Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a343a3a2f34382d3438203d3e20323732313533.roa
File:                     323830313a3138393a343a3a2f34382d3438203d3e20323732313533.roa (raw, json)
Hash identifier:          Qn701B7dG/4CQZLMO/4Ts7aB7hOmcZCiAqh8k22ljYU=
Subject key identifier:   ED:C4:5B:95:DF:50:F4:BE:2A:09:99:57:BB:4D:BA:93:D3:D2:61:96
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       0934199A04DD241C483896421F3ECDD03AB436FD
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a343a3a2f34382d3438203d3e20323732313533.roa
Signing time:             Tue 04 Feb 2025 18:49:47 +0000
ROA not before:           Tue 04 Feb 2025 18:44:47 +0000
ROA not after:            Tue 03 Feb 2026 18:49:47 +0000
asID:                     272153
IP address blocks:        2801:189:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl
                          rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:34:19:9a:04:dd:24:1c:48:38:96:42:1f:3e:cd:d0:3a:b4:36:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Feb  4 18:44:47 2025 GMT
            Not After : Feb  3 18:49:47 2026 GMT
        Subject: CN=EDC45B95DF50F4BE2A099957BB4DBA93D3D26196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:76:3f:ba:a2:6b:2c:20:ed:47:5e:f1:5d:
                    36:f6:d0:27:34:01:47:d6:ae:b7:c9:f6:40:46:a4:
                    80:53:49:e2:38:1a:a9:cc:72:ee:d7:86:26:bd:b9:
                    2d:69:a9:85:ca:aa:8b:fb:e8:38:ef:9b:b3:7c:91:
                    60:ab:3a:ea:40:a8:48:2a:db:e7:c8:94:58:58:64:
                    a3:9b:7d:9c:4a:2b:0c:b7:3b:c0:ef:87:b0:61:13:
                    d7:15:92:d3:e0:36:db:a5:d5:2c:7b:91:e0:35:80:
                    65:74:b0:ed:1e:32:17:aa:bc:1b:57:fe:f8:da:95:
                    af:25:23:bb:9e:c0:70:10:85:3a:b2:f4:11:f1:84:
                    c4:8d:cb:8e:fe:75:5c:84:6d:35:59:f6:97:50:10:
                    97:05:3a:da:3f:8c:9e:a8:72:50:f6:bc:4f:fd:ad:
                    93:73:71:68:53:3d:1b:f1:17:8f:32:07:a9:c7:42:
                    11:9f:8c:0d:d8:55:66:67:ee:ac:49:c5:ed:86:07:
                    7c:27:a9:09:7f:7d:65:2b:70:22:af:c0:43:d6:dd:
                    79:bd:c1:15:a9:58:90:b8:05:75:d0:49:12:34:1f:
                    68:71:28:82:f0:03:1e:1d:d6:b0:9f:56:8e:59:36:
                    bc:be:95:d5:47:e9:27:c7:56:61:1c:87:e5:99:c2:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C4:5B:95:DF:50:F4:BE:2A:09:99:57:BB:4D:BA:93:D3:D2:61:96
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a343a3a2f34382d3438203d3e20323732313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:72:2c:9d:06:e1:7e:ce:d4:61:16:bc:0c:89:3a:f6:8f:50:
         2a:cf:d5:69:fb:63:71:b3:14:4f:ee:d4:bf:59:19:51:7b:c3:
         46:d4:f4:c3:37:73:66:18:b4:b7:1d:a5:ac:37:83:8e:e9:a9:
         55:cc:6b:3f:ac:a7:31:31:f1:81:10:e7:d0:51:35:a8:ad:43:
         73:2a:2b:cd:52:e1:fd:dd:b8:e9:1a:4d:55:57:ac:22:6c:cc:
         d5:07:cb:64:33:54:d6:54:b4:50:95:34:b1:c4:c1:18:66:e8:
         d1:a9:ac:92:2e:42:f3:e1:58:57:52:72:69:df:e2:e9:02:96:
         75:5c:d2:e2:c7:2e:69:84:3d:6c:13:34:d4:cb:bc:a2:f5:44:
         a2:2b:f7:cd:6d:ba:e0:77:0a:b0:69:a1:81:ea:c5:ab:99:17:
         46:41:20:9d:ff:5d:91:05:84:87:fb:e8:1c:0e:78:6b:7f:07:
         44:69:7d:69:ee:51:5e:91:cc:9f:6a:ac:61:b6:71:06:7f:3d:
         68:3a:5d:50:68:d8:db:78:6d:b2:73:9e:da:bc:c2:33:f8:e9:
         69:3a:3f:7b:b5:ce:f9:75:24:03:d6:4e:35:e5:f9:7a:e2:2f:
         1a:a6:36:fc:98:34:50:0f:2f:3b:1c:11:f5:06:b1:37:92:8a:
         71:70:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:59:26 2025 by rpki-client