Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e203138363738.roa
File:                     323830313a31613a633830303a3a2f34382d3634203d3e203138363738.roa (raw, json)
Hash identifier:          ZBAiEqrRY996XqpQjDqacdgH+OxjUX4/seWqOu7pYaA=
Subject key identifier:   3A:48:6A:17:BB:54:6E:7B:6C:07:03:9E:40:21:74:CB:FB:87:7E:FF
Certificate issuer:       /CN=5B714168E3B78E8062470168D5A07ED860042126
Certificate serial:       5BEFBD60DD9051550924A816F2D47E59988D901A
Authority key identifier: 5B:71:41:68:E3:B7:8E:80:62:47:01:68:D5:A0:7E:D8:60:04:21:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 18:47:07 +0000
ROA not before:           Tue 04 Feb 2025 18:42:07 +0000
ROA not after:            Tue 03 Feb 2026 18:47:07 +0000
asID:                     18678
IP address blocks:        2801:1a:c800::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ef:bd:60:dd:90:51:55:09:24:a8:16:f2:d4:7e:59:98:8d:90:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B714168E3B78E8062470168D5A07ED860042126
        Validity
            Not Before: Feb  4 18:42:07 2025 GMT
            Not After : Feb  3 18:47:07 2026 GMT
        Subject: CN=3A486A17BB546E7B6C07039E402174CBFB877EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:cc:bb:0a:53:5f:c6:a6:a9:12:d0:61:b4:
                    1d:11:25:af:df:fc:41:db:34:ef:6f:2b:af:d3:b1:
                    06:a4:42:a1:ab:d8:bc:d0:ac:7b:c6:c2:1c:a5:24:
                    0c:95:3f:93:eb:42:9e:8e:15:f3:b4:b5:d0:e9:0c:
                    18:26:94:40:be:f7:86:2f:ee:2a:a0:15:19:57:60:
                    85:5d:c8:12:db:59:08:7b:4e:5c:1f:36:9d:79:60:
                    07:27:f3:f3:5a:b8:c2:6b:31:d1:af:78:58:5c:fb:
                    6c:3e:38:4c:2b:95:18:6d:85:ed:13:a3:ca:60:e2:
                    c1:b2:b6:c6:fb:f4:6d:7f:71:8c:9f:05:c5:65:0b:
                    21:26:51:a5:7f:40:e5:b7:ed:a2:9f:08:45:7c:ac:
                    cd:78:78:cd:ae:31:94:c1:d5:38:c3:37:6f:d1:11:
                    74:ae:82:71:56:d2:9b:62:31:37:f7:a8:de:2a:b5:
                    f0:be:c2:af:ce:9e:b2:68:7d:b2:64:93:ae:40:ba:
                    5c:7e:70:b5:93:ac:cd:68:fe:ca:cb:9d:6f:f5:16:
                    8f:aa:37:86:e3:d8:d1:8d:07:ea:38:e6:c1:d5:29:
                    c3:03:7e:c5:3e:86:a2:fe:e8:00:19:b2:ea:e6:a5:
                    0a:e3:cd:22:0d:e5:ba:f5:18:33:41:3f:04:a2:a5:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:6A:17:BB:54:6E:7B:6C:07:03:9E:40:21:74:CB:FB:87:7E:FF
            X509v3 Authority Key Identifier:
                keyid:5B:71:41:68:E3:B7:8E:80:62:47:01:68:D5:A0:7E:D8:60:04:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:af:99:9c:d7:62:eb:1d:d8:72:4c:87:81:d2:83:69:93:6f:
         eb:0c:cf:3d:bc:9b:07:3f:d7:74:1d:91:f4:d0:53:11:d5:d5:
         fa:6b:53:d5:dc:d4:0b:6e:76:77:7d:3a:59:ef:f1:ff:7a:08:
         15:f5:3c:99:8f:00:30:85:11:ea:6a:ce:b8:4e:22:cb:ec:33:
         3e:45:ec:fa:91:a6:0f:cf:c2:3f:48:0c:32:f3:11:a4:95:ff:
         33:2e:fd:8f:a3:17:cc:7f:2e:48:59:56:8d:f3:91:81:17:c0:
         24:21:ad:57:03:1e:53:fa:a8:9b:ea:70:33:13:f8:8a:b3:86:
         26:66:50:62:87:65:af:e1:d8:a0:3e:aa:89:1e:58:5d:21:07:
         a6:83:e2:e3:b7:66:35:c6:33:32:4e:8c:1f:9a:10:89:5f:00:
         7b:6a:a7:69:06:2a:8a:1e:37:6b:17:86:34:5a:ef:5b:17:e9:
         16:f6:df:cf:76:2f:d6:04:e7:46:45:ab:b5:95:ad:8f:80:42:
         2e:82:5b:80:a4:ff:88:ef:04:75:b4:af:cf:75:66:9d:9d:50:
         e0:aa:f7:eb:3b:f4:15:e8:db:b7:b6:5b:b4:e7:a2:ec:b6:63:
         00:99:92:8c:3b:39:24:db:84:e7:fe:e0:fa:8c:52:2a:2e:0e:
         a1:7c:0f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:41:38 2025 by rpki-client