Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa
File:                     323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa (raw, json)
Hash identifier:          76qNoueXLScFsrylYdbv1295U/m6qza3H7oqYzVNYUM=
Subject key identifier:   0E:E0:CA:B0:BA:76:E3:84:39:23:B5:F9:2A:1E:FD:BB:67:7B:0E:F4
Certificate issuer:       /CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
Certificate serial:       31A1EEA5A4E467343A042A1A2FC4768A8691DF90
Authority key identifier: 81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa
Signing time:             Tue 04 Feb 2025 18:05:22 +0000
ROA not before:           Tue 04 Feb 2025 18:00:22 +0000
ROA not after:            Tue 03 Feb 2026 18:05:22 +0000
asID:                     264843
IP address blocks:        2801:14:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a1:ee:a5:a4:e4:67:34:3a:04:2a:1a:2f:c4:76:8a:86:91:df:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
        Validity
            Not Before: Feb  4 18:00:22 2025 GMT
            Not After : Feb  3 18:05:22 2026 GMT
        Subject: CN=0EE0CAB0BA76E3843923B5F92A1EFDBB677B0EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:1e:11:c7:67:59:ad:fc:52:2d:9f:64:76:
                    a0:66:cf:20:95:1e:d8:50:03:75:1e:8c:3d:9d:d9:
                    ed:58:49:7f:9f:d1:bc:a3:fc:f5:d5:11:02:4f:8f:
                    05:6a:d0:5c:cd:78:37:c7:2f:da:04:98:24:96:ae:
                    67:ae:d5:43:fe:6d:38:69:f7:32:f3:f0:04:19:5f:
                    d5:c2:50:51:d0:44:0c:26:8b:c2:76:a3:cd:2a:6d:
                    49:89:b5:02:2d:ec:d5:4b:15:c6:f7:e9:cb:16:25:
                    2f:eb:00:46:0b:99:ba:52:68:ab:c3:4a:d3:0a:82:
                    85:48:52:9b:1d:d9:3a:ea:9f:cc:89:fa:f1:82:8a:
                    68:e1:ae:57:84:ce:2e:9b:0c:b1:93:11:1a:50:ee:
                    1f:ac:82:f5:da:8a:d7:3d:ab:ae:89:9d:9d:d7:5e:
                    55:12:39:1c:71:df:e4:d7:cb:4b:8c:4d:a8:9e:33:
                    31:17:f1:c7:c5:66:d7:3c:c9:12:2b:3c:ad:29:fe:
                    ad:77:d3:9f:22:62:97:12:50:d1:4a:36:b2:12:7b:
                    a9:57:66:2f:9b:18:33:66:47:58:e2:26:12:cf:e4:
                    49:2f:d3:80:19:8a:2a:8c:97:50:dd:58:90:34:77:
                    c8:d6:49:d5:37:ff:91:8a:75:9f:5f:3e:8a:be:2e:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E0:CA:B0:BA:76:E3:84:39:23:B5:F9:2A:1E:FD:BB:67:7B:0E:F4
            X509v3 Authority Key Identifier:
                keyid:81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         28:3b:6c:cd:b5:b3:93:dc:2c:e4:69:49:1e:69:33:f0:68:5f:
         0f:d1:0c:a6:75:79:c3:0d:f9:f9:2f:02:fb:37:54:f3:6a:47:
         f3:3f:20:d4:6c:29:f0:b8:1c:c1:0c:0f:7e:cf:48:ff:a7:9d:
         87:d4:ba:3b:cd:e2:08:67:69:7d:aa:7d:e7:36:87:66:87:c0:
         9e:27:5f:3c:cf:7f:8e:de:4e:4e:1e:68:a0:ed:f5:ac:b8:e3:
         46:00:2f:8a:8c:0e:d4:46:97:b1:93:a5:dd:4c:a0:26:22:f7:
         98:50:8c:84:39:14:10:80:05:82:5d:e5:77:8b:63:a6:b8:12:
         74:85:a2:8e:5d:08:59:4f:48:82:79:38:be:8f:dc:c0:d0:19:
         c2:97:c1:35:0d:5d:b4:38:d2:d5:ee:0f:11:be:fd:a1:5b:cb:
         db:59:80:53:ee:eb:f9:94:da:b5:aa:f9:a6:8f:2c:e7:69:98:
         ea:00:0d:7f:04:61:e1:0c:29:7c:98:44:9c:fd:2f:3d:7b:32:
         d1:f2:3c:c6:ba:a2:58:f7:9c:26:a8:f9:53:15:87:1d:f4:de:
         a2:1a:c9:8a:45:0c:6d:59:17:c5:44:08:31:b3:db:80:06:2e:
         8a:f0:ed:70:cb:23:58:f3:a0:e5:ea:07:be:8b:fe:b7:b9:aa:
         70:5d:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:41:35 2025 by rpki-client