Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203136353039.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          6oBq9yKevJMdnRM9/FreUSuiw0i9xozvA4cxb5EeFaM=
Subject key identifier:   85:75:1E:9B:7E:30:0E:C8:92:DD:9D:A9:6F:8E:66:1C:66:C9:CC:50
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       261F0F548BCE7D0DDA2ACC5F2177AACB091ECB91
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203136353039.roa
Signing time:             Tue 04 Feb 2025 18:37:13 +0000
ROA not before:           Tue 04 Feb 2025 18:32:13 +0000
ROA not after:            Tue 03 Feb 2026 18:37:13 +0000
asID:                     16509
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 08:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1f:0f:54:8b:ce:7d:0d:da:2a:cc:5f:21:77:aa:cb:09:1e:cb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:13 2025 GMT
            Not After : Feb  3 18:37:13 2026 GMT
        Subject: CN=85751E9B7E300EC892DD9DA96F8E661C66C9CC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3e:47:9e:c4:dd:1f:f7:41:f7:b8:16:6d:16:
                    da:c9:e9:d7:d2:76:e3:1c:c7:08:f8:36:95:dd:95:
                    fd:87:cf:b8:19:9b:84:73:5d:c2:11:2d:4a:fd:74:
                    4e:0f:6b:fe:02:c9:bb:ca:ba:68:21:1b:75:9a:7d:
                    44:fb:7e:e8:3e:a1:89:74:ee:f2:59:3d:87:34:b4:
                    23:fa:22:76:42:d1:cb:a0:57:f2:39:5c:99:9b:13:
                    14:3c:2a:2e:53:b4:76:39:2a:66:16:65:8e:66:8f:
                    47:55:98:59:88:1f:c0:b9:e1:b4:a0:29:1c:22:8b:
                    c8:ac:55:d9:39:62:94:5e:2e:40:e6:d0:24:79:fd:
                    c1:f2:34:ef:b8:c7:fb:df:50:7b:7f:34:54:f4:bc:
                    b7:99:09:fe:c5:6f:2f:42:e6:ea:70:30:73:2a:63:
                    78:f9:44:18:80:11:cf:21:96:1c:1a:29:de:de:bd:
                    e3:36:fb:1f:82:a9:ba:78:45:51:b8:6a:c4:5b:9c:
                    6e:97:8d:41:20:dc:87:21:5a:22:cc:22:5d:4a:cc:
                    0e:5c:23:2b:1a:67:db:a2:81:f9:d7:78:b6:aa:10:
                    9d:dd:d8:d3:d2:b6:1d:b1:68:a6:7b:14:81:5b:c7:
                    d8:ef:df:dd:a0:12:59:70:c2:61:22:cf:0d:e8:9d:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:75:1E:9B:7E:30:0E:C8:92:DD:9D:A9:6F:8E:66:1C:66:C9:CC:50
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:cd:79:d4:60:2b:9c:d1:aa:f4:9e:e3:87:fb:06:0c:5e:
         6d:84:2d:88:6b:ce:3c:8b:2a:cd:79:48:3b:c1:34:99:ca:6c:
         26:86:6b:48:9f:73:2f:fe:1f:a4:a2:eb:bb:79:1a:d5:3b:07:
         2c:b4:c3:1c:6e:f6:19:b6:e3:21:71:38:06:a2:87:f8:30:57:
         02:d8:7a:78:eb:84:e8:d9:4a:48:40:c3:b5:4b:90:a3:b8:3e:
         3c:fa:8f:ce:e2:55:9b:02:d7:cb:be:97:43:00:67:f4:e7:14:
         14:1f:ce:b2:88:7a:f6:b2:4f:f3:ca:dd:e4:fe:e4:69:ca:13:
         b6:fd:5c:c2:2f:bf:78:5f:6f:d0:77:6d:85:36:fa:a9:5e:6e:
         d9:d1:f0:d6:06:60:c1:2b:07:84:f6:52:aa:f2:e4:eb:b0:93:
         ea:95:d3:2e:72:f3:b9:db:a4:9a:a6:ec:c5:1a:25:50:7c:f2:
         c7:a4:8c:2d:4e:6b:34:a5:e0:c0:6f:4a:6b:24:a7:f8:27:c1:
         30:7a:9b:0e:af:d7:41:63:4c:e7:fb:18:d2:87:a2:2d:6c:43:
         0c:f6:a8:f0:2a:06:84:67:90:c8:0d:c2:3d:13:da:fb:7c:9e:
         88:b3:22:58:b1:f0:fd:e0:fe:20:93:b2:e5:b0:93:01:29:09:
         94:26:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:24 2025 by rpki-client