Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa
File:                     323830313a3161393a3a2f34342d3434203d3e20323732393039.roa (raw, json)
Hash identifier:          n/IU6ZeFHkr/FBQwZ+yzODeAvAeeU92wWP6veG3yiKY=
Subject key identifier:   54:5B:C6:C4:4F:8F:21:2E:22:90:CC:E5:53:92:EA:D8:16:12:8C:22
Certificate issuer:       /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial:       14E3CD41B166E5C2358FD406C537809DC81916A8
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa
Signing time:             Tue 04 Feb 2025 18:40:39 +0000
ROA not before:           Tue 04 Feb 2025 18:35:39 +0000
ROA not after:            Tue 03 Feb 2026 18:40:39 +0000
asID:                     272909
IP address blocks:        2801:1a9::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e3:cd:41:b1:66:e5:c2:35:8f:d4:06:c5:37:80:9d:c8:19:16:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
        Validity
            Not Before: Feb  4 18:35:39 2025 GMT
            Not After : Feb  3 18:40:39 2026 GMT
        Subject: CN=545BC6C44F8F212E2290CCE55392EAD816128C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:58:5c:e8:be:ff:70:84:cf:ec:c2:cb:fe:
                    be:6c:3c:9b:8d:d1:f4:e0:bb:3d:94:5b:5f:fe:63:
                    26:0e:ee:91:29:8d:d4:be:e3:c0:2a:60:f4:5f:3c:
                    23:27:31:aa:37:05:36:3c:01:fe:22:96:f3:5f:bb:
                    64:d9:61:a3:5e:93:e0:d8:db:7a:44:d3:ac:e0:a5:
                    a3:8d:52:d7:79:af:18:6f:4b:8e:91:7f:96:03:2c:
                    b5:34:cd:7e:0e:15:53:58:f8:91:c8:65:4b:bd:0c:
                    bc:95:8a:62:53:55:8c:2f:c6:82:46:2d:1b:7d:c6:
                    7f:e3:97:20:a3:86:bd:84:aa:ac:92:16:f3:ff:39:
                    e9:ea:ea:2a:28:82:33:14:8f:f3:46:5a:22:02:a6:
                    dc:47:91:56:62:f8:96:5b:71:b8:72:81:6a:a8:f3:
                    60:1f:7e:09:f5:63:25:35:0a:6f:ea:56:18:f0:fa:
                    8d:73:ce:85:ac:73:3a:8e:31:41:8e:71:72:74:ab:
                    cc:3f:56:67:e8:2e:e8:38:23:3b:0d:7d:bf:6e:bb:
                    dd:17:4a:03:e2:df:65:f7:c9:42:22:d8:2f:8e:0e:
                    c2:be:b3:62:ca:50:f9:cb:75:dc:f1:22:f7:98:76:
                    28:09:6b:31:f1:87:28:f5:e5:5c:f4:46:a0:21:88:
                    02:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5B:C6:C4:4F:8F:21:2E:22:90:CC:E5:53:92:EA:D8:16:12:8C:22
            X509v3 Authority Key Identifier:
                keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:95:74:b6:2b:a4:34:af:50:5c:ec:34:21:49:7d:c6:88:a3:
         ea:b9:7e:c9:c9:0f:d5:2e:6d:10:24:bf:6f:73:4b:dd:b1:c8:
         b2:48:9c:60:37:76:69:fb:c6:e4:6a:5c:5f:3a:bb:c9:fa:8c:
         79:c1:c8:f8:bb:c5:11:ee:5e:d4:e8:c8:77:07:e0:70:34:79:
         4c:e1:f1:67:6f:95:80:89:b3:0d:12:5f:8f:9c:3c:99:ed:c5:
         13:e8:64:23:54:d4:96:e9:c0:d7:27:63:0a:d3:7b:a6:54:3d:
         b5:36:2e:c7:17:95:49:f1:5c:42:6b:fd:e9:d6:dd:84:3d:1e:
         55:4d:c6:f8:59:0f:8a:f8:e4:f8:19:27:04:93:de:a9:4e:be:
         1c:15:6e:49:30:46:fa:08:0f:4d:ba:cc:e9:11:16:bf:e3:de:
         92:06:33:c8:fe:88:6f:7f:c5:e0:b0:8b:67:b0:6d:d4:10:c4:
         6d:bf:1b:71:af:9d:a7:6a:4a:fa:78:96:f1:d9:9f:c6:f1:75:
         45:ce:4e:24:d1:a0:20:c8:8a:ab:58:2c:26:22:de:f3:d8:75:
         9c:51:bc:81:54:b4:3a:f4:ea:d8:7f:99:70:87:bb:bb:56:ab:
         7d:41:0c:3e:60:f3:8e:1a:b0:a4:df:3a:a0:b7:e8:41:7a:8f:
         45:35:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:21 2025 by rpki-client