Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e203634313637.roa
File:                     323830313a3162353a3a2f34342d3634203d3e203634313637.roa (raw, json)
Hash identifier:          5iK4vf4H5QkyV+IQ0B4gBJAkmPTLHXW3COW3wix6rIc=
Subject key identifier:   1E:73:72:A1:46:AB:7C:90:33:BC:F5:AB:32:59:2E:A7:55:34:0B:69
Certificate issuer:       /CN=00081CCF51F05A88CFEA13F66D62E8E6494B66AA
Certificate serial:       2819172E6AD8AD04879ACBEDFFDA472A3E0C6BA3
Authority key identifier: 00:08:1C:CF:51:F0:5A:88:CF:EA:13:F6:6D:62:E8:E6:49:4B:66:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e203634313637.roa
Signing time:             Fri 25 Jul 2025 22:05:02 +0000
ROA not before:           Fri 25 Jul 2025 22:00:02 +0000
ROA not after:            Fri 24 Jul 2026 22:05:02 +0000
asID:                     64167
IP address blocks:        2801:1b5::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:19:17:2e:6a:d8:ad:04:87:9a:cb:ed:ff:da:47:2a:3e:0c:6b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00081CCF51F05A88CFEA13F66D62E8E6494B66AA
        Validity
            Not Before: Jul 25 22:00:02 2025 GMT
            Not After : Jul 24 22:05:02 2026 GMT
        Subject: CN=1E7372A146AB7C9033BCF5AB32592EA755340B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:57:76:84:a0:3c:f9:74:d3:37:c2:c0:cd:
                    5c:81:06:e3:3c:88:df:09:d6:8d:5c:4d:10:d9:bf:
                    d1:02:3a:fc:37:08:41:85:af:a3:b2:ec:a9:45:52:
                    ea:94:7a:a6:89:ec:ec:9c:46:3c:91:e4:00:36:45:
                    d7:3c:fa:d2:cc:12:e3:93:49:bf:be:ca:94:cb:20:
                    9d:58:5b:09:6a:0b:b7:97:f2:b8:32:ba:dd:4a:b2:
                    9a:a9:05:4e:82:3a:60:1c:39:4b:c5:9b:39:94:20:
                    95:f2:6a:6e:65:d4:79:23:b5:6c:be:89:bb:36:64:
                    8d:9e:69:e6:7a:7e:9b:5e:bf:39:ff:95:3f:a5:c0:
                    8e:1e:2c:ef:bf:0e:1b:aa:c8:1d:af:8b:bc:d9:2a:
                    2c:20:00:46:50:eb:93:b6:8c:9e:88:88:db:c0:28:
                    7a:04:f5:8c:7d:15:69:4e:53:e3:cc:d3:66:91:7f:
                    20:1b:10:23:cc:10:ff:66:c7:98:ad:8f:1c:79:5c:
                    fd:c6:3f:2a:3d:b0:3f:f7:b6:e5:e5:2f:db:92:24:
                    0d:24:b3:8d:5f:7c:25:91:d7:64:77:a2:32:fc:e0:
                    77:90:d8:65:d0:91:f4:cc:90:e5:88:0a:c6:16:d4:
                    75:a5:d2:93:80:8b:a0:d2:81:59:2e:3b:14:ed:65:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:72:A1:46:AB:7C:90:33:BC:F5:AB:32:59:2E:A7:55:34:0B:69
            X509v3 Authority Key Identifier:
                keyid:00:08:1C:CF:51:F0:5A:88:CF:EA:13:F6:6D:62:E8:E6:49:4B:66:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e203634313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b5::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:43:d3:f0:bb:4e:15:d4:53:5a:30:a3:79:c7:61:c8:8b:b5:
         b2:93:f9:14:6a:a6:ff:c9:f9:23:ff:8b:61:ad:70:eb:26:6e:
         fe:68:11:20:1c:39:ad:28:ae:b8:87:e3:98:33:a8:65:47:60:
         02:d4:89:d1:3e:a4:b4:b5:21:36:a4:9d:dc:7d:0c:40:f0:dc:
         51:83:7b:9d:d1:e8:9e:40:68:85:c9:81:66:a5:17:37:ff:c8:
         cd:77:a0:7d:63:f6:11:d0:3c:05:78:29:6f:70:c2:e0:74:fe:
         a1:8f:f6:2e:d7:cb:d6:d2:77:10:8e:f2:73:d5:49:de:fa:c5:
         58:f2:74:61:d0:76:09:64:86:4e:8c:df:b6:8e:23:5e:d2:9b:
         78:bc:94:dc:07:7b:c5:ac:66:b6:9c:4a:5f:63:43:ee:ad:b8:
         99:d7:6a:17:7a:a1:7f:ae:c0:c5:4c:46:67:0e:96:2d:89:26:
         4e:01:63:08:4a:9d:d0:38:c8:8c:37:64:99:d2:82:f7:5c:98:
         50:2b:32:48:82:ab:3c:47:21:c1:a0:a7:35:0b:09:82:5f:a6:
         89:08:b7:5f:a6:11:df:27:b3:8b:75:77:91:b8:a9:18:1d:8a:
         18:01:0f:37:3e:04:32:58:2a:c4:c6:9f:ca:f1:2f:06:df:c4:
         e3:e9:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 08:51:43 2025 by rpki-client