Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a313a3a2f34382d3438203d3e20323632313836.roa
File:                     323830313a3135393a313a3a2f34382d3438203d3e20323632313836.roa (raw, json)
Hash identifier:          8zm4xNcFL7SlxagvzHdX07nd5el59mMkm0NdIqkw/9g=
Subject key identifier:   93:F7:B2:64:C0:66:01:FB:68:E6:5B:34:30:4C:D7:1D:C8:99:7F:30
Certificate issuer:       /CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
Certificate serial:       50F3214D2B2DDBD2524D110398108BBD69A37922
Authority key identifier: BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a313a3a2f34382d3438203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 18:32:33 +0000
ROA not before:           Tue 04 Feb 2025 18:27:33 +0000
ROA not after:            Tue 03 Feb 2026 18:32:33 +0000
asID:                     262186
IP address blocks:        2801:159:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f3:21:4d:2b:2d:db:d2:52:4d:11:03:98:10:8b:bd:69:a3:79:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
        Validity
            Not Before: Feb  4 18:27:33 2025 GMT
            Not After : Feb  3 18:32:33 2026 GMT
        Subject: CN=93F7B264C06601FB68E65B34304CD71DC8997F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:42:d9:86:f7:06:ea:a3:e2:57:b2:f9:42:
                    e5:4b:bd:1c:79:56:66:c0:28:f8:30:06:8d:d9:a6:
                    33:0d:a0:d4:51:d0:df:47:78:41:63:bf:b3:77:88:
                    d7:4c:40:0a:10:38:8e:a4:f0:74:01:c2:3a:6d:6b:
                    7e:85:36:50:b6:11:25:46:f6:ec:ab:43:d2:75:19:
                    26:86:1b:8d:af:89:50:02:1f:57:36:e1:56:7e:b2:
                    a1:2f:91:8c:86:55:ac:0e:f6:61:39:75:13:8f:90:
                    d8:c0:9f:73:d3:9e:d0:de:6e:df:bb:8d:f3:f2:66:
                    93:00:8f:3e:73:5e:9b:67:a4:8f:b7:68:25:2b:b9:
                    80:b3:ba:d5:56:73:d1:ca:4d:5c:c2:2e:bb:b2:b9:
                    05:9f:e5:76:7d:71:cf:39:ed:7b:e7:40:91:f2:26:
                    bc:fa:e5:c1:a9:63:a3:14:b5:2f:a7:f8:4e:cd:24:
                    71:c4:12:8a:6d:13:8c:7d:e7:80:0a:bb:4d:be:da:
                    dd:21:0e:74:d2:96:7c:68:06:d0:1a:b1:a0:71:b7:
                    e4:c3:e2:e1:d4:7f:0b:82:30:8e:fd:d3:ea:fb:05:
                    59:a2:a1:43:9e:b0:34:7d:bd:4a:b4:9d:db:ef:98:
                    d1:f1:68:af:cb:ac:ac:44:9e:8a:61:71:b2:dc:01:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F7:B2:64:C0:66:01:FB:68:E6:5B:34:30:4C:D7:1D:C8:99:7F:30
            X509v3 Authority Key Identifier:
                keyid:BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a313a3a2f34382d3438203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:69:90:5d:88:da:8e:e3:69:54:0e:32:30:d4:f0:1a:fd:
         a3:3d:22:10:d0:33:e9:e1:d5:a3:dd:30:22:ae:ec:76:5c:0b:
         52:e4:9a:48:f6:3b:4b:81:cf:24:6d:13:96:3e:7a:c0:48:77:
         be:27:2f:96:f2:e5:60:83:ba:b4:11:34:02:d7:ec:90:b1:af:
         df:94:36:c1:01:7d:77:4f:d0:97:c7:b6:f7:84:7d:51:78:f3:
         ea:e3:56:02:e8:02:ce:db:a5:50:f4:8a:e1:cc:8b:1a:22:52:
         40:c8:76:93:b8:98:76:39:50:c4:cb:1e:c2:2b:09:dd:ea:29:
         e1:1e:24:06:af:92:70:dd:6c:55:5e:52:17:37:29:30:22:33:
         33:c5:f0:3b:d2:13:f5:88:48:c7:52:4d:5f:ae:7e:f1:0e:cf:
         ba:e8:14:7a:8d:b0:8d:e7:a8:8c:59:ad:dd:d6:66:1a:3a:ca:
         90:03:e8:17:91:7a:fa:66:c5:4a:e8:39:a2:3b:8e:61:13:74:
         94:d9:06:5e:dc:b2:49:b6:89:a3:a1:db:02:19:18:c7:7d:aa:
         e1:0f:61:02:67:3b:bc:bc:b3:ab:ed:5e:df:5d:06:1c:40:43:
         00:a6:f2:6d:c1:f7:36:78:c4:b3:1f:d3:f4:6c:86:34:fb:3a:
         40:47:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:24 2025 by rpki-client