Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203135313639.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203135313639.roa (raw, json)
Hash identifier:          8WZfWVT1CBEqvBKQNq3zd+wboxxRZDKMcJwt7CbfG1M=
Subject key identifier:   86:56:A0:25:6B:AF:6C:95:8B:5E:90:15:8D:C1:B3:72:96:33:26:D7
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       1B03E821493EBE058C93BD8B054F689EED127ACF
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203135313639.roa
Signing time:             Tue 04 Feb 2025 18:37:13 +0000
ROA not before:           Tue 04 Feb 2025 18:32:13 +0000
ROA not after:            Tue 03 Feb 2026 18:37:13 +0000
asID:                     15169
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:03:e8:21:49:3e:be:05:8c:93:bd:8b:05:4f:68:9e:ed:12:7a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:13 2025 GMT
            Not After : Feb  3 18:37:13 2026 GMT
        Subject: CN=8656A0256BAF6C958B5E90158DC1B372963326D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:27:f2:dd:d9:be:da:96:38:c9:56:40:29:
                    6a:ab:b3:64:93:89:03:dc:51:19:01:0d:bb:1c:ce:
                    1e:f0:6a:e1:48:b9:f1:c4:8f:9b:eb:ca:b7:13:1d:
                    47:f2:98:7c:2e:9c:8e:d8:8e:7d:ff:d0:b5:c1:9d:
                    79:c4:ae:1b:54:e2:02:a0:4f:f2:65:72:6f:1a:3d:
                    bc:23:c1:d6:03:25:78:a4:55:0e:41:9b:77:43:72:
                    2f:91:38:97:5e:79:4c:94:2d:78:52:17:7b:a9:2f:
                    90:81:e6:ef:8d:d5:af:d4:25:29:e0:f2:0d:dc:3d:
                    ab:61:e5:0b:62:9a:50:60:cd:6a:cd:3f:b6:c4:75:
                    33:70:b0:32:60:9e:03:33:8b:28:ca:d7:ca:62:6a:
                    4c:68:19:27:02:9b:22:7b:e2:93:0e:6f:51:35:aa:
                    74:00:ce:2b:f6:09:48:b9:7f:32:10:9d:45:92:a7:
                    2d:9d:02:7e:c9:9d:7a:c1:09:78:d6:d0:e2:7a:da:
                    b4:cf:bf:99:57:8d:d0:51:db:c0:b8:a0:3d:41:d7:
                    a5:fb:b4:d1:fb:c3:4f:40:bb:12:cf:57:11:ff:ce:
                    52:e6:6f:ee:60:14:c3:10:6e:be:62:bd:5c:2e:ac:
                    57:13:04:f3:43:f2:bb:a0:a5:67:09:48:e1:ec:30:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:A0:25:6B:AF:6C:95:8B:5E:90:15:8D:C1:B3:72:96:33:26:D7
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203135313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:86:e3:42:9e:3a:bf:68:54:7a:f9:a0:93:b9:40:b4:4c:5d:
         cd:01:f9:9e:25:c5:63:4b:67:46:59:7b:ad:a6:90:90:9f:ed:
         1a:54:b5:a2:f0:4b:c4:33:69:c2:60:c8:28:68:45:c7:0c:20:
         6e:7a:50:f7:ba:17:9d:7e:1c:6b:af:72:6d:32:f1:93:2e:6f:
         b8:e6:2e:b6:5a:76:21:38:0f:c5:c7:44:c3:9c:ed:37:72:fe:
         33:b2:e1:ce:7a:18:eb:a8:41:ae:ea:68:99:50:56:ee:50:c9:
         df:e5:da:a6:ab:95:26:b1:87:c3:7e:25:57:7a:19:6f:28:6a:
         24:c5:9f:29:7b:53:2d:7c:df:ef:f0:d7:41:70:82:dc:0d:2b:
         0f:20:79:48:e2:65:e0:e4:36:b3:6d:b8:6c:19:08:40:06:26:
         1e:e8:d9:87:4b:03:68:2e:d7:27:75:7d:0c:a0:b5:44:42:19:
         36:af:66:0f:03:89:b6:88:5e:49:ef:4d:50:53:e5:a8:cf:53:
         ee:60:05:db:7a:03:9b:30:73:b7:6d:af:6e:bb:36:09:0b:85:
         21:d3:2a:e4:6a:91:80:73:e9:72:72:ca:ca:e1:bb:95:23:c8:
         0e:ab:fb:c6:5f:50:2f:c8:7b:36:27:2a:8d:eb:37:ea:25:e3:
         d3:3a:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:21:27 2025 by rpki-client