Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/323830313a31323a373030303a3a2f34382d3438203d3e20323636373337.roa
File:                     323830313a31323a373030303a3a2f34382d3438203d3e20323636373337.roa (raw, json)
Hash identifier:          W7rXUyrYsdDkVO9v/Rov50BpE0uXb7XE+WQ+ILok4X4=
Subject key identifier:   53:7C:15:16:0C:94:C5:0B:64:A1:30:DE:0B:A9:6E:78:13:C9:28:67
Certificate issuer:       /CN=69D4A331FF0D28734F9E4E330ED38A514B7DB5BD
Certificate serial:       4BA9DC2004C1770F170F365DABCF5D91B46E02C1
Authority key identifier: 69:D4:A3:31:FF:0D:28:73:4F:9E:4E:33:0E:D3:8A:51:4B:7D:B5:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/323830313a31323a373030303a3a2f34382d3438203d3e20323636373337.roa
Signing time:             Tue 04 Feb 2025 18:46:07 +0000
ROA not before:           Tue 04 Feb 2025 18:41:07 +0000
ROA not after:            Tue 03 Feb 2026 18:46:07 +0000
asID:                     266737
IP address blocks:        2801:12:7000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a9:dc:20:04:c1:77:0f:17:0f:36:5d:ab:cf:5d:91:b4:6e:02:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D4A331FF0D28734F9E4E330ED38A514B7DB5BD
        Validity
            Not Before: Feb  4 18:41:07 2025 GMT
            Not After : Feb  3 18:46:07 2026 GMT
        Subject: CN=537C15160C94C50B64A130DE0BA96E7813C92867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:32:31:dd:3d:4e:84:7e:f6:cc:61:57:40:
                    cc:32:94:9e:de:aa:b6:b4:63:38:bb:82:0a:51:56:
                    9c:28:14:14:d4:bf:bd:5b:89:28:37:7a:da:63:61:
                    cb:87:34:44:cc:b3:09:37:9a:a0:27:b2:fa:78:09:
                    20:79:ee:50:d1:a1:0d:c3:a1:eb:23:02:bd:aa:b9:
                    2e:85:32:2c:1b:59:f8:5e:ac:94:f6:c5:b3:01:b4:
                    a0:72:5e:8e:5c:22:65:65:97:da:6d:fd:64:b1:4d:
                    a7:8c:fb:20:bb:98:3e:a2:f8:d2:57:e2:39:4c:21:
                    95:06:03:8a:17:91:52:39:a2:ae:9b:2a:1a:82:e6:
                    51:73:27:1a:39:fc:25:0f:77:c6:a8:5f:fb:c8:e1:
                    76:e6:ad:fe:9e:e4:b5:8d:f6:b8:f4:a5:45:93:61:
                    52:89:59:0b:29:43:a0:09:3c:3d:5e:88:cc:a3:b5:
                    ac:34:0b:8f:7f:bd:63:3a:3d:ba:de:92:14:e2:1d:
                    c4:e2:07:e0:5d:82:2e:59:77:a5:2e:61:34:08:9d:
                    99:1d:18:6b:03:ba:ef:bd:14:6d:be:8d:61:1b:8c:
                    d8:14:aa:48:6f:dd:16:86:81:b4:c0:3c:2f:27:98:
                    5a:4e:a4:e2:25:78:14:04:e2:7f:78:5e:d4:e1:a7:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7C:15:16:0C:94:C5:0B:64:A1:30:DE:0B:A9:6E:78:13:C9:28:67
            X509v3 Authority Key Identifier:
                keyid:69:D4:A3:31:FF:0D:28:73:4F:9E:4E:33:0E:D3:8A:51:4B:7D:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/323830313a31323a373030303a3a2f34382d3438203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:c3:e9:db:e1:73:13:e5:44:8d:9b:db:e9:bc:db:b9:4f:92:
         ee:26:e5:4d:e9:76:50:9c:e6:4c:6a:32:c7:ce:2f:b0:68:24:
         00:e1:e8:36:97:01:f5:bd:34:c4:ca:ad:da:b8:80:29:54:f7:
         c4:78:5a:4c:a7:32:3d:cd:62:a6:45:f5:ec:ce:c3:88:0a:3f:
         e6:d1:c6:10:7e:8a:a5:74:58:e5:75:2f:13:4a:db:23:c7:34:
         90:06:9c:32:79:d8:c0:1b:5c:bb:38:0a:1e:5e:e4:a5:13:41:
         ac:aa:f9:65:f5:7b:dd:39:48:ce:8a:fc:26:7d:3b:a3:63:c8:
         c5:58:fd:fa:37:c3:4a:97:b2:5f:96:50:50:72:2a:71:5a:2b:
         bb:aa:d7:05:d5:53:0c:5d:14:76:14:de:01:26:82:c7:4c:6a:
         e8:ee:48:c6:00:c9:68:60:03:8a:d7:69:3d:5b:54:0b:8f:a0:
         79:f7:7d:7d:35:7a:e2:eb:e9:26:b0:8d:1d:99:7b:49:bc:42:
         65:69:61:18:c6:90:e4:7a:2e:6e:51:2b:bd:df:39:22:ea:8b:
         a9:ef:9a:bf:98:b7:d4:1c:83:12:8d:36:07:8a:72:05:53:c9:
         30:f1:08:03:f7:9e:27:ef:ed:c3:9a:60:e4:35:b0:44:53:27:
         d1:98:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:09 2025 by rpki-client