Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa
File:                     323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa (raw, json)
Hash identifier:          J+elfS06jKiJEnOlGr0FzhuTbRFJPrFAln4cLf9k8ok=
Subject key identifier:   23:25:C0:1F:FE:9F:E6:04:81:19:BA:4E:8D:68:E0:8E:CA:F4:3D:57
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       01B85EF893DEE03608D964EE3A171CCD592753E8
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:40:55 +0000
ROA not before:           Tue 04 Feb 2025 18:35:55 +0000
ROA not after:            Tue 03 Feb 2026 18:40:55 +0000
asID:                     18747
IP address blocks:        2801:111:4::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b8:5e:f8:93:de:e0:36:08:d9:64:ee:3a:17:1c:cd:59:27:53:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Feb  4 18:35:55 2025 GMT
            Not After : Feb  3 18:40:55 2026 GMT
        Subject: CN=2325C01FFE9FE6048119BA4E8D68E08ECAF43D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:25:50:f7:f0:af:19:cc:95:db:16:99:b1:
                    88:37:6d:d7:a6:63:58:7e:7c:6c:2d:83:ff:cf:50:
                    90:a1:d5:f6:b2:2a:ca:bb:4e:e8:c6:28:71:61:eb:
                    0e:ce:f9:6e:28:42:4e:60:91:b3:31:08:ac:b4:b1:
                    ab:4a:19:f7:25:fd:b5:0d:f2:57:f0:5d:54:8d:1d:
                    52:df:4c:5e:c2:5b:7e:95:c8:19:ee:9d:e2:52:24:
                    0e:f3:fb:cf:8c:74:e4:d6:8d:78:13:72:a5:87:87:
                    f5:28:a9:4d:61:74:c2:ba:2d:ba:62:0b:bf:24:9a:
                    9e:33:07:d9:1e:38:dd:1d:2c:c6:4b:89:bb:9f:35:
                    27:a4:df:14:2f:24:13:b3:61:4b:62:89:38:db:bc:
                    00:84:c3:0d:b0:01:c8:77:74:45:8b:16:d8:d2:0f:
                    79:5c:37:b6:ab:83:2b:95:51:e7:19:c7:c3:f5:f4:
                    1f:dc:34:dd:7d:39:1c:94:18:ac:5c:e2:3e:5f:a7:
                    af:48:dc:48:8c:c9:1f:f2:ea:53:b7:8a:f1:0e:61:
                    63:9d:f3:7c:0c:48:77:66:dd:61:47:6a:88:2e:3f:
                    10:5c:17:f0:95:af:fb:7e:5e:6b:f2:87:3f:50:0c:
                    2f:f1:42:72:8d:1b:2b:42:c8:38:66:92:3e:ea:ce:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:25:C0:1F:FE:9F:E6:04:81:19:BA:4E:8D:68:E0:8E:CA:F4:3D:57
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:f1:4a:61:79:fd:95:d2:04:81:fe:b6:6e:9c:dd:ee:10:
         8b:d4:bd:22:8b:00:9d:01:11:09:ae:22:b0:92:6b:26:a0:65:
         84:12:c6:0f:8a:3d:6b:b1:d6:30:10:70:04:87:07:ad:15:61:
         00:6f:8a:69:65:b8:10:12:76:6e:fe:e4:c4:49:ba:0e:a1:7b:
         30:41:69:0a:83:08:a2:3e:cf:32:7e:0f:60:fc:aa:d3:29:d1:
         df:59:98:96:92:9e:99:bb:7e:4a:df:6e:34:e2:c4:b2:0f:c6:
         2d:d1:0d:7e:4b:3f:0c:56:15:0b:b0:f8:81:ab:65:5d:21:19:
         72:09:59:62:2f:1c:16:e4:13:7b:d1:01:fb:c4:36:16:82:11:
         82:7b:a1:a2:82:e0:0b:a9:7b:c6:fa:07:36:f2:59:b5:f1:48:
         fc:be:3a:ba:f7:ab:93:1f:c0:df:06:c5:f1:93:e5:f9:7e:3d:
         e9:9d:72:6f:c6:c5:1e:a7:ba:18:ec:b7:21:2e:d0:ca:4d:43:
         b9:0c:55:b7:86:07:a3:64:4b:61:0f:c7:72:5e:b9:28:0f:71:
         d2:92:0c:3e:ea:06:87:63:c2:ea:67:9d:c6:6f:5c:8f:0c:48:
         97:ea:79:7c:ab:55:ed:30:04:be:4a:36:b5:fa:1d:da:72:cf:
         60:14:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:28:04 2025 by rpki-client