ed:e2:68:94:4b:2b:4b:0b:11:
         98:04:15:4d:a2:a4:89:ce:72:29:f6:8d:84:1d:fc:2a:50:f7:
         94:7b:a1:38:32:f2:1c:a5:df:28:e7:59:ca:6c:f1:fe:ca:b3:
         2c:61:01:b7:d9:c1:c3:ac:e9:a1:cb:a4:bd:8b:68:9b:67:34:
         26:4f:94:45:11:62:ca:e8:15:49:ae:13:bc:59:48:a2:34:73:
         80:44:aa:b2:ad:a2:86:7c:4d:c5:f2:c9:a1:b7:11:68:4d:f2:
         05:46:48:20:e0:ee:71:af:ab:c7:d9:c0:aa:dc:61:9d:e1:cd:
         7f:ee:6d:d5:c1:79:a0:e2:9f:c1:ef:ab:a8:95:50:9c:41:34:
         70:5b:23:80:e3:21:f7:7a:c0:e3:99:bb:55:0d:65:a3:05:21:
         ba:6a:1e:14:57:af:27:5d:54:a2:3f:9e:36:20:a6:62:58:94:
         bc:6b:ab:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:26 2025 by rpki-client