Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2033353439.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e2033353439.roa (raw, json)
Hash identifier:          O5OkN5tqmO/CJYIbKMzgumECYXK6HAIyTa2abVdt+JE=
Subject key identifier:   E9:51:0A:5C:22:77:63:E2:A2:AE:0C:3B:6C:1A:7C:B4:51:F8:A4:46
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       20A93EE9A47E3546225010738689EEC9790947D7
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2033353439.roa
Signing time:             Tue 04 Feb 2025 18:37:07 +0000
ROA not before:           Tue 04 Feb 2025 18:32:07 +0000
ROA not after:            Tue 03 Feb 2026 18:37:07 +0000
asID:                     3549
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 08:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a9:3e:e9:a4:7e:35:46:22:50:10:73:86:89:ee:c9:79:09:47:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:07 2025 GMT
            Not After : Feb  3 18:37:07 2026 GMT
        Subject: CN=E9510A5C227763E2A2AE0C3B6C1A7CB451F8A446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:d0:87:ee:7e:76:ef:be:63:03:12:5f:e6:
                    8b:63:26:fa:a0:f6:0c:db:7c:43:b9:f9:72:f7:f4:
                    cd:42:1d:c9:ed:cf:12:a0:77:c4:4e:d7:2a:e0:69:
                    0b:ea:4e:44:b3:35:07:d7:c2:65:99:38:85:70:38:
                    c7:b7:8c:aa:97:1b:94:cf:10:f2:86:0c:db:c7:36:
                    34:88:26:70:5e:f8:37:ad:33:0c:0e:7f:90:7d:47:
                    3b:b5:ea:ff:32:f3:f9:66:30:7e:ca:2f:d0:e1:e6:
                    50:a6:fc:4c:1f:97:ae:7a:e9:77:87:a7:de:7b:de:
                    ae:9e:a7:47:4b:d5:1b:6e:b4:34:9d:3b:be:63:4f:
                    dd:36:9b:eb:ad:50:46:d9:74:15:a5:61:95:f2:a1:
                    1c:fd:01:4a:dd:57:81:c6:0c:79:ed:7c:c4:99:a2:
                    ea:de:1a:da:4b:01:c2:fb:ea:1a:46:66:b6:26:4e:
                    46:83:42:84:38:31:d5:31:63:d1:db:a7:bd:53:eb:
                    9b:0c:ab:79:f8:28:b5:82:73:e8:6d:20:a7:05:13:
                    ef:cb:05:4c:06:61:52:fc:4d:0f:73:51:5b:16:43:
                    d1:e6:01:db:18:2a:53:dc:74:b8:50:04:eb:94:c4:
                    0d:f0:d7:94:f6:5b:12:fd:ec:a5:df:a6:45:07:36:
                    62:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:0A:5C:22:77:63:E2:A2:AE:0C:3B:6C:1A:7C:B4:51:F8:A4:46
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:5e:7a:7b:a1:2f:15:db:51:b8:70:04:d3:c1:ae:d2:67:e0:
         94:3d:a9:8c:a2:81:bc:fe:a0:ba:4e:2b:65:1a:9a:0c:24:1b:
         80:86:1e:60:f0:53:bf:a2:43:cf:80:80:0a:69:72:c2:5f:b1:
         f5:f2:85:13:eb:d6:d1:9f:40:a6:63:11:85:42:dd:e2:9f:18:
         f7:52:c8:e2:d5:43:32:7d:ec:18:89:f2:a4:1a:04:d8:06:e5:
         85:e4:7c:dd:e8:db:84:83:44:e0:e6:92:d9:01:34:44:ca:c2:
         ac:b6:03:5f:f1:34:55:69:13:0e:a2:ea:4d:86:d8:36:ce:42:
         95:3b:49:05:89:34:4b:b7:6a:5d:16:47:71:31:d0:ba:c2:47:
         f5:0f:4b:32:af:12:52:07:e1:b6:c4:49:38:62:f7:a7:9f:31:
         1a:2a:a3:f0:99:7c:0b:d6:ac:3f:a3:fa:c2:a9:0d:c8:b0:f1:
         0b:fe:41:82:b5:57:a4:aa:8f:6d:d6:13:32:82:a8:08:27:52:
         23:43:ef:b9:5d:de:fc:86:0d:3f:ff:9d:79:6f:08:4b:52:19:
         ca:ce:ac:c5:7c:0c:5d:fe:ee:c3:34:00:32:fc:3c:6f:e9:3a:
         ce:b3:58:c5:42:28:b8:46:86:57:bd:14:cb:45:1d:4a:0b:38:
         b4:a7:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:09 2025 by rpki-client