Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          rhYxDiWeJAekY6j1CPL4frnJbfwnnxnCxgFcuXfnoIo=
Subject key identifier:   0B:B9:03:65:7E:01:4F:44:D7:C6:E5:E3:6E:3D:21:1E:1A:C4:ED:AC
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       449F17F3566E0652B0F7C5712A6FD32AF3DAAF8B
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 16 Dec 2024 11:30:01 +0000
ROA not before:           Mon 16 Dec 2024 11:25:01 +0000
ROA not after:            Mon 15 Dec 2025 11:30:01 +0000
asID:                     262249
IP address blocks:        2801:140:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 19:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9f:17:f3:56:6e:06:52:b0:f7:c5:71:2a:6f:d3:2a:f3:da:af:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:25:01 2024 GMT
            Not After : Dec 15 11:30:01 2025 GMT
        Subject: CN=0BB903657E014F44D7C6E5E36E3D211E1AC4EDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:7a:0f:e3:82:b8:41:5b:bf:8c:d0:cb:b8:
                    78:bf:d0:93:49:0b:5f:5f:ba:7e:6f:42:bb:ce:f6:
                    9e:1b:47:1e:a6:0d:9b:95:24:63:b7:f0:ce:a8:07:
                    30:42:64:f0:b0:f7:90:fa:bc:00:61:9d:67:59:71:
                    e7:49:85:2d:70:55:04:d2:ef:96:83:0d:42:aa:d2:
                    06:0f:b6:64:f7:03:67:42:72:bb:cc:87:27:62:ea:
                    cf:b3:32:75:ac:a7:25:8b:fb:64:5f:c1:2e:d3:6e:
                    86:e0:d7:8c:26:95:9e:d8:69:43:99:8e:4d:02:62:
                    8b:a6:98:72:1c:68:78:25:59:67:02:26:0c:7b:b1:
                    f9:b7:da:61:e9:7d:77:a6:08:ff:2b:72:46:e0:35:
                    be:4f:7d:8d:be:89:ee:5a:8e:eb:3b:95:b4:a6:07:
                    bb:7d:f0:68:75:f4:13:68:3e:2d:e4:85:01:0a:ad:
                    0f:0c:61:35:b6:8a:e7:57:72:ab:71:4e:c8:0f:23:
                    51:82:47:a9:25:b9:63:59:ce:e3:c9:a0:7f:6c:0f:
                    8b:0e:45:dc:fc:f5:8d:57:35:52:72:83:8e:0f:e7:
                    3f:42:a5:9d:3f:4a:eb:74:18:a0:0e:d8:8b:65:95:
                    82:45:e7:0f:8a:8f:21:23:99:f1:9c:fb:e8:90:c9:
                    ff:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B9:03:65:7E:01:4F:44:D7:C6:E5:E3:6E:3D:21:1E:1A:C4:ED:AC
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:122::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:35:db:5a:05:b6:5b:18:ee:f8:b6:c4:ec:8c:77:0b:6d:
         8d:37:01:8b:6f:8f:bc:20:e6:73:14:61:b4:37:0e:43:24:2b:
         4d:0e:84:1d:47:c2:fa:53:31:09:65:a7:80:17:48:72:5c:ec:
         24:3e:ef:ff:78:9a:f6:33:eb:55:32:31:91:62:6d:2a:87:5e:
         e0:42:d1:7a:1a:18:55:87:e3:af:76:1b:f2:4e:d5:b0:e3:89:
         48:52:ee:fe:41:6c:52:c5:ad:64:50:1e:d9:d8:45:e4:a1:ec:
         37:a3:fb:17:25:b2:bc:28:06:27:a7:76:ad:73:25:b2:d5:bf:
         b5:6e:aa:32:18:6b:c8:2f:a0:4f:df:80:2f:e9:75:55:25:88:
         15:c0:04:f4:14:47:b5:05:b4:1a:8d:37:6a:0c:08:79:35:0b:
         4f:79:ce:0c:4b:5f:70:15:71:ff:1c:b9:93:0a:a4:5c:b7:10:
         2b:f8:ff:4b:3d:e2:1a:10:df:ce:f9:33:8a:e8:df:93:dd:41:
         7c:7d:ee:79:e6:85:7f:5c:d6:38:3a:de:df:3d:f3:db:ab:4d:
         34:c1:8d:57:bb:98:b9:8c:00:96:a7:c1:1b:dd:52:7e:25:07:
         53:92:52:42:ba:43:52:51:8d:b8:1b:73:b7:29:6e:81:2f:77:
         03:d9:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:58:01 2025 by rpki-client