Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa
File:                     323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa (raw, json)
Hash identifier:          GvU02c1A/TSQx17Alm7E4eBllAU9engXwaaZdgiB+1U=
Subject key identifier:   F0:D6:72:3F:D3:4E:7A:C3:61:58:AB:66:C5:D8:2C:3D:EF:CC:89:4B
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       1895B3C6BF5463BF8DCB1EE1D28D29D89973EA
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:40:54 +0000
ROA not before:           Tue 04 Feb 2025 18:35:54 +0000
ROA not after:            Tue 03 Feb 2026 18:40:54 +0000
asID:                     18747
IP address blocks:        2801:111:2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:95:b3:c6:bf:54:63:bf:8d:cb:1e:e1:d2:8d:29:d8:99:73:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Feb  4 18:35:54 2025 GMT
            Not After : Feb  3 18:40:54 2026 GMT
        Subject: CN=F0D6723FD34E7AC36158AB66C5D82C3DEFCC894B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:fb:80:5a:e9:a1:1c:82:ca:30:c1:19:d7:
                    11:17:33:e4:b3:31:d6:31:26:ea:d9:f2:e5:72:bf:
                    57:85:80:4e:6f:75:26:63:0b:ec:24:6b:72:42:9a:
                    29:fa:a7:c3:1d:ab:5c:0f:48:42:b2:56:6d:33:dc:
                    d1:15:c1:2e:e2:42:81:1f:f2:d1:44:cd:04:82:c7:
                    5e:c4:69:16:dd:35:90:ce:46:e7:19:63:e4:65:92:
                    9a:b1:a9:d6:69:00:0a:2d:e5:cf:b0:2c:f0:4e:9b:
                    b3:b1:98:06:ca:a7:6b:e6:70:b9:32:db:a5:bf:77:
                    ba:01:d4:a4:77:e6:5e:94:07:6a:6e:5d:9d:d0:0f:
                    4f:37:38:8f:cd:e1:7e:f9:38:4a:71:88:fb:d7:bb:
                    85:68:92:4d:bb:ce:0d:5d:4f:e5:4d:31:24:f1:cc:
                    cf:96:f2:cd:e5:4a:74:ed:f9:41:24:d6:cc:bf:ad:
                    23:e1:df:9d:99:ef:99:6b:18:3d:d8:88:d2:c3:9f:
                    7b:b5:b8:e1:a9:a0:0e:74:03:e7:d7:74:e2:ef:2b:
                    ae:ff:dd:64:dc:02:8f:3f:bc:c1:04:2a:04:7b:fb:
                    d3:13:d2:10:f5:bd:20:93:aa:dc:60:70:53:0d:cc:
                    c7:3c:05:75:a5:62:e5:87:81:24:17:fe:14:4f:92:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D6:72:3F:D3:4E:7A:C3:61:58:AB:66:C5:D8:2C:3D:EF:CC:89:4B
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         09:37:28:e2:d5:ac:70:d0:7b:31:c8:c0:8c:b1:6f:73:0e:ed:
         88:9c:77:be:b6:cf:c1:6c:3d:79:f3:ce:2f:2d:63:27:bb:b6:
         bf:82:82:64:08:8f:45:30:19:f8:93:f0:aa:3e:fd:44:c3:0c:
         d0:78:f3:4f:78:08:a5:70:53:a7:37:b9:15:39:3a:55:46:32:
         74:0e:99:15:64:18:08:98:d8:19:d1:f6:9b:7b:fc:6f:00:26:
         1c:25:09:bb:26:28:37:ec:38:a1:49:b6:6c:03:6d:78:35:09:
         05:5d:54:5e:62:28:1c:3b:e4:66:59:02:3f:57:16:d2:fd:4b:
         e3:c1:0e:99:46:d4:0d:22:d2:01:8b:1d:1a:b7:18:00:9c:f6:
         b0:ff:29:6c:88:e8:a2:81:75:fa:ef:80:9d:ff:19:35:10:84:
         4f:cc:5f:da:87:3d:ba:4c:93:78:48:db:6b:07:a7:ea:76:e0:
         84:2a:15:72:6b:25:f0:9e:81:e3:b9:38:7b:37:53:f1:ef:61:
         0a:ef:34:22:cf:d7:a8:0a:9d:b2:6d:8e:f7:f9:17:a4:5c:c6:
         3a:e6:a9:bb:e1:09:6d:11:9c:62:51:79:a5:4f:1d:a4:64:7b:
         ac:72:98:b1:d2:65:b1:7a:6c:6e:a1:57:8a:8a:f5:21:03:5c:
         fe:61:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:17 2025 by rpki-client