Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa
File:                     323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa (raw, json)
Hash identifier:          Hd1AtImOstWgb3cGVVnSBaluoWDIBWPqxaspTcz7mr0=
Subject key identifier:   A7:F2:53:FD:3E:89:36:AF:73:16:CA:D4:96:70:1E:89:19:4D:A4:7C
Certificate issuer:       /CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
Certificate serial:       546818241A1D9C3651B2A9434678101B13388CBA
Authority key identifier: 42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa
Signing time:             Tue 04 Feb 2025 18:41:52 +0000
ROA not before:           Tue 04 Feb 2025 18:36:52 +0000
ROA not after:            Tue 03 Feb 2026 18:41:52 +0000
asID:                     64109
IP address blocks:        2801:13:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:68:18:24:1a:1d:9c:36:51:b2:a9:43:46:78:10:1b:13:38:8c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
        Validity
            Not Before: Feb  4 18:36:52 2025 GMT
            Not After : Feb  3 18:41:52 2026 GMT
        Subject: CN=A7F253FD3E8936AF7316CAD496701E89194DA47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:f1:cf:e2:38:3c:dd:78:02:a3:15:f8:81:
                    6e:e0:4a:9d:29:09:4f:a6:fb:a1:a9:d9:82:8f:31:
                    f6:09:49:5f:01:d3:fb:28:09:51:e1:54:fb:b6:01:
                    b9:8f:5b:b4:5d:f1:20:54:0a:e5:45:bc:bb:73:2c:
                    bf:77:37:fd:ed:d1:00:20:54:73:12:79:ce:7e:b0:
                    10:94:7d:f5:48:a4:08:ea:53:35:b5:31:d8:af:6b:
                    78:4e:4c:d3:50:23:59:38:9d:24:65:16:96:3f:0e:
                    26:61:68:c3:81:34:65:e7:91:64:45:5a:56:fe:e8:
                    b1:85:bb:74:71:7e:46:8f:21:c3:5f:33:f8:43:32:
                    c9:64:3a:7f:e5:02:fd:b6:cc:1a:21:0c:64:6c:98:
                    50:f1:3e:a7:d0:2f:4e:03:c1:e6:28:fe:96:38:7d:
                    06:0c:e7:6e:2c:05:ac:8d:a6:db:f6:76:39:54:ab:
                    9c:1b:27:74:75:38:bf:03:dd:18:c7:2e:23:c2:9f:
                    61:6f:d5:5b:77:71:c0:a7:dc:c7:d6:25:c2:fb:d7:
                    a2:46:e7:9c:69:7c:a1:18:0b:0d:3b:9c:6c:54:24:
                    23:be:c5:c2:ae:6a:be:43:65:9a:76:20:1d:55:4e:
                    f1:7e:83:c6:8f:aa:29:9c:07:3e:03:3d:67:f5:71:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:53:FD:3E:89:36:AF:73:16:CA:D4:96:70:1E:89:19:4D:A4:7C
            X509v3 Authority Key Identifier:
                keyid:42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:b9:53:b9:7d:c5:50:ed:22:b7:11:25:02:de:1b:b7:3b:
         57:e2:2e:b8:15:64:b8:3f:fe:52:4d:10:fc:84:32:a0:85:60:
