Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa
File:                     323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa (raw, json)
Hash identifier:          pfERmRW7pqKsXRH147dybdqeA8rQtA96IwMNwcwU4Sk=
Subject key identifier:   17:4D:F1:94:10:2C:50:12:8E:D9:30:C1:C7:86:C1:62:76:DE:B5:E7
Certificate issuer:       /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Certificate serial:       4409F5176D3E5B788706F06DE8933AEA0F87EE39
Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa
Signing time:             Tue 04 Feb 2025 18:26:52 +0000
ROA not before:           Tue 04 Feb 2025 18:21:52 +0000
ROA not after:            Tue 03 Feb 2026 18:26:52 +0000
asID:                     271821
IP address blocks:        2801:10:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:09:f5:17:6d:3e:5b:78:87:06:f0:6d:e8:93:3a:ea:0f:87:ee:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
        Validity
            Not Before: Feb  4 18:21:52 2025 GMT
            Not After : Feb  3 18:26:52 2026 GMT
        Subject: CN=174DF194102C50128ED930C1C786C16276DEB5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:00:24:f9:c1:f8:3b:b4:f5:d3:49:e8:f9:
                    d6:97:8c:a3:cf:8f:67:dc:21:d4:c4:7c:e3:b9:da:
                    9d:b1:83:f7:c2:a6:62:b3:81:24:6c:41:4c:97:26:
                    d5:a8:a9:02:35:3b:14:c1:64:a8:af:0d:17:9a:e7:
                    77:40:be:d7:12:91:16:a6:d1:52:bf:2e:ed:1c:14:
                    9a:cc:55:78:79:38:7a:e8:00:ed:2b:fa:34:b2:05:
                    c3:5d:7e:86:45:29:3e:71:ec:2a:37:df:10:ec:b7:
                    85:0e:f7:2d:b6:85:43:cb:b9:72:3c:d2:0a:3e:eb:
                    20:50:a3:b4:51:73:f3:31:3d:a7:87:04:ed:da:af:
                    c0:dc:31:c8:7c:5a:32:c9:d9:57:37:da:c7:dd:03:
                    d8:ea:42:6e:21:7b:12:73:8b:fe:f1:a3:37:3c:06:
                    a9:94:f4:88:fa:67:43:37:eb:90:99:f7:1f:a8:07:
                    0e:1f:4d:5f:3c:65:21:7b:cc:e4:34:3e:b8:f8:cf:
                    f7:cd:0f:a1:fb:d1:e9:4b:6c:4c:82:35:0d:f8:a4:
                    cf:65:2e:d0:df:54:83:af:e7:6a:25:01:d3:cc:fb:
                    bc:83:b2:25:89:fd:37:44:0c:76:5d:4f:04:ee:66:
                    0c:ab:55:dc:ec:89:01:60:45:3e:bc:62:ff:bb:cc:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:F1:94:10:2C:50:12:8E:D9:30:C1:C7:86:C1:62:76:DE:B5:E7
            X509v3 Authority Key Identifier:
                keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:b5:b5:75:7b:42:cb:5f:49:36:74:34:ed:e4:b8:a6:34:
         db:8c:eb:00:b6:a3:b1:c4:c9:fe:e3:01:0a:ca:cb:a1:11:a8:
         34:5a:be:12:c2:70:30:f5:87:0e:93:e8:32:97:1f:60:b1:23:
         ee:8f:6b:1d:ce:99:91:93:20:11:7a:c7:8d:07:01:b3:4d:c9:
         fe:a9:2b:69:25:12:da:1e:0f:3a:5f:83:39:20:59:46:cf:6f:
         74:bd:26:4c:26:06:05:ba:26:cf:8e:64:76:bc:53:c1:ca:8d:
         ae:39:70:54:d0:4a:40:db:d3:fc:23:97:6c:b5:a6:d3:ac:32:
         4b:3a:d9:66:a7:6d:d2:bb:ec:1e:29:a0:18:94:8a:75:f3:3d:
         c3:e1:60:5a:76:7a:b9:84:e3:ae:b5:8b:c6:87:69:d0:2e:08:
         f4:29:a5:02:20:b7:a6:d9:7e:28:15:45:e1:20:80:73:d3:ff:
         f7:d1:09:f6:2b:bf:a5:b3:36:6d:5a:6c:ce:21:73:fa:bd:ac:
         cd:7b:5d:0a:3f:d7:df:ac:94:64:d3:4c:f4:8f:b0:af:12:61:
         22:1b:33:23:7f:2c:f7:63:f4:08:e9:2b:ed:8c:52:58:b6:4a:
         cd:c9:12:4d:c5:39:6d:b9:44:09:19:10:e0:54:5e:db:2d:1d:
         91:b9:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:15 2025 by rpki-client