Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e20323633373130.roa
File:                     323830313a303a3231303a3a2f34382d3438203d3e20323633373130.roa (raw, json)
Hash identifier:          25jOCUzuRy5j/HNgLH4P4TRRhukMT4zNeXZvUgb7b6E=
Subject key identifier:   3A:6A:B3:09:B4:D7:33:7A:AC:CC:93:6F:DF:D6:65:49:77:EB:74:AB
Certificate issuer:       /CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1
Certificate serial:       12C887D58A7D8FDF87F0570C11D39C0FFC009888
Authority key identifier: 18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e20323633373130.roa
Signing time:             Tue 04 Feb 2025 20:07:10 +0000
ROA not before:           Tue 04 Feb 2025 20:02:10 +0000
ROA not after:            Tue 03 Feb 2026 20:07:10 +0000
asID:                     263710
IP address blocks:        2801:0:210::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c8:87:d5:8a:7d:8f:df:87:f0:57:0c:11:d3:9c:0f:fc:00:98:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1
        Validity
            Not Before: Feb  4 20:02:10 2025 GMT
            Not After : Feb  3 20:07:10 2026 GMT
        Subject: CN=3A6AB309B4D7337AACCC936FDFD6654977EB74AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:ec:8c:50:53:e4:7f:cd:d8:e3:cb:aa:87:
                    98:b3:0d:d2:86:5b:5f:4d:43:07:ef:38:8f:34:18:
                    af:40:c3:6c:32:9e:2e:f8:31:6c:8f:87:6f:08:21:
                    04:82:d0:39:e5:74:2b:7a:ab:f8:ca:f1:3a:4c:9f:
                    c8:e2:90:f8:1c:82:88:6c:a4:d0:f7:27:17:ad:6c:
                    4c:7a:41:e2:cf:3a:1d:8a:1b:da:7d:e5:51:15:d3:
                    cb:ec:1f:6c:ed:29:2d:b8:83:aa:5d:c3:eb:cc:41:
                    d3:c7:91:4c:75:fb:29:43:9b:46:45:c4:04:a2:bd:
                    08:87:ba:b9:ee:d6:6a:c7:15:d5:de:28:91:da:8d:
                    88:d2:2e:0e:36:30:22:b5:d6:46:21:4d:17:9d:28:
                    ea:bb:b5:24:ad:62:ae:5b:a6:62:88:49:99:e6:c0:
                    41:4c:be:43:16:a3:77:12:a2:cf:9e:c3:fe:7d:49:
                    82:f8:2d:77:a7:28:f5:84:2f:d5:d1:cb:54:3b:f6:
                    26:00:db:77:fc:eb:82:e8:fa:68:86:87:59:80:80:
                    97:27:ac:c6:91:52:5a:2c:4e:f6:67:f8:3c:3c:79:
                    ae:94:9e:ae:ef:d2:25:73:8f:18:34:de:85:61:22:
                    da:40:2f:44:42:71:fc:ac:b3:ab:f1:9c:71:39:fa:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6A:B3:09:B4:D7:33:7A:AC:CC:93:6F:DF:D6:65:49:77:EB:74:AB
            X509v3 Authority Key Identifier:
                keyid:18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e20323633373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:f1:ef:25:10:8a:3c:86:76:9c:83:69:55:6b:1b:ba:f8:44:
         17:52:71:23:ad:df:79:c0:53:13:2a:99:b0:9c:93:af:ea:d3:
         f0:55:b5:ba:cd:89:8b:39:b6:35:bd:fc:f0:75:3e:d6:32:06:
         5b:0c:72:e3:56:ea:4f:da:ef:7c:fb:18:a5:3f:6e:f1:24:25:
         49:92:0c:34:67:aa:be:b1:75:28:fa:8c:d3:ba:43:66:53:cc:
         67:76:3e:b8:d0:43:b3:5a:bb:bb:35:25:2e:a1:16:18:83:91:
         4e:a5:26:90:c2:06:01:ea:d4:86:30:9c:b6:05:0c:6c:9a:72:
         22:ce:54:6a:75:11:80:a4:a2:44:d2:7b:c1:7d:14:73:ce:3b:
         c1:1e:21:c5:09:35:46:18:e0:43:78:85:e5:e9:0c:59:24:99:
         fb:a7:11:a4:2a:17:93:b7:f6:4c:e1:b4:41:82:45:8e:d2:3a:
         1a:64:f7:ce:62:d0:1c:36:b5:1b:e9:f5:f4:b0:5f:79:a0:99:
         81:4b:ab:f9:9c:59:cd:ac:16:36:5c:66:77:6f:6c:70:e3:aa:
         f8:36:5d:98:59:cf:19:e9:03:57:07:80:27:40:6e:af:df:9f:
         c0:b2:89:9a:85:7e:f7:21:45:ae:2e:44:25:19:94:8a:9a:2a:
         e4:f4:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:08:24 2025 by rpki-client