Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/323830313a31393a333030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31393a333030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          AjlDZZbyIvjR05sbQQBDxewPw0qWbDo94rH3FHyRUsc=
Subject key identifier:   90:4F:AA:CE:80:08:23:82:87:EF:8F:FE:76:7B:DF:A5:71:97:62:8F
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       1F2CD7BFB0BA017CF68467FB5482480FAB728720
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/323830313a31393a333030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 18:48:36 +0000
ROA not before:           Tue 04 Feb 2025 18:43:36 +0000
ROA not after:            Tue 03 Feb 2026 18:48:36 +0000
asID:                     265696
IP address blocks:        2801:19:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2c:d7:bf:b0:ba:01:7c:f6:84:67:fb:54:82:48:0f:ab:72:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Feb  4 18:43:36 2025 GMT
            Not After : Feb  3 18:48:36 2026 GMT
        Subject: CN=904FAACE8008238287EF8FFE767BDFA57197628F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b1:0c:e2:57:49:38:47:79:f5:91:fc:6e:b7:
                    c8:f1:2a:65:1c:36:61:1e:6d:2b:32:3d:0f:88:bf:
                    4f:65:bb:fc:45:84:ac:8d:df:84:f7:35:25:e2:07:
                    38:f8:f6:96:8e:16:33:5b:f6:77:fd:e1:c9:d3:85:
                    ff:19:5f:9d:ed:67:d4:85:69:bb:dc:e3:98:5d:b8:
                    7b:44:31:c0:56:cc:8c:29:02:33:98:51:1e:6c:28:
                    cc:97:b6:26:13:fa:69:c9:2c:60:0f:13:fb:fa:b8:
                    d2:07:13:b1:75:0b:61:b8:b8:be:30:2a:94:e9:e0:
                    25:11:ef:35:10:1c:e8:39:d6:af:86:d0:ac:b9:7c:
                    e0:e6:29:66:96:9c:da:7e:3e:4b:b8:cb:71:86:29:
                    e2:ad:91:14:6a:e9:a1:a6:2d:53:27:09:6e:10:98:
                    3c:1d:c3:c2:c7:5f:32:f8:9b:ce:7f:8c:da:18:6f:
                    9a:43:f5:05:2d:52:23:1c:3b:11:57:0e:2b:90:94:
                    a4:d8:e1:41:af:3f:99:d0:8c:33:ec:22:34:ce:17:
                    b5:55:e1:cd:d7:4a:a8:52:ec:f8:8b:63:ee:6e:ae:
                    2b:64:9e:4a:44:b7:77:f5:7e:36:fd:ec:bf:09:c5:
                    20:f6:09:a8:6e:3a:e9:4f:c3:49:02:b0:43:fb:8c:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4F:AA:CE:80:08:23:82:87:EF:8F:FE:76:7B:DF:A5:71:97:62:8F
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/323830313a31393a333030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:27:46:a7:e2:57:bb:dc:26:6d:22:00:f3:7f:97:f7:c9:60:
         b2:99:bc:77:f5:66:79:e8:d6:bc:ca:7b:f0:b6:07:d0:66:f8:
         13:2c:14:82:cf:36:7b:eb:73:e4:6d:9f:ab:0a:03:11:35:72:
         02:a6:1b:40:af:79:84:18:0b:64:7c:1a:01:5c:ea:bb:2d:80:
         70:ec:a5:1d:ba:5d:f0:22:24:83:de:16:0e:fb:ca:3f:7e:21:
         b2:d7:59:ae:92:8d:8f:a9:33:9d:37:18:3d:db:aa:3a:98:a3:
         19:d1:12:15:3c:6f:24:c7:62:55:f9:d8:81:a0:21:69:bd:5e:
         35:1c:09:09:bc:a0:1f:1b:a6:68:ad:44:f7:77:fd:18:41:da:
         bb:4e:1d:61:ea:58:f0:30:09:24:3d:f4:31:2c:b1:72:5a:d6:
         6d:a7:d3:68:28:7f:96:57:ce:c6:3f:6e:1b:49:1d:e4:24:17:
         67:d0:a6:8c:7d:d8:34:9d:31:67:c3:09:ea:b6:ad:e6:43:67:
         80:7b:c6:cf:8d:55:c7:b0:aa:74:ab:58:a1:7f:77:ef:95:04:
         55:2d:14:3b:6a:eb:69:95:64:69:26:52:fa:ad:ab:91:b2:1c:
         01:3a:8c:03:aa:9e:7b:c1:a4:ab:58:8c:45:b5:72:7e:4f:5f:
         3d:8c:6c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:13 2025 by rpki-client