Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33322d3438203d3e203236363131.roa
File:                     323830303a3830303a3a2f33322d3438203d3e203236363131.roa (raw, json)
Hash identifier:          AcLeeIAUuvUueob1gq4Dtq/PelmXbvAuNmoNZSM8Seo=
Subject key identifier:   51:6F:CD:4D:75:B1:00:8F:ED:AC:CC:07:CC:6D:E3:61:F0:41:42:2C
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       737B68788A535A79CE526CB7742BE6983C2D037C
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33322d3438203d3e203236363131.roa
Signing time:             Tue 03 Jun 2025 14:50:00 +0000
ROA not before:           Tue 03 Jun 2025 14:45:00 +0000
ROA not after:            Tue 02 Jun 2026 14:50:00 +0000
asID:                     26611
IP address blocks:        2800:800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 21:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7b:68:78:8a:53:5a:79:ce:52:6c:b7:74:2b:e6:98:3c:2d:03:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jun  3 14:45:00 2025 GMT
            Not After : Jun  2 14:50:00 2026 GMT
        Subject: CN=516FCD4D75B1008FEDACCC07CC6DE361F041422C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:c5:db:e8:bb:35:fd:bb:b0:2b:5e:36:ec:
                    57:4e:93:bb:47:e9:8d:e0:dd:18:a2:42:7d:9b:90:
                    cb:6d:78:2a:86:b3:a9:9d:bc:8f:3d:70:ee:42:39:
                    c1:11:f5:d0:3a:53:78:04:be:e2:e3:d7:6e:14:c7:
                    94:cd:11:0b:de:43:ed:2d:59:02:8a:d5:fd:a5:3a:
                    ec:fc:b6:f6:ec:e2:0f:a4:cf:44:d2:97:4e:50:56:
                    28:a2:66:72:d3:80:12:9e:d0:33:50:4b:b6:e1:20:
                    c6:bb:9c:1b:7f:3e:ac:4b:66:52:6a:02:ae:8a:62:
                    a3:e5:91:69:98:a6:7c:10:fe:39:ff:77:91:cf:a8:
                    0a:12:1a:e2:50:28:fe:e0:b9:e6:4b:4f:36:0c:03:
                    02:3f:73:65:11:22:e5:d7:24:90:51:8b:b0:bf:07:
                    4a:57:70:4f:e2:86:fb:77:32:f3:aa:3b:1b:67:09:
                    9b:85:4b:e3:04:b1:3d:6d:5a:9c:da:f5:d3:94:84:
                    2e:0e:24:c5:ab:68:1f:d6:53:5e:e1:f1:95:7f:e6:
                    db:3d:13:b5:bc:97:d4:7c:37:c7:c4:fb:56:52:98:
                    c6:1f:86:2a:c8:9f:f8:de:a5:35:48:5d:d7:84:77:
                    02:ad:6d:ca:01:51:24:ed:ae:fa:6d:46:08:9a:0f:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6F:CD:4D:75:B1:00:8F:ED:AC:CC:07:CC:6D:E3:61:F0:41:42:2C
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33322d3438203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:800::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:cf:e0:68:33:aa:1d:11:e3:21:99:9f:ad:67:8f:d0:b9:04:
         56:7b:35:1d:e0:cc:34:a5:e3:d7:85:07:57:f9:90:0d:3b:c5:
         b7:8a:5f:26:c4:23:8e:c3:e7:1f:af:a6:c5:f1:f3:ac:23:87:
         97:5d:b1:fb:47:46:43:0c:4e:f8:49:9a:a4:a9:9a:0e:e8:41:
         91:94:4a:44:08:de:7d:22:73:c1:57:fc:5e:92:f4:02:c8:30:
         71:6b:40:35:21:6d:94:57:54:94:58:e8:50:5e:ec:f1:42:f8:
         e3:15:92:65:a6:85:a6:51:28:31:21:0e:02:58:44:20:11:8b:
         6b:7e:ed:77:fe:17:ec:83:fd:54:26:c9:4b:ab:85:63:33:a0:
         b4:c9:78:b0:a2:c1:f2:d8:b0:77:90:59:ce:3b:88:84:53:32:
         cd:67:08:a6:b6:81:f3:e3:94:83:41:cd:46:a5:18:69:4f:18:
         d5:5e:7a:4a:e0:a4:be:e7:15:70:22:a0:c6:e1:b5:3d:a4:26:
         25:36:af:7b:96:19:95:f8:72:d8:94:7a:17:be:4b:14:ed:00:
         f6:2a:fc:cb:06:d2:a5:5c:b5:db:0b:04:42:11:31:94:95:87:
         5e:51:ba:fa:9f:02:fc:c6:df:7a:ca:6c:4a:79:21:11:0c:43:
         be:5e:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:52:24 2025 by rpki-client