Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/323830313a31393a613830303a3a2f34382d3438203d3e20323731383032.roa
File:                     323830313a31393a613830303a3a2f34382d3438203d3e20323731383032.roa (raw, json)
Hash identifier:          t8r5EEc+EF07kke8P7i+ZfE4U1oC+tbSEcEkWfBHXw8=
Subject key identifier:   9B:C1:5B:D0:69:15:EE:5A:94:6E:5A:C9:9F:01:96:50:87:83:6D:49
Certificate issuer:       /CN=F54F6694D527A6831B6534FF31AE6F8C3BCCAADA
Certificate serial:       3306FEC114F9C1B3AF3CB05C1FFE1272BB3CF498
Authority key identifier: F5:4F:66:94:D5:27:A6:83:1B:65:34:FF:31:AE:6F:8C:3B:CC:AA:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/323830313a31393a613830303a3a2f34382d3438203d3e20323731383032.roa
Signing time:             Tue 04 Feb 2025 18:09:35 +0000
ROA not before:           Tue 04 Feb 2025 18:04:35 +0000
ROA not after:            Tue 03 Feb 2026 18:09:35 +0000
asID:                     271802
IP address blocks:        2801:19:a800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 21:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:06:fe:c1:14:f9:c1:b3:af:3c:b0:5c:1f:fe:12:72:bb:3c:f4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54F6694D527A6831B6534FF31AE6F8C3BCCAADA
        Validity
            Not Before: Feb  4 18:04:35 2025 GMT
            Not After : Feb  3 18:09:35 2026 GMT
        Subject: CN=9BC15BD06915EE5A946E5AC99F01965087836D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:ba:7f:66:42:f0:78:d2:3d:73:a2:28:be:
                    89:38:17:34:fc:c4:eb:60:fe:5a:10:5d:23:8e:f7:
                    ef:b1:f3:87:9b:ef:36:d7:9e:90:00:20:a4:28:1c:
                    8d:58:33:6d:83:9a:6a:da:a0:be:6a:78:62:25:43:
                    01:b0:7f:9c:9b:76:22:b4:c6:13:67:1b:20:12:3d:
                    6a:ac:63:1d:a5:07:fe:8e:59:c1:50:50:c7:cb:b5:
                    3d:94:13:00:26:5a:95:7e:86:f5:b9:db:45:3e:a7:
                    5b:2f:bd:a5:81:9f:52:5f:e6:cb:41:c2:ed:80:15:
                    e9:60:d1:4a:30:24:2f:c8:fd:49:c1:51:fc:23:90:
                    bf:bd:18:0b:65:20:55:29:ca:17:92:6b:7c:82:c7:
                    a8:36:69:32:f1:72:66:a4:de:8e:d9:43:de:f3:b1:
                    14:b1:32:8e:4f:35:2b:13:81:c4:49:ce:bf:a9:c7:
                    9d:f7:70:c3:a1:60:c3:36:cb:77:b6:b8:2d:6a:c7:
                    bd:0c:61:f6:96:ce:11:21:79:2e:2f:ee:26:f0:a7:
                    ab:37:8e:49:f4:b6:4a:9a:3b:83:10:96:44:68:ba:
                    91:e5:9c:ab:85:61:bc:16:f6:19:8f:e7:52:d7:2b:
                    93:8d:1c:09:11:1d:7b:0f:24:93:ba:1f:03:d0:60:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C1:5B:D0:69:15:EE:5A:94:6E:5A:C9:9F:01:96:50:87:83:6D:49
            X509v3 Authority Key Identifier:
                keyid:F5:4F:66:94:D5:27:A6:83:1B:65:34:FF:31:AE:6F:8C:3B:CC:AA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/323830313a31393a613830303a3a2f34382d3438203d3e20323731383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:83:4a:db:18:d2:a3:ee:c6:f5:22:c1:2b:15:c5:94:7a:db:
         e2:78:a1:83:6f:e7:1c:d5:9e:cf:b4:56:c5:8b:64:90:2b:ba:
         e8:b0:02:9f:86:79:19:31:2b:30:2b:84:bc:6f:26:99:09:1a:
         e5:86:fb:dd:25:6b:cd:a7:c1:eb:2e:1e:63:32:1f:46:b3:35:
         3e:94:94:fe:de:a9:7f:35:4f:07:30:bf:82:8b:6c:c4:ee:9a:
         0a:04:30:56:e7:67:6a:ac:a9:6f:40:56:2a:51:07:8f:dc:8c:
         5d:5c:82:35:95:e1:28:f9:f5:95:33:be:d5:79:27:b9:70:8c:
         95:17:8f:6c:8c:31:35:e5:5a:a9:99:3d:82:2a:7e:7e:bc:e1:
         75:9b:12:55:b6:3f:92:81:1f:b7:6e:a3:70:4a:c7:0a:a1:84:
         de:91:b1:67:06:53:99:92:e4:7a:d7:4f:0d:b9:cc:de:2d:f4:
         2b:86:1b:f4:dd:f2:77:62:69:36:b3:c2:93:d9:b8:55:bf:d0:
         81:e1:9f:63:af:3c:fc:55:7c:88:a7:e2:94:78:96:95:11:1d:
         48:1b:60:e9:19:62:cc:1d:77:16:d9:4d:b5:ec:8d:6d:4e:63:
         e4:30:25:7a:2a:39:c6:2f:ee:88:88:be:1b:11:88:7c:b8:57:
         1f:6b:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:02 2025 by rpki-client