Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/323830313a3166383a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3166383a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          lPe6htP1VjKt/fbUbDybkIWReBe5ypsETNaipomFpio=
Subject key identifier:   EA:53:26:27:34:61:55:DD:38:EE:12:8D:95:62:F0:41:FC:44:C4:27
Certificate issuer:       /CN=CC121F7A2F5847D63452275EE667C5A03D867975
Certificate serial:       0FA41EB3BA0055DBEA1754AC857E0254ABE69DCF
Authority key identifier: CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/323830313a3166383a3a2f34382d3438203d3e203134303830.roa
Signing time:             Fri 11 Jul 2025 20:20:00 +0000
ROA not before:           Fri 11 Jul 2025 20:15:00 +0000
ROA not after:            Fri 10 Jul 2026 20:20:00 +0000
asID:                     14080
IP address blocks:        2801:1f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Jul 2025 19:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a4:1e:b3:ba:00:55:db:ea:17:54:ac:85:7e:02:54:ab:e6:9d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC121F7A2F5847D63452275EE667C5A03D867975
        Validity
            Not Before: Jul 11 20:15:00 2025 GMT
            Not After : Jul 10 20:20:00 2026 GMT
        Subject: CN=EA532627346155DD38EE128D9562F041FC44C427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:06:a1:48:b7:73:aa:bf:85:ab:de:d9:e3:
                    ef:16:f7:c7:ef:d1:b3:81:a5:61:fa:40:a8:34:5f:
                    2c:79:90:59:05:18:93:80:33:39:35:23:7f:4a:0d:
                    a4:ee:76:b2:6d:40:d0:03:82:23:56:3c:b1:04:81:
                    6e:c8:7e:98:ab:02:21:01:f7:a1:d1:83:28:4e:7b:
                    f0:28:c4:dd:e6:c1:09:f5:c1:d6:bc:90:ca:99:d3:
                    7e:e1:37:0f:37:35:6e:99:91:fc:0b:9d:1d:d1:20:
                    14:02:89:aa:28:90:e0:b7:b2:c9:0a:df:e1:33:79:
                    7e:a6:db:42:0b:30:6b:a0:08:eb:29:1b:1e:9d:69:
                    68:9f:f9:b6:46:a2:d1:e4:6a:e2:fd:89:e7:a1:82:
                    b9:b1:ef:92:d0:3b:2c:b7:20:f2:40:54:81:0a:85:
                    ea:df:20:ed:f0:37:3c:65:6e:fd:63:67:c7:10:1b:
                    10:7a:6f:de:de:67:cb:b4:38:a8:eb:00:0a:1b:4b:
                    83:11:63:c1:96:2c:16:69:47:6e:e2:0e:34:a5:c5:
                    0d:3b:51:9e:ce:7e:40:92:b6:0d:a2:cd:1e:9b:69:
                    7c:88:e0:9c:9b:5a:54:17:4c:47:c7:e6:2f:e4:48:
                    27:32:94:f1:fa:d4:19:94:a8:7d:28:61:d7:9a:6b:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:53:26:27:34:61:55:DD:38:EE:12:8D:95:62:F0:41:FC:44:C4:27
            X509v3 Authority Key Identifier:
                keyid:CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/323830313a3166383a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:e2:f9:dd:52:e8:94:6b:d5:21:1f:26:b4:64:7d:1f:d4:
         d5:24:a6:cf:a6:20:fe:b7:84:33:c0:f5:ea:4e:d4:39:05:b8:
         73:10:47:a9:7a:9e:11:67:7f:c8:e4:c4:83:e7:c9:0c:35:ab:
         f6:e7:13:2c:3e:e8:81:25:5c:39:ef:b8:87:69:a6:35:85:ef:
         0a:20:ce:67:df:0a:af:6f:86:bc:fd:95:bc:7a:dc:70:44:7f:
         6a:9c:2c:4c:de:ab:d5:91:1a:c2:c4:72:23:8b:b4:8b:8c:4d:
         fd:1d:85:c5:0f:94:01:98:75:0b:35:8e:9f:3d:4e:88:c9:ec:
         cf:59:09:87:35:d6:86:d7:e8:f7:f3:39:59:5d:1f:be:6d:f2:
         37:eb:43:44:f0:30:04:b2:7d:b1:a0:99:53:63:6b:28:a8:77:
         25:37:4f:51:9e:b1:67:8b:a4:cf:7f:39:4e:26:87:47:0c:dd:
         f6:04:df:c8:d0:4e:5f:26:0a:3e:93:21:d7:51:40:02:cb:e8:
         2e:ab:95:30:f0:95:79:b1:c9:94:e4:f7:8b:99:ad:cc:34:23:
         4f:e5:90:76:69:aa:e3:f4:aa:8a:7c:79:00:f8:fc:21:71:c9:
         64:f0:da:ed:29:64:8c:cc:88:22:40:94:47:d9:e6:3c:3f:7b:
         6b:7a:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:16:03 2025 by rpki-client