Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          n7E7qTtrL/qly2acReB4+uZTZSmfYzikYXOeO8p984Q=
Subject key identifier:   22:EA:F6:68:04:99:71:CD:7F:D7:CE:12:52:82:50:03:05:C9:5D:0F
Certificate issuer:       /CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Certificate serial:       264E661226390B30F0E9D6E86CBF3B9BE39CDE11
Authority key identifier: 4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 20:02:52 +0000
ROA not before:           Tue 04 Feb 2025 19:57:52 +0000
ROA not after:            Tue 03 Feb 2026 20:02:52 +0000
asID:                     14080
IP address blocks:        2801:11:c800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4e:66:12:26:39:0b:30:f0:e9:d6:e8:6c:bf:3b:9b:e3:9c:de:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
        Validity
            Not Before: Feb  4 19:57:52 2025 GMT
            Not After : Feb  3 20:02:52 2026 GMT
        Subject: CN=22EAF668049971CD7FD7CE125282500305C95D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:4f:96:3a:66:07:39:fd:fe:cd:5c:ec:41:
                    41:31:78:51:0f:1e:17:10:b4:7c:af:d2:a6:79:a2:
                    0b:3d:5b:a8:ec:30:83:4e:3c:67:cb:23:35:a5:a7:
                    97:1e:ba:c0:20:d2:4d:e1:e9:b8:24:e7:51:42:dc:
                    1a:4d:ba:ac:bc:7a:eb:e0:2f:38:8c:2b:16:fa:2b:
                    e4:ce:5a:bb:e4:98:c9:28:43:30:58:e0:6a:94:07:
                    21:77:38:81:fc:47:fa:f5:a6:55:17:d2:50:14:91:
                    b6:a0:2e:70:80:45:96:c0:d7:a2:eb:b3:af:89:83:
                    95:1e:09:18:86:61:f1:42:b9:51:20:a2:d0:93:3a:
                    0f:6b:6f:43:26:b2:7d:89:33:17:24:2d:62:ae:3f:
                    20:bd:df:14:ec:12:18:14:2d:f8:65:d7:b4:b5:57:
                    19:9d:d3:e8:3b:97:a3:4a:25:a0:52:6d:6b:37:ee:
                    e3:10:30:11:8e:21:9f:eb:02:f4:2e:3a:9a:8a:c1:
                    81:af:b4:66:29:6e:d5:b1:9c:54:02:25:92:07:24:
                    9e:79:66:95:7b:72:58:9b:7c:db:f0:cd:23:2f:ff:
                    5a:6f:0a:a9:52:f5:25:64:77:fe:28:d4:24:bd:83:
                    bb:f9:b6:00:8c:f0:8a:e7:5c:c4:16:23:14:d2:b6:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EA:F6:68:04:99:71:CD:7F:D7:CE:12:52:82:50:03:05:C9:5D:0F
            X509v3 Authority Key Identifier:
                keyid:4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:67:4a:57:f6:d3:61:01:8d:72:37:be:e3:fb:d3:db:d2:33:
         55:0b:6f:b7:61:89:fd:f0:6d:b8:3d:e0:ab:0b:95:e3:80:98:
         52:52:5c:8f:80:3d:b2:ea:90:e5:db:46:81:16:f8:cc:db:5a:
         64:62:8d:06:6d:27:e9:ba:be:28:8c:40:b8:2e:1e:ec:fd:fe:
