Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa
File:                     323830313a3161303a3a2f34322d3432203d3e203532343637.roa (raw, json)
Hash identifier:          D2dplrfIHCZBRd8norq5qLM7G80doV5+9MIfwyjDwYQ=
Subject key identifier:   CD:19:9B:07:D8:49:73:44:E3:05:E8:17:68:1D:49:02:DF:B8:A3:8E
Certificate issuer:       /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial:       428E99CB90B391010D40E3A0DC37E8B7E4FBF5C0
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa
Signing time:             Tue 04 Feb 2025 18:05:46 +0000
ROA not before:           Tue 04 Feb 2025 18:00:46 +0000
ROA not after:            Tue 03 Feb 2026 18:05:46 +0000
asID:                     52467
IP address blocks:        2801:1a0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8e:99:cb:90:b3:91:01:0d:40:e3:a0:dc:37:e8:b7:e4:fb:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
        Validity
            Not Before: Feb  4 18:00:46 2025 GMT
            Not After : Feb  3 18:05:46 2026 GMT
        Subject: CN=CD199B07D8497344E305E817681D4902DFB8A38E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:de:c5:ed:3b:39:30:6f:b8:81:37:84:f4:
                    6b:3d:97:d8:56:8a:fe:bd:e0:db:5b:c1:ce:5d:f1:
                    ef:db:c7:02:35:a8:8d:30:6e:e6:b5:44:0e:fd:db:
                    b8:2b:92:2c:22:3b:95:53:c9:ce:4c:c6:64:e0:9e:
                    46:5e:e1:19:39:c0:5f:d1:70:b0:41:16:58:36:02:
                    50:b0:8b:9e:01:96:0c:d5:3e:18:11:1e:f5:7a:e4:
                    2a:ab:9d:9e:6f:4e:34:a9:e7:f6:fe:aa:7c:f2:91:
                    8b:52:24:06:30:8b:63:c8:d6:aa:e8:7e:d8:83:35:
                    6e:e5:62:75:8f:12:74:db:a7:1c:97:96:1d:0e:45:
                    c9:4e:0d:02:3f:7f:e7:3a:4c:16:42:c3:1c:bd:7a:
                    1c:fd:26:05:f1:1f:f0:d8:11:d4:b2:21:40:85:26:
                    ca:c5:c8:b2:5b:75:48:b5:72:14:7a:73:8d:27:df:
                    47:66:f5:83:b7:15:22:29:bd:35:63:a5:05:bb:48:
                    a4:9d:c6:43:c8:f4:62:f2:3e:fb:19:58:b0:9f:97:
                    9c:b2:27:8b:98:1e:78:df:d6:39:f2:10:70:78:ea:
                    ee:86:bc:3a:6a:c2:90:45:68:46:d7:e6:ed:9f:b5:
                    4f:47:7f:ab:11:ce:43:62:9a:68:3d:b3:03:32:15:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:9B:07:D8:49:73:44:E3:05:E8:17:68:1D:49:02:DF:B8:A3:8E
            X509v3 Authority Key Identifier:
                keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a0::/42

    Signature Algorithm: sha256WithRSAEncryption
         97:43:45:0c:b2:42:53:f9:e5:07:8d:62:a3:ec:9e:ba:05:2f:
         1e:e8:49:b5:2f:dc:89:67:a0:c1:a6:28:15:cb:fe:e9:ce:ae:
         65:cb:1b:09:57:99:37:9b:d3:35:0e:e7:9b:1e:60:da:cf:5b:
         64:0d:cd:d9:4e:8f:4c:d9:db:75:8d:39:57:2e:79:3f:a2:38:
         7a:7a:00:5b:87:df:24:6d:b2:9a:13:de:ec:09:08:70:f7:83:
         2f:d5:7e:40:21:03:fa:8d:df:dd:8b:c8:31:2f:bd:5a:87:8a:
         e0:cf:dd:a4:0a:05:4d:3d:47:5a:01:c5:37:c8:44:fb:f4:e8:
         f7:b8:ef:ff:c2:aa:bb:b6:b7:0c:0f:4a:7f:34:87:26:26:33:
         3c:04:06:50:83:77:e0:a3:9a:94:75:cd:16:f5:9a:ad:7c:d7:
         88:05:f0:bf:11:f8:9c:68:66:c7:24:b1:ed:e3:b5:01:b5:1e:
         43:11:9b:26:c9:e5:f9:90:bd:6d:61:53:1c:2e:4a:55:c4:86:
         0d:a5:1f:89:86:78:84:b5:89:fd:80:6b:65:66:ec:c8:ca:7c:
         f7:10:88:75:72:32:19:6f:64:d7:d2:85:c7:a3:5c:e4:b0:89:
         c2:b2:3a:fc:72:28:6d:0b:77:3e:2f:05:6d:6a:3d:f2:6d:38:
         0e:0a:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:06 2025 by rpki-client