         83:84:86:bc:8d:1b:a0:f9:61:68:1d:e7:ac:e9:54:b7:74:92:
         47:ea:e1:ab:c6:cf:97:92:44:20:6c:39:37:69:b0:1b:ea:15:
         c9:d3:71:a9:92:be:94:96:17:f9:c3:6c:46:a4:de:f0:4b:db:
         5e:45:b4:07:25:3a:a6:77:c0:3c:db:2a:fb:0b:9a:fd:b7:65:
         50:3f:ea:50:69:05:08:39:a1:98:b2:f6:01:5d:93:9a:94:5a:
         3c:c5:01:5f:ac:85:cf:38:23:10:bb:a9:a5:68:90:38:0d:f6:
         27:c0:23:2f:56:2a:8b:ea:28:3d:cf:85:79:1e:57:38:c9:4e:
         8c:5a:5c:9d:ed:82:87:47:fd:ee:59:8f:14:92:0a:eb:3c:22:
         eb:24:83:a2:53:21:69:d4:a1:d4:c4:6b:78:d0:aa:8c:11:90:
         24:1d:a0:96:52:f4:c2:c4:17:74:44:b0:64:dc:64:f0:39:64:
         c6:88:24:d9:c0:07:13:5c:89:3f:11:80:86:ba:57:da:fa:34:
         fb:91:a6:9c:de:1c:b9:31:ea:fe:95:ea:c0:42:82:26:b3:f9:
         28:31:4d:d8
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUVGgYJBodnDZRsqlDRngQGxM4jLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwQUJDRUY4QjI0OUIzRkQ2MzI3NEMwQjM4MkQ2RjVC
RUExMUEwOTAeFw0yNTAyMDQxODM2NTJaFw0yNjAyMDMxODQxNTJaMDMxMTAvBgNV
BAMTKEE3RjI1M0ZEM0U4OTM2QUY3MzE2Q0FENDk2NzAxRTg5MTk0REE0N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5/HP4jg83XgCoxX4gW7gSp0p
CU+m+6Gp2YKPMfYJSV8B0/soCVHhVPu2AbmPW7Rd8SBUCuVFvLtzLL93N/3t0QAg
VHMSec5+sBCUffVIpAjqUzW1Mdiva3hOTNNQI1k4nSRlFpY/DiZhaMOBNGXnkWRF
Wlb+6LGFu3RxfkaPIcNfM/hDMslkOn/lAv22zBohDGRsmFDxPqfQL04DweYo/pY4
fQYM524sBayNptv2djlUq5wbJ3R1OL8D3RjHLiPCn2Fv1Vt3ccCn3MfWJcL716JG
55xpfKEYCw07nGxUJCO+xcKuar5DZZp2IB1VTvF+g8aPqimcBz4DPWf1cc1dAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUp/JT/T6JNq9zFsrUlnAeiRlNpHwwHwYDVR0j
BBgwFoAUQgq874skmz/WMnTAs4LW9b6hGgkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QzY2NzhFQzBDRERCQ0Q1NkQ4MUZBODhDMjBGMzE5Nzcw
QzNDNjE5OUE0N0MxNzgwNThCRjk2NEYzRTM3NTg4LzAvNDIwQUJDRUY4QjI0OUIz
RkQ2MzI3NEMwQjM4MkQ2RjVCRUExMUEwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBBQkNFRjhCMjQ5QjNGRDYz
Mjc0QzBCMzgyRDZGNUJFQTExQTA5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUM2Njc4RUMwQ0REQkNENTZEODFGQTg4QzIwRjMxOTc3MEMzQzYxOTlB
NDdDMTc4MDU4QkY5NjRGM0UzNzU4OC8wLzMyMzgzMDMxM2EzMTMzM2E2MjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzQzMTMwMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQATsAAwDQYJKoZIhvcNAQELBQADggEBAF5GuVO5fcVQ7SK3ESUC3hu3O1fiLrgV
ZLg//lJNEPyEMqCFYIOEhryNG6D5YWgd56zpVLd0kkfq4avGz5eSRCBsOTdpsBvq
FcnTcamSvpSWF/nDbEak3vBL215FtAclOqZ3wDzbKvsLmv23ZVA/6lBpBQg5oZiy
9gFdk5qUWjzFAV+shc84IxC7qaVokDgN9ifAIy9WKovqKD3PhXkeVzjJToxaXJ3t
godH/e5ZjxSSCus8Iuskg6JTIWnUodTEa3jQqowRkCQdoJZS9MLEF3REsGTcZPA5
ZMaIJNnABxNciT8RgIa6V9r6NPuRppzeHLkx6v6V6sBCgiaz+SgxTdg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:53 2025 by rpki-client