Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A6E8BA5926CE69D1B62F80AD59505D01F32717EF6DB7D2E4E3DAED7DEF5DEF/0/323830313a31623a643830303a3a2f34382d3438203d3e20323732393434.roa
File:                     323830313a31623a643830303a3a2f34382d3438203d3e20323732393434.roa (raw, json)
Hash identifier:          PWAeaknaP7mS0wwGQz6ax2CenKbMPt/Y1dZmIeg9Ctg=
Subject key identifier:   59:B8:BD:5E:40:E9:18:EE:CD:0E:29:3E:51:31:0A:AC:06:E5:37:8A
Certificate issuer:       /CN=1F925B85E5DB9CB6F70B6BC57285941FF9E95F2F
Certificate serial:       76F08F7FFCF8868ECA4281FAE0B8BBB8F77106ED
Authority key identifier: 1F:92:5B:85:E5:DB:9C:B6:F7:0B:6B:C5:72:85:94:1F:F9:E9:5F:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F925B85E5DB9CB6F70B6BC57285941FF9E95F2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A6E8BA5926CE69D1B62F80AD59505D01F32717EF6DB7D2E4E3DAED7DEF5DEF/0/323830313a31623a643830303a3a2f34382d3438203d3e20323732393434.roa
Signing time:             Tue 04 Feb 2025 18:37:02 +0000
ROA not before:           Tue 04 Feb 2025 18:32:02 +0000
ROA not after:            Tue 03 Feb 2026 18:37:02 +0000
asID:                     272944
IP address blocks:        2801:1b:d800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A6E8BA5926CE69D1B62F80AD59505D01F32717EF6DB7D2E4E3DAED7DEF5DEF/0/1F925B85E5DB9CB6F70B6BC57285941FF9E95F2F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A6E8BA5926CE69D1B62F80AD59505D01F32717EF6DB7D2E4E3DAED7DEF5DEF/0/1F925B85E5DB9CB6F70B6BC57285941FF9E95F2F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F925B85E5DB9CB6F70B6BC57285941FF9E95F2F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f0:8f:7f:fc:f8:86:8e:ca:42:81:fa:e0:b8:bb:b8:f7:71:06:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F925B85E5DB9CB6F70B6BC57285941FF9E95F2F
        Validity
            Not Before: Feb  4 18:32:02 2025 GMT
            Not After : Feb  3 18:37:02 2026 GMT
        Subject: CN=59B8BD5E40E918EECD0E293E51310AAC06E5378A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:69:4f:5e:e3:9f:a9:54:54:e9:be:94:6f:
                    ce:37:d9:c2:2b:d4:47:78:d5:b2:08:98:20:2f:bb:
                    86:82:e2:63:6f:d6:55:ee:b1:8d:6d:8b:14:16:74:
                    1d:4a:e9:6c:3b:37:59:e6:b3:5e:9e:70:fa:d2:2a:
                    96:79:91:45:0d:12:6f:42:6f:d9:83:93:d6:7d:f1:
                    d1:b1:5b:c8:5b:e9:9a:ef:a8:63:bd:3f:07:a4:f9:
                    be:41:56:a1:b8:e9:df:df:6b:21:89:74:77:3c:4c:
                    20:a4:af:67:a9:59:41:d1:c5:66:b9:b2:d9:7f:2c:
                    0a:98:0d:84:02:0f:ae:39:bf:59:75:b2:05:55:5a:
                    60:22:e8:27:4b:e6:46:1c:35:85:81:05:3d:85:b0:
                    ca:39:fd:e2:58:ac:5d:d2:30:f6:a1:49:59:78:ec:
                    88:90:b5:ee:a6:f3:e1:84:80:ae:61:01:a2:33:cd:
                    fe:34:25:b5:b9:0d:e0:00:43:22:72:53:6c:67:0d:
                    2d:dc:98:b7:93:89:c4:10:b0:7c:49:69:c8:97:c8:
                    55:18:f4:d9:4a:f1:44:5b:39:4e:5b:c8:ff:d5:f6:
                    9e:8e:3c:8a:f8:a6:3b:69:1a:8e:89:f7:3d:af:1b:
                    c6:54:af:a5:87:7d:71:7f:c1:2a:7a:bd:29:f4:26:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B8:BD:5E:40:E9:18:EE:CD:0E:29:3E:51:31:0A:AC:06:E5:37:8A
            X509v3 Authority Key Identifier:
                keyid:1F:92:5B:85:E5:DB:9C:B6:F7:0B:6B:C5:72:85:94:1F:F9:E9:5F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A6E8BA5926CE69D1B62F80AD59505D01F32717EF6DB7D2E4E3DAED7DEF5DEF/0/1F925B85E5DB9CB6F70B6BC57285941FF9E95F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F925B85E5DB9CB6F70B6BC57285941FF9E95F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A6E8BA5926CE69D1B62F80AD59505D01F32717EF6DB7D2E4E3DAED7DEF5DEF/0/323830313a31623a643830303a3a2f34382d3438203d3e20323732393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:14:f2:e4:fc:5c:65:4a:50:22:e4:2e:4b:20:ac:69:cb:c1:
         c6:48:79:0b:6c:07:7a:6a:7e:f3:31:71:94:ce:36:ac:e0:ff:
         12:5f:ff:00:d9:2d:fb:02:96:8b:6c:53:c4:3a:d0:4c:9c:03:
         01:24:42:32:f4:07:14:5e:f1:91:b1:0d:5f:57:7d:81:03:a9:
         4e:8e:f8:d0:6c:aa:5a:ec:cc:e5:f0:ce:30:de:d2:5a:e7:34:
         94:96:7d:49:a7:50:cb:74:03:39:96:0e:2b:67:1d:78:f4:44:
         da:5c:9d:4c:79:eb:b4:6a:dc:6e:44:dc:58:cd:0d:19:fe:69:
         14:d2:a5:e8:b7:fe:45:88:18:14:a3:44:c8:e5:08:c6:3c:b9:
         9f:8f:00:23:e6:67:1c:87:08:33:8f:86:d1:fc:d4:2c:69:d3:
         38:52:47:73:6a:93:c3:57:47:0a:19:3d:68:5c:b5:b0:23:b9:
         de:b7:71:51:e4:fc:da:c1:43:46:f5:0f:97:92:55:66:21:f0:
         b8:5a:11:57:75:7a:12:9b:11:a1:da:c5:d5:94:0d:cd:c1:94:
         f0:4f:69:dc:44:b6:a5:6f:d1:36:33:73:d8:01:a1:a5:a7:03:
         f9:17:6e:75:76:15:76:67:c8:0c:1d:7f:9a:81:4e:5f:f3:74:
         d3:ba:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:49:28 2025 by rpki-client