Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a31303a3a2f34342d3438203d3e20333934333533.roa
File:                     323830313a3162383a31303a3a2f34342d3438203d3e20333934333533.roa (raw, json)
Hash identifier:          aqfK8/bTHHxPM6lCl/BUvqrWEScOCkaD6Zc0BhMxbX4=
Subject key identifier:   44:85:C6:3E:62:E9:82:2A:1A:5E:1A:8A:2D:21:9A:09:54:E9:CE:CD
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       773DE66B383348C9D424CD43BA7A0A990464C1A6
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a31303a3a2f34342d3438203d3e20333934333533.roa
Signing time:             Tue 04 Feb 2025 18:19:36 +0000
ROA not before:           Tue 04 Feb 2025 18:14:36 +0000
ROA not after:            Tue 03 Feb 2026 18:19:36 +0000
asID:                     394353
IP address blocks:        2801:1b8:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3d:e6:6b:38:33:48:c9:d4:24:cd:43:ba:7a:0a:99:04:64:c1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:36 2025 GMT
            Not After : Feb  3 18:19:36 2026 GMT
        Subject: CN=4485C63E62E9822A1A5E1A8A2D219A0954E9CECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:4c:ab:af:a1:45:14:5f:9c:26:ea:03:cf:
                    ee:21:7a:35:63:d0:3b:51:ee:12:4b:56:21:48:4c:
                    f1:02:18:6a:1b:3a:6f:29:30:ad:0e:70:e5:df:dd:
                    57:59:1b:e0:cd:4e:27:e6:b2:7b:d7:e9:63:5b:d3:
                    ba:3c:61:0c:e4:9b:c3:bc:af:55:c0:3e:35:81:73:
                    6b:99:51:f1:8c:a1:73:5d:a3:e9:40:97:97:28:41:
                    2e:4c:61:ce:45:60:ca:59:bf:18:8b:25:0b:cf:24:
                    16:50:16:fd:f6:ef:8b:4f:1b:45:df:dd:9a:f5:be:
                    9e:fe:12:f1:55:d9:86:51:66:39:ee:8e:b4:e5:f6:
                    66:f7:8c:66:01:66:bd:19:97:5f:ee:1f:79:9b:e8:
                    a2:65:c7:73:23:ec:78:33:fe:24:3b:4c:bb:1a:13:
                    8e:75:5c:9f:d9:9f:5d:63:26:c8:22:a1:ae:0e:4c:
                    aa:26:96:8d:31:85:30:00:57:e2:12:93:5f:37:1a:
                    b5:ce:f9:39:d6:82:03:97:6d:a4:12:dd:30:f9:4a:
                    c4:b1:39:02:c5:a7:4f:62:9b:63:a9:2d:9a:39:73:
                    91:c2:3b:36:5b:b4:02:75:f0:4b:82:09:2d:ff:bc:
                    d6:55:fd:9e:a9:06:cf:12:0e:2c:16:6e:55:19:23:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:85:C6:3E:62:E9:82:2A:1A:5E:1A:8A:2D:21:9A:09:54:E9:CE:CD
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a31303a3a2f34342d3438203d3e20333934333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:85:cc:5d:52:d1:07:c8:a6:29:9c:1c:db:16:00:8d:2a:20:
         51:c6:ff:22:50:ef:2d:00:01:65:7f:c9:93:0d:ed:60:fb:9d:
         be:52:7a:df:79:3d:2d:b9:b6:eb:02:66:7a:80:c4:18:cc:e9:
         29:a9:b9:94:9a:8d:d6:e9:93:4d:f9:5c:96:23:d1:51:3b:30:
         ba:bc:26:cc:aa:cc:9d:06:26:68:19:68:24:3b:08:98:ba:a6:
         7e:12:de:49:0f:01:11:16:51:4f:c2:ad:25:ef:d4:52:e3:fd:
         5e:27:49:d2:bb:cc:59:6b:e5:48:ca:79:8d:d3:c3:23:f1:80:
         99:77:b6:71:11:88:0e:e6:ce:2c:f8:5f:64:b0:d8:3b:18:49:
         2e:59:82:6d:07:c8:9a:ce:87:52:08:4e:f4:81:59:9f:a8:cf:
         f5:c7:31:4e:9a:0f:ea:89:1f:1d:41:07:08:85:08:ea:9f:6c:
         5c:50:9a:bc:30:f8:e5:e4:a2:35:e2:fe:7a:c2:c8:4e:ea:cf:
         bb:a7:3f:c9:69:94:68:70:4a:8d:38:ba:5c:9e:f4:5d:d7:01:
         42:7f:1a:45:0a:b1:43:db:31:89:f5:9c:13:51:af:c4:07:de:
         48:c5:15:e2:b5:22:cc:b8:f0:92:27:b5:c4:be:03:4f:76:33:
         8a:a9:ee:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:06 2025 by rpki-client