Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390370915B25E13A84F26A43ED7D5F43E7695157778DCA5C58E2BBA8CC65E5C4/0/323830313a31613a623830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31613a623830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          Zl/UuWloBZ7/bUdqSmRM1l0nYlB5p4igRa7yh+1nhcU=
Subject key identifier:   C8:EE:4C:14:B4:B5:9D:F4:0A:D5:64:02:9E:8F:D6:82:DF:D0:FE:31
Certificate issuer:       /CN=F7C3FA7B70E3BA14E87A9C27CE1526A36462A0BB
Certificate serial:       66252CC3479DA5E5A0B66E4A79EB276F8BC13D6B
Authority key identifier: F7:C3:FA:7B:70:E3:BA:14:E8:7A:9C:27:CE:15:26:A3:64:62:A0:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7C3FA7B70E3BA14E87A9C27CE1526A36462A0BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390370915B25E13A84F26A43ED7D5F43E7695157778DCA5C58E2BBA8CC65E5C4/0/323830313a31613a623830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:05:40 +0000
ROA not before:           Tue 04 Feb 2025 18:00:40 +0000
ROA not after:            Tue 03 Feb 2026 18:05:40 +0000
asID:                     262589
IP address blocks:        2801:1a:b800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390370915B25E13A84F26A43ED7D5F43E7695157778DCA5C58E2BBA8CC65E5C4/0/F7C3FA7B70E3BA14E87A9C27CE1526A36462A0BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390370915B25E13A84F26A43ED7D5F43E7695157778DCA5C58E2BBA8CC65E5C4/0/F7C3FA7B70E3BA14E87A9C27CE1526A36462A0BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7C3FA7B70E3BA14E87A9C27CE1526A36462A0BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:25:2c:c3:47:9d:a5:e5:a0:b6:6e:4a:79:eb:27:6f:8b:c1:3d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7C3FA7B70E3BA14E87A9C27CE1526A36462A0BB
        Validity
            Not Before: Feb  4 18:00:40 2025 GMT
            Not After : Feb  3 18:05:40 2026 GMT
        Subject: CN=C8EE4C14B4B59DF40AD564029E8FD682DFD0FE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:fa:7a:6e:de:e9:4f:26:9a:6a:23:9e:f6:
                    3a:11:02:5e:d9:5a:fa:f5:3d:15:3f:e1:30:01:63:
                    88:28:86:19:ba:07:8f:82:21:9a:8c:7d:f1:da:af:
                    f9:37:91:57:69:d4:ec:9b:01:cd:62:3f:61:4e:9d:
                    a7:d4:aa:bb:a8:1d:73:24:86:25:c3:5a:ba:e3:6e:
                    2b:2c:d9:73:5c:8d:a5:9a:57:54:67:07:63:1a:14:
                    6f:22:4c:a4:c8:e2:47:46:4e:41:ff:40:4a:bb:dd:
                    9e:3b:18:42:7a:6d:5d:18:28:ce:6e:c6:ba:0a:8d:
                    c1:ee:61:18:36:09:96:77:3a:a4:65:ce:87:a7:35:
                    f2:1a:48:18:c4:eb:7f:cf:55:22:9f:eb:cb:93:e7:
                    1d:ba:7a:28:fe:72:f5:70:82:be:15:81:11:9c:9a:
                    7b:33:42:74:6b:b0:17:0f:b6:2e:cb:97:29:47:5f:
                    54:91:ad:3a:4c:59:0a:09:9d:04:fe:38:39:fa:ea:
                    9f:09:84:82:7f:93:b0:7d:a1:14:bf:22:a4:bf:8a:
                    98:72:44:64:d2:ba:4d:a6:32:c5:df:3b:94:72:e3:
                    2b:0f:ad:21:e8:0e:a1:92:45:e0:06:3d:2b:c0:d5:
                    4a:3c:93:74:d2:69:4f:b8:70:b0:06:d7:1d:cd:f2:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EE:4C:14:B4:B5:9D:F4:0A:D5:64:02:9E:8F:D6:82:DF:D0:FE:31
            X509v3 Authority Key Identifier:
                keyid:F7:C3:FA:7B:70:E3:BA:14:E8:7A:9C:27:CE:15:26:A3:64:62:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390370915B25E13A84F26A43ED7D5F43E7695157778DCA5C58E2BBA8CC65E5C4/0/F7C3FA7B70E3BA14E87A9C27CE1526A36462A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7C3FA7B70E3BA14E87A9C27CE1526A36462A0BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390370915B25E13A84F26A43ED7D5F43E7695157778DCA5C58E2BBA8CC65E5C4/0/323830313a31613a623830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:3d:45:a8:10:14:34:02:72:b9:51:ee:f8:60:7e:c6:46:b0:
         2b:82:b0:32:6d:c5:e4:e6:99:87:5c:c8:45:7f:98:ec:5c:2f:
         a6:e0:0e:9c:d2:62:cb:e0:59:ec:0e:af:8d:5f:f5:7f:17:f8:
         7b:ab:ca:d3:d6:18:36:b4:53:38:ed:12:a6:14:0b:42:21:5b:
         d8:d8:f4:65:78:1e:4e:19:c6:93:b3:75:9a:6f:9b:1d:f1:f0:
         20:67:a9:5e:4b:53:84:ca:f4:17:51:e2:fd:7a:85:bc:f8:28:
         ba:fb:b4:a3:e9:7a:7e:ac:8b:e4:b3:a4:b7:96:39:d9:b0:09:
         46:30:e7:68:a4:c3:df:d5:c9:de:9f:1a:4c:46:35:0e:99:29:
         14:fc:85:b0:27:5b:ea:6d:31:06:c2:19:53:9c:9c:93:af:38:
         0e:d2:35:26:15:e4:2f:61:b8:c9:a0:2d:05:91:e6:76:fb:e1:
         7d:e5:ac:d7:8a:18:ff:ed:e1:d4:72:e6:58:b9:5c:96:ce:b6:
         12:3f:46:ee:9b:f3:72:ca:2a:74:9f:d0:a9:6d:f7:34:17:e6:
         bd:56:14:e7:10:e5:b2:80:7d:1d:0f:10:82:8c:e0:ec:dd:bf:
         2b:dd:ab:59:37:76:8e:86:df:91:7b:91:58:28:9e:8b:aa:b3:
         44:d2:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:03 2025 by rpki-client