Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          FmVt0KCJ51S1P08GAJ+JoYYRaa+uIcmyA4mIqdEQH+Y=
Subject key identifier:   99:4E:31:E4:C8:4D:FD:AB:CA:1E:60:2C:9E:51:DB:A4:14:65:18:AD
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       1DA341222BB11341FCC7D7A91584D9AFAEDF012C
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:40:53 +0000
ROA not before:           Tue 04 Feb 2025 18:35:53 +0000
ROA not after:            Tue 03 Feb 2026 18:40:53 +0000
asID:                     18747
IP address blocks:        2801:111:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a3:41:22:2b:b1:13:41:fc:c7:d7:a9:15:84:d9:af:ae:df:01:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Feb  4 18:35:53 2025 GMT
            Not After : Feb  3 18:40:53 2026 GMT
        Subject: CN=994E31E4C84DFDABCA1E602C9E51DBA4146518AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:70:80:87:0c:95:96:63:63:3f:5a:53:ad:
                    f6:e1:9c:24:cf:3b:fa:75:45:0f:9a:c3:50:84:e3:
                    28:49:15:af:f2:99:da:8b:1b:8f:48:ec:97:30:0e:
                    b6:0b:f2:3b:22:7d:8d:4e:db:d3:1f:7d:b5:c4:e1:
                    cf:f2:cf:4c:32:c8:ef:2b:3c:62:6f:c4:ea:3a:48:
                    36:1d:da:ec:0f:92:29:ce:42:c8:02:e8:04:29:2c:
                    91:f6:e2:85:a0:c2:81:1d:2b:7d:21:b3:02:0a:e8:
                    9a:86:ea:2b:62:fc:36:64:49:b8:57:2f:6e:a4:e7:
                    a8:df:4b:c1:17:41:61:91:79:b9:d1:ec:48:8d:47:
                    1f:7c:00:95:a3:07:04:46:a3:bc:8f:3f:8e:63:7d:
                    cc:b2:3d:60:8d:bc:50:6c:72:38:71:b8:32:1f:84:
                    d4:3f:2d:85:b1:cc:7e:f7:b7:34:70:e3:41:21:3c:
                    01:0c:84:d4:d0:e0:e6:34:2f:5a:2b:e2:44:18:ef:
                    18:97:39:e8:9e:3a:67:ed:39:93:b4:7a:49:22:12:
                    98:79:8c:2b:0f:80:d1:bc:ce:3a:a8:e9:b1:e9:51:
                    f0:98:b9:04:df:a8:44:bb:cf:79:8c:6a:f2:bc:58:
                    14:d2:19:bd:17:2d:48:ea:98:8d:d9:c9:b4:b9:f8:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4E:31:E4:C8:4D:FD:AB:CA:1E:60:2C:9E:51:DB:A4:14:65:18:AD
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:94:b1:dd:90:83:af:16:ff:4a:23:a6:44:c3:96:fb:08:
         22:0e:91:40:1e:5f:5c:b9:91:00:0b:78:02:03:64:4b:41:41:
         63:43:0e:9a:95:53:de:c1:e9:b8:eb:24:b8:72:8c:ea:b8:e2:
         3a:e0:d7:c2:d9:9f:b7:47:88:74:49:2a:1f:a7:c8:cd:41:e5:
         7f:3b:a2:10:99:b2:64:27:3a:f0:3a:9b:20:3f:fb:22:d9:f7:
         73:6a:89:01:26:59:f5:ba:1a:b0:b4:1f:b4:a6:37:2a:96:42:
         01:ac:d5:2c:e2:c5:ba:de:20:b5:ba:8a:0a:eb:45:ae:46:e1:
         53:b2:2f:17:18:24:f5:19:11:a2:c5:9b:86:18:6f:21:4d:b0:
         66:8c:49:41:cb:b3:2f:a7:7c:3c:65:3d:b9:93:3b:85:16:aa:
         a2:4a:91:1d:06:7e:6c:d7:a7:6e:ef:77:10:a2:d0:1d:05:38:
         3a:53:4a:27:09:c6:31:93:15:f9:e8:85:49:8d:58:68:4c:1f:
         a4:88:0c:ec:55:63:7c:ca:5c:86:9e:ae:fe:bd:84:c4:15:4d:
         9c:78:ea:a6:6e:8a:c8:2e:21:34:36:97:df:35:56:da:c8:fa:
         8f:16:25:99:e9:ca:a5:d2:8e:4f:58:b4:5b:2c:89:fe:c4:22:
         96:87:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:13:01 2025 by rpki-client