Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31313a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a31313a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          YqLwQKF0SKqRyY0vjQaHj+ty7G4nEkL10QnxGAN5mO0=
Subject key identifier:   42:83:F4:56:4B:EF:BE:27:8A:1B:07:49:1C:B6:5B:79:8C:1D:8C:D0
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       346C9D2579595D7C9D0054D2BE8BF46B6B55DA08
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31313a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 16 Dec 2024 11:25:00 +0000
ROA not before:           Mon 16 Dec 2024 11:20:00 +0000
ROA not after:            Mon 15 Dec 2025 11:25:00 +0000
asID:                     262249
IP address blocks:        2801:140:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 19:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6c:9d:25:79:59:5d:7c:9d:00:54:d2:be:8b:f4:6b:6b:55:da:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:20:00 2024 GMT
            Not After : Dec 15 11:25:00 2025 GMT
        Subject: CN=4283F4564BEFBE278A1B07491CB65B798C1D8CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:28:8e:fc:bc:88:68:a0:a0:65:f7:cd:5d:
                    a2:a4:c6:9e:db:ba:fa:86:4b:20:77:cf:da:5f:7a:
                    56:8c:2c:a5:54:54:ba:a6:4f:26:32:3b:71:b2:2b:
                    d5:e6:11:24:a2:e2:7b:a2:33:20:f2:92:5d:c9:d0:
                    28:53:1a:79:67:06:80:2e:89:c0:a0:18:aa:4c:83:
                    03:54:12:db:16:40:bb:c3:53:14:8f:55:57:f8:9a:
                    72:93:18:14:3c:c8:12:1d:27:89:72:95:19:22:74:
                    5b:f8:0d:7d:33:cf:17:7e:3c:5d:ce:d7:b5:53:cf:
                    4f:72:b6:39:3f:ac:59:68:60:87:f1:77:75:8a:03:
                    5f:f0:9e:53:84:19:52:49:29:f9:43:38:d8:ab:90:
                    15:36:fd:b3:53:97:b6:93:39:c0:5f:a8:ab:ef:a7:
                    3c:b8:d3:99:9d:91:fa:a9:a2:8a:c6:f1:d3:48:cd:
                    d3:7e:b6:f6:18:8d:68:50:f7:d0:85:df:77:57:b1:
                    21:a8:1a:c2:50:87:30:72:37:54:16:92:77:82:c4:
                    ae:a3:6d:06:a9:e9:15:ae:e7:8d:aa:0e:c1:35:b8:
                    1a:ae:0b:bb:23:0c:ae:c8:d7:bf:99:21:15:e7:ff:
                    f5:08:21:21:38:c4:f5:3b:2e:11:60:6f:9d:c2:94:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:83:F4:56:4B:EF:BE:27:8A:1B:07:49:1C:B6:5B:79:8C:1D:8C:D0
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31313a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:d5:e0:0b:1f:c2:81:db:e4:f7:39:e4:22:ba:da:69:34:
         a1:d6:4a:62:1a:ab:46:a4:b3:97:3d:6a:b4:5c:e5:e2:fd:83:
         b6:33:14:f1:ce:ae:c2:5c:d3:66:64:d3:f9:2d:48:c6:ad:62:
         d7:91:3b:5e:20:0e:39:95:30:89:c0:0a:26:3d:5c:24:d5:d5:
         bc:ea:3d:f8:d2:e2:02:46:fb:25:6c:0b:0b:c5:1c:25:ac:18:
         34:75:07:81:fd:fe:5e:2e:5d:1b:df:df:85:86:6c:b1:58:c6:
         58:23:ab:5d:a4:1d:69:df:ac:86:97:f5:19:db:6e:0b:ca:88:
         9c:eb:a2:73:85:d2:7a:b0:71:fb:e7:cf:7d:aa:77:80:f7:58:
         3f:e9:7f:7f:7f:44:1c:93:f3:c0:5c:be:86:b7:25:b4:3d:47:
         b9:ce:b6:3c:8e:dc:7b:85:18:0f:d7:23:7f:00:2d:3b:9b:bf:
         34:be:72:db:51:01:25:aa:10:62:fd:82:11:d2:08:1e:7c:56:
         b3:be:98:7b:06:95:75:23:e5:d7:56:13:85:81:d7:58:18:91:
         58:24:6f:34:10:66:d7:ab:6e:9b:a2:d9:20:9b:3a:5b:89:84:
         3a:ca:2f:aa:a4:08:20:9b:12:7c:29:db:99:1d:53:59:26:6e:
         0f:e3:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:49:22 2025 by rpki-client