         f6:26:16:5b:bb:5d:d7:6b:f1:da:11:ca:d6:dd:17:1e:d8:93:
         f6:7f:ef:03:1d:f8:88:a8:fc:71:af:ca:76:d1:32:26:f2:bd:
         09:2c:d6:ef:6a:71:52:1d:de:50:44:43:4d:f9:39:ef:fd:03:
         48:f8:59:9f:1d:92:c6:06:c1:21:9e:08:82:f4:b1:b1:52:6f:
         34:e8:03:07:ec:5a:11:61:6e:1e:7d:46:32:2a:c2:c0:18:de:
         88:98:85:74:79:b1:30:d8:e4:77:e1:e2:38:a5:43:12:34:3d:
         24:4e:e7:4a:c2:5a:eb:a4:7a:b1:e6:b2:d4:5b:31:ac:47:70:
         a1:4d:39:01:20:6f:fe:b7:89:aa:ad:a8:2e:ad:da:57:fe:cb:
         1c:a7:9d:a3:47:9a:3f:be:38:a4:7a:46:61:b2:e5:84:08:a8:
         b8:6d:a8:22:76:5b:9c:26:02:09:9f:18:cf:bb:6b:3e:a1:cd:
         6b:4c:5b:fe
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUJk5mEiY5CzDw6dbobL87m+Oc3hEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGODNGRkU0N0U1QTEyNUFCMjNDRDBBNDc0MzkwNzhD
QTlFMTE5ODAeFw0yNTAyMDQxOTU3NTJaFw0yNjAyMDMyMDAyNTJaMDMxMTAvBgNV
BAMTKDIyRUFGNjY4MDQ5OTcxQ0Q3RkQ3Q0UxMjUyODI1MDAzMDVDOTVEMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoU+WOmYHOf3+zVzsQUExeFEP
HhcQtHyv0qZ5ogs9W6jsMINOPGfLIzWlp5ceusAg0k3h6bgk51FC3BpNuqy8euvg
LziMKxb6K+TOWrvkmMkoQzBY4GqUByF3OIH8R/r1plUX0lAUkbagLnCARZbA16Lr
s6+Jg5UeCRiGYfFCuVEgotCTOg9rb0Mmsn2JMxckLWKuPyC93xTsEhgULfhl17S1
Vxmd0+g7l6NKJaBSbWs37uMQMBGOIZ/rAvQuOpqKwYGvtGYpbtWxnFQCJZIHJJ55
ZpV7clibfNvwzSMv/1pvCqlS9SVkd/4o1CS9g7v5tgCM8IrnXMQWIxTStupBAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUIur2aASZcc1/184SUoJQAwXJXQ8wHwYDVR0j
BBgwFoAUTfg//kfloSWrI80KR0OQeMqeEZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRUZFM0IwQjU5M0NFOUYxQzcyNjYwMTc0NzMzNjk0NDVD
NTI5MDM2NEEyQjAxNjg1QjA3RUQxM0U3QkE2RDdCLzAvNERGODNGRkU0N0U1QTEy
NUFCMjNDRDBBNDc0MzkwNzhDQTlFMTE5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80REY4M0ZGRTQ3RTVBMTI1QUIy
M0NEMEE0NzQzOTA3OENBOUUxMTk4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkVGRTNCMEI1OTNDRTlGMUM3MjY2MDE3NDczMzY5NDQ1QzUyOTAzNjRB
MkIwMTY4NUIwN0VEMTNFN0JBNkQ3Qi8wLzMyMzgzMDMxM2EzMTMxM2E2MzM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMDM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQARyAAwDQYJKoZIhvcNAQELBQADggEBAFJnSlf202EBjXI3vuP709vSM1ULb7dh
if3wbbg94KsLleOAmFJSXI+APbLqkOXbRoEW+MzbWmRijQZtJ+m6viiMQLguHuz9
/vYmFlu7Xddr8doRytbdFx7Yk/Z/7wMd+Iio/HGvynbRMibyvQks1u9qcVId3lBE
Q035Oe/9A0j4WZ8dksYGwSGeCIL0sbFSbzToAwfsWhFhbh59RjIqwsAY3oiYhXR5
sTDY5Hfh4jilQxI0PSRO50rCWuukerHmstRbMaxHcKFNOQEgb/63iaqtqC6t2lf+
yxynnaNHmj++OKR6RmGy5YQIqLhtqCJ2W5wmAgmfGM+7az6hzWtMW/4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:58:34 2025 by rpki-client