Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a323a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a323a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          awa5DzVP0i1usvVJhClfAhTDNLd++hbZKUkrjPmI9r4=
Subject key identifier:   2E:43:4B:32:BB:0D:67:1F:FF:33:56:C7:13:90:A2:22:AF:09:1E:21
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       29ED748B03D9B5C1CE1FFC5889BD9E257BA4B769
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a323a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 16 Dec 2024 11:30:01 +0000
ROA not before:           Mon 16 Dec 2024 11:25:01 +0000
ROA not after:            Mon 15 Dec 2025 11:30:01 +0000
asID:                     262249
IP address blocks:        2801:140:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 17:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ed:74:8b:03:d9:b5:c1:ce:1f:fc:58:89:bd:9e:25:7b:a4:b7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:25:01 2024 GMT
            Not After : Dec 15 11:30:01 2025 GMT
        Subject: CN=2E434B32BB0D671FFF3356C71390A222AF091E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:93:cf:51:3c:fa:cd:b1:2a:c3:e9:61:d7:
                    75:c5:27:4e:0b:35:f7:2f:05:e9:74:8e:c0:67:c3:
                    a6:4f:1f:26:2a:41:13:73:17:de:4f:97:94:ff:fd:
                    82:8e:c4:f3:80:0b:05:a2:e2:e0:1b:40:1a:8b:07:
                    ec:34:cb:94:15:6b:7e:5d:c4:5b:f5:bc:ff:6d:7e:
                    ab:f1:24:b4:45:36:1f:db:a0:01:26:9e:04:f1:e2:
                    ed:fc:7d:56:02:49:51:0d:8f:30:cf:a1:14:3b:cb:
                    a0:31:f3:a0:af:e0:29:f5:9b:9e:f3:5f:4a:f9:1f:
                    10:93:dd:3e:ca:a5:cd:11:08:eb:ec:0a:1c:85:b6:
                    b4:f4:8d:1e:56:95:1f:c3:8d:d0:79:f5:17:35:38:
                    ca:ee:06:a3:8c:ab:e9:0e:29:cd:3d:99:5b:2a:f8:
                    69:37:4d:35:67:36:74:11:67:c0:a8:16:67:43:57:
                    a8:3d:55:69:dd:2b:f7:e7:27:55:92:3e:ed:61:04:
                    ed:37:b1:bc:fc:ef:44:69:b9:43:87:6c:81:3d:3c:
                    7f:c7:4f:88:10:bd:5d:b0:4d:7c:c7:53:ef:a9:79:
                    18:95:53:3d:4f:67:2b:f3:5b:87:18:47:b8:1b:d9:
                    a8:de:65:d7:13:e7:f5:a1:0d:63:a1:ea:1f:89:6e:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:43:4B:32:BB:0D:67:1F:FF:33:56:C7:13:90:A2:22:AF:09:1E:21
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a323a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:bb:fd:d6:e0:f8:21:87:f8:1d:49:3c:8f:d9:1f:96:6b:16:
         08:7c:db:91:65:5a:a7:8b:2a:0d:4f:c5:25:42:ec:90:2f:d8:
         a9:7c:9e:cd:c1:6f:c1:78:f5:f7:32:ae:e1:4c:29:3b:ae:a2:
         ee:4a:c4:fe:d3:12:88:5a:97:2c:94:d9:3a:4d:11:91:ea:db:
         93:2d:0c:5c:a9:cd:76:cf:b2:92:cb:e3:14:62:c4:a9:f7:57:
         93:c7:68:82:11:78:fb:50:4f:f1:ef:4a:1c:d7:b4:da:9c:05:
         e4:f7:87:c5:b9:49:a3:b6:aa:9d:1d:60:bc:ba:3e:cc:88:91:
         62:aa:88:be:78:6b:d8:0e:aa:37:af:58:5f:89:d8:1b:a2:d7:
         f2:ae:3e:0c:40:2c:df:3b:e2:f1:e8:f2:30:22:3a:2b:95:ff:
         28:54:81:d9:d4:0c:87:ad:de:43:18:4d:6d:3d:2f:41:22:32:
         78:d6:53:55:0c:46:45:30:d5:7a:cb:a8:a3:0b:a8:83:18:92:
         50:22:d2:c4:64:06:ec:2d:ac:f1:da:17:20:7c:19:b6:2c:2d:
         57:e5:ce:06:6a:10:bb:d4:56:18:f8:5e:be:72:7d:94:32:bb:
         89:66:8b:af:3d:fe:90:5f:69:ee:55:30:73:ed:a8:77:26:0c:
         ff:06:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:40:34 2025 by rpki-client