Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a34303a3a2f34382d3438203d3e20323636373230.roa
File:                     323830313a3164343a34303a3a2f34382d3438203d3e20323636373230.roa (raw, json)
Hash identifier:          dSmoznO/yNIgTtTbFvHFvZ6uvONitfAH/pr/iHPc6Ys=
Subject key identifier:   0C:FA:D9:71:97:18:C3:69:0F:51:07:C8:E8:7B:97:74:C0:D2:CB:DD
Certificate issuer:       /CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91
Certificate serial:       1BE6394E4B12DF67A2F19AD41571EE09899CF875
Authority key identifier: A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a34303a3a2f34382d3438203d3e20323636373230.roa
Signing time:             Tue 04 Feb 2025 20:06:12 +0000
ROA not before:           Tue 04 Feb 2025 20:01:12 +0000
ROA not after:            Tue 03 Feb 2026 20:06:12 +0000
asID:                     266720
IP address blocks:        2801:1d4:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e6:39:4e:4b:12:df:67:a2:f1:9a:d4:15:71:ee:09:89:9c:f8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91
        Validity
            Not Before: Feb  4 20:01:12 2025 GMT
            Not After : Feb  3 20:06:12 2026 GMT
        Subject: CN=0CFAD9719718C3690F5107C8E87B9774C0D2CBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:b7:8d:99:3b:93:22:83:d7:88:d9:e1:04:
                    d9:90:bc:45:61:26:2a:0d:e4:49:ce:b7:08:4e:f2:
                    68:98:13:3d:03:a6:bb:3b:63:b4:5e:2f:45:5b:3d:
                    c1:08:bd:31:b5:8b:df:fd:80:76:15:5e:be:d2:c3:
                    17:30:fb:85:c8:b0:9c:0e:43:09:8e:c9:b0:9f:be:
                    5d:b4:9a:9a:08:0a:1f:6a:c9:02:b1:c7:f8:cb:b0:
                    93:01:e9:0c:43:5b:5f:57:d2:51:fb:fb:f1:02:bd:
                    ae:4b:de:e8:b6:e2:cb:a8:ba:be:aa:d7:e5:b1:2b:
                    4d:27:1d:6c:39:1a:f5:8d:e8:d9:40:7d:b0:12:b3:
                    9f:85:5d:7c:20:f0:02:75:27:2e:44:6f:58:0f:ca:
                    81:38:86:66:d3:94:d8:d4:7b:a9:e8:18:3b:63:61:
                    79:37:4c:69:aa:8c:fc:42:e5:95:50:68:89:bc:9f:
                    47:1a:a1:f6:7b:0a:d9:3d:e1:cd:18:90:74:92:5a:
                    cc:c4:d3:e4:8c:e9:51:6c:f7:fe:05:7c:a1:8c:78:
                    b2:92:a9:a3:89:e4:94:6d:b8:56:8e:94:42:8f:37:
                    2d:15:47:04:6a:6c:70:b9:fc:70:02:3c:e6:5f:19:
                    cb:02:11:d1:7c:e8:e5:da:2b:a7:d3:88:21:ac:47:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FA:D9:71:97:18:C3:69:0F:51:07:C8:E8:7B:97:74:C0:D2:CB:DD
            X509v3 Authority Key Identifier:
                keyid:A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a34303a3a2f34382d3438203d3e20323636373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d4:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:ad:cd:e5:ed:ed:37:4a:8a:35:cb:2f:4e:9f:c8:f8:1c:
         83:f7:6e:8e:cc:cd:0d:ac:28:f7:9d:d7:1c:f7:43:fb:ef:d3:
         42:81:1a:6f:66:62:7a:ee:38:70:28:3a:66:67:b0:74:00:e7:
         8d:5a:b9:6e:ef:bf:7a:b4:ba:7d:7d:00:d6:79:82:e0:2f:8b:
         01:2e:71:8b:1d:81:6e:93:56:93:3f:f9:23:fa:81:c4:b1:05:
         1e:40:bc:70:88:ed:94:e8:1e:3c:5c:45:e6:64:aa:49:b9:36:
         39:45:57:3c:ea:f5:43:93:af:91:b1:98:61:66:94:0e:35:6a:
         8e:e2:d2:da:d1:c9:e1:4c:45:99:6c:04:ca:bc:e7:7f:e9:8f:
         d5:47:f2:96:c4:c7:57:cd:de:97:15:5c:ff:cc:1d:9c:d9:1a:
         73:75:30:a5:0c:01:af:5c:67:93:cc:54:7b:49:23:84:ad:ef:
         58:43:a0:59:ed:0d:e8:c5:4e:d1:74:79:cc:5e:13:c2:17:62:
         82:0a:51:27:76:fe:31:c0:96:3e:5d:91:f7:1a:bf:58:aa:a9:
         0f:bf:4a:de:0b:c2:53:8b:00:ea:f9:29:ba:6a:b8:5e:af:2b:
         d7:a5:50:e7:a6:44:29:ab:92:f2:55:0c:be:3e:a0:02:12:df:
         9b:3f:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:24 2025 by rpki-client