Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e20323733383832.roa
File:                     323830313a3162353a3a2f34342d3634203d3e20323733383832.roa (raw, json)
Hash identifier:          AcAazFvXbKdebcUTNHLWqrKf36p5MT62zh3dqnQE4AA=
Subject key identifier:   B3:7C:82:30:29:34:7B:0D:22:28:C1:5E:C3:27:FF:78:79:92:67:9A
Certificate issuer:       /CN=00081CCF51F05A88CFEA13F66D62E8E6494B66AA
Certificate serial:       7B5AEB445377C5341E97DD42BED4F2349A5270D1
Authority key identifier: 00:08:1C:CF:51:F0:5A:88:CF:EA:13:F6:6D:62:E8:E6:49:4B:66:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e20323733383832.roa
Signing time:             Fri 25 Jul 2025 22:05:00 +0000
ROA not before:           Fri 25 Jul 2025 22:00:00 +0000
ROA not after:            Fri 24 Jul 2026 22:05:00 +0000
asID:                     273882
IP address blocks:        2801:1b5::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5a:eb:44:53:77:c5:34:1e:97:dd:42:be:d4:f2:34:9a:52:70:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00081CCF51F05A88CFEA13F66D62E8E6494B66AA
        Validity
            Not Before: Jul 25 22:00:00 2025 GMT
            Not After : Jul 24 22:05:00 2026 GMT
        Subject: CN=B37C823029347B0D2228C15EC327FF787992679A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:c0:41:0f:22:37:0e:bd:4d:57:0b:ea:a5:
                    8a:9e:44:3a:2e:78:ac:cb:47:e8:86:3f:97:87:11:
                    84:a0:fe:a1:31:75:db:d7:d9:47:75:c0:4c:69:59:
                    8a:1a:fa:0d:fe:15:45:d8:dc:e1:cc:ea:3b:82:ad:
                    7d:40:55:b7:3f:fe:1f:9c:0a:a1:8e:53:e1:b6:d5:
                    fb:fc:09:37:2e:ae:70:ef:78:b1:42:cf:a9:76:79:
                    e5:6c:71:bb:7f:e4:98:e0:98:4a:b8:50:f2:84:0a:
                    ee:ce:42:b0:fa:dd:1f:49:28:6d:ad:f3:64:13:f8:
                    65:90:ee:1e:5b:37:a3:56:a7:4f:15:6d:2a:0f:e1:
                    d9:f1:52:11:18:61:0d:49:ee:dd:db:2b:b4:c7:51:
                    36:7b:5f:7e:22:d1:2e:bf:a1:b1:f2:0a:eb:5e:bd:
                    fc:14:68:32:81:3a:c7:d4:23:00:7a:5c:a8:70:22:
                    d4:90:af:a7:ed:7f:75:42:ec:37:91:ed:03:2e:07:
                    30:db:68:38:56:18:6f:23:e1:8d:ec:5f:72:38:63:
                    ef:03:7c:97:59:7f:af:61:40:24:39:81:3c:c1:f8:
                    e4:fc:d5:17:02:19:b6:81:7f:1e:65:3d:cd:3a:ea:
                    9a:10:6f:d7:23:80:97:eb:44:1f:49:71:4b:ef:ea:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7C:82:30:29:34:7B:0D:22:28:C1:5E:C3:27:FF:78:79:92:67:9A
            X509v3 Authority Key Identifier:
                keyid:00:08:1C:CF:51:F0:5A:88:CF:EA:13:F6:6D:62:E8:E6:49:4B:66:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e20323733383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b5::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:16:ae:bf:cc:4b:28:79:3b:59:96:62:a5:33:93:92:a4:fa:
         fa:24:c0:60:c6:0d:c4:cc:e3:2b:0f:88:76:47:c0:78:c4:0a:
         2d:0c:f1:27:36:6e:b5:23:c7:75:89:9b:ac:b8:89:34:18:bc:
         10:fd:a5:38:53:8f:6b:ce:06:fe:6c:48:4e:bb:1e:15:4e:8c:
         e7:17:03:86:5b:68:4e:52:8c:2c:81:80:64:6b:01:50:56:27:
         3d:95:e3:f9:cd:ef:fe:cf:9c:c4:8c:4b:70:54:10:26:47:97:
         1a:0f:ef:83:bb:05:be:1f:79:31:9c:6c:30:07:d9:b7:85:38:
         3c:58:c0:43:0d:d1:4e:ee:08:e6:e2:35:ca:69:1b:45:1d:ae:
         44:3a:16:d9:bb:d9:f8:91:2b:eb:3a:b9:c1:0e:0f:dd:d2:9b:
         30:cb:f7:30:13:ca:02:f7:80:24:3d:04:14:fe:fc:91:7c:ff:
         8a:92:58:f2:3c:32:dd:c7:ae:be:9a:1d:cb:2d:3e:04:5f:0b:
         59:5c:04:59:59:c0:2b:e5:51:2e:0b:9e:6e:56:d0:e6:bf:b6:
         e7:4d:6c:e3:07:82:a5:3d:42:ec:db:7a:7d:81:39:15:3c:18:
         37:1d:9f:ed:63:75:27:6a:b7:9c:76:9a:a9:bf:69:9f:b3:de:
         7f:6e:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 14:11:04 2025 by rpki-client