Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303134.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203131303134.roa (raw, json)
Hash identifier:          6zCrQulKKjTAzHBwtKB2jKQZe2r91944ED09FuLeRaM=
Subject key identifier:   C5:7C:70:07:1D:97:BF:2D:5B:97:C4:56:3F:A2:58:EB:36:A2:D7:70
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       16D37D6BCBA47AD2271921E9F8506484154E9F92
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:37:09 +0000
ROA not before:           Tue 04 Feb 2025 18:32:09 +0000
ROA not after:            Tue 03 Feb 2026 18:37:09 +0000
asID:                     11014
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d3:7d:6b:cb:a4:7a:d2:27:19:21:e9:f8:50:64:84:15:4e:9f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:09 2025 GMT
            Not After : Feb  3 18:37:09 2026 GMT
        Subject: CN=C57C70071D97BF2D5B97C4563FA258EB36A2D770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:46:14:7c:1d:63:4c:83:ea:05:7d:e3:fb:
                    24:19:27:5b:54:36:5c:02:96:d0:a9:75:4d:97:3a:
                    4e:7c:8e:9e:91:1e:1e:02:06:0f:01:90:fc:34:ca:
                    bf:e1:c5:8a:19:99:9f:c1:b0:04:f8:c2:d9:f7:ec:
                    a9:02:ec:57:f9:ab:67:86:e9:bc:69:ca:da:69:61:
                    d6:4e:5e:d0:bf:c5:ac:54:1b:f8:4f:d3:b9:e1:d6:
                    f6:47:90:2e:11:68:90:00:3d:0d:7a:cf:0d:d2:3e:
                    50:f4:a8:44:1d:2e:53:34:f6:70:14:79:b8:f9:0d:
                    3b:68:35:2c:98:f7:12:6c:94:03:fd:18:03:f1:33:
                    e0:8a:12:43:1e:4d:39:5b:51:0a:af:be:ea:55:6f:
                    3a:eb:8f:b5:9f:50:d7:b2:91:21:82:6d:6a:56:06:
                    4b:89:6d:39:57:56:73:9f:aa:b6:cb:52:d0:18:ba:
                    32:22:19:43:a1:16:59:50:b7:0f:c0:e6:cc:dd:ca:
                    c6:a2:47:b1:cb:4a:67:28:64:09:44:5c:dd:9a:71:
                    d5:ca:8f:c5:47:a6:0b:ad:1a:4b:6d:e1:b3:c5:9f:
                    32:d8:74:b2:80:3a:7d:75:68:7d:6e:c7:fa:85:85:
                    69:50:c9:be:6d:b8:35:7d:3c:88:44:b9:5b:b3:d3:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:70:07:1D:97:BF:2D:5B:97:C4:56:3F:A2:58:EB:36:A2:D7:70
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:48:de:64:49:17:ab:08:c7:7a:45:ac:22:2a:a7:22:f5:8f:
         c4:1d:79:e3:69:f6:93:bf:f2:ac:1d:b0:6c:bc:b0:d2:3e:33:
         ac:dc:a4:27:bb:99:bc:dc:a7:68:40:d2:a0:3b:86:21:ca:d3:
         66:90:65:4d:7a:71:98:d6:bb:4a:eb:02:4f:54:d5:d3:08:30:
         e7:fa:e0:5f:d1:37:08:e9:0c:8d:f5:38:12:0c:ea:0b:45:81:
         5d:a9:61:80:6e:da:3b:64:ef:8e:b9:5b:c1:41:d7:ec:ba:ef:
         3e:6c:65:ba:15:d3:29:06:3b:80:bc:55:f8:26:52:7a:ed:a1:
         39:7f:ac:f9:47:e7:f6:93:e5:ef:99:fd:55:d0:20:28:19:48:
         ea:ce:66:85:c6:e9:07:96:85:3f:8f:6d:66:12:aa:42:5d:43:
         23:e7:2d:20:61:4f:c0:97:2f:17:95:78:30:7d:77:62:8b:10:
         3d:96:99:41:8b:88:65:8d:11:cb:41:21:36:c3:41:bb:7f:52:
         7b:7a:b0:0a:b1:d8:3c:65:92:15:b9:e4:ae:39:c6:f9:70:8c:
         81:8c:d6:15:ce:78:54:b3:26:9d:c0:eb:13:f5:d7:e4:a5:89:
         9b:d0:e0:45:5b:2b:44:dc:6a:07:a4:b0:94:d0:a0:a5:17:c2:
         2f:41:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:29:34 2025 by rpki-client