Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e2033383136.roa
File:                     323830313a3166393a353a3a2f34382d3438203d3e2033383136.roa (raw, json)
Hash identifier:          GToScv1vYjOCyPUMOCy/EImb0GIarY4NsuFkDWKWY8E=
Subject key identifier:   F5:AB:26:18:ED:9B:5B:27:B9:F1:B9:5A:42:7B:E2:BF:03:84:F7:E5
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       200B71458A0564B0D01EF5A7E7B8AEAA7119682D
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e2033383136.roa
Signing time:             Tue 04 Feb 2025 18:14:08 +0000
ROA not before:           Tue 04 Feb 2025 18:09:08 +0000
ROA not after:            Tue 03 Feb 2026 18:14:08 +0000
asID:                     3816
IP address blocks:        2801:1f9:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0b:71:45:8a:05:64:b0:d0:1e:f5:a7:e7:b8:ae:aa:71:19:68:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Feb  4 18:09:08 2025 GMT
            Not After : Feb  3 18:14:08 2026 GMT
        Subject: CN=F5AB2618ED9B5B27B9F1B95A427BE2BF0384F7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:25:e6:30:d1:ea:d3:d7:ec:0c:4f:3d:d4:
                    87:97:73:37:e3:66:12:18:f1:5b:be:2d:a5:38:56:
                    44:40:67:0f:4b:94:68:ce:b1:28:5a:f5:69:e6:85:
                    ad:16:1f:d5:47:3b:4e:4e:3b:10:c5:4c:cc:eb:e9:
                    29:9c:3e:94:b3:95:6d:f6:5d:60:e6:b3:4f:90:5a:
                    85:cd:dc:7f:40:f0:92:75:79:7e:f4:7e:c2:85:76:
                    41:84:ce:d5:3d:5f:79:d1:ed:5f:b8:92:1a:2f:69:
                    30:b5:bd:25:2a:6b:0d:da:90:4e:e0:ff:f0:ad:45:
                    de:07:93:ba:85:d9:21:33:51:4f:21:54:ee:32:61:
                    cb:a3:26:ef:13:30:4f:b8:08:a6:a5:25:07:c3:fd:
                    ea:6c:b3:69:57:00:c0:d0:31:49:ab:1a:64:ef:83:
                    f4:e5:d3:1a:80:15:99:95:88:a7:58:87:06:0c:e8:
                    b9:70:dc:e0:96:59:7b:d7:8a:38:e4:9c:89:79:b6:
                    f3:16:29:64:d0:eb:d9:60:42:4c:3f:1e:10:9c:2d:
                    72:17:d1:fe:b7:99:0e:1f:5a:4e:aa:d4:86:1d:97:
                    d3:61:25:a7:9b:5a:86:f6:0c:bb:71:bb:28:d0:7a:
                    d3:b6:25:f6:12:75:ee:b1:ec:b9:3e:64:da:c5:4b:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:26:18:ED:9B:5B:27:B9:F1:B9:5A:42:7B:E2:BF:03:84:F7:E5
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:69:db:06:64:8a:ed:07:9e:b2:91:3c:0e:67:26:78:11:17:
         0c:4f:9b:19:0d:1d:e2:74:56:6e:22:66:95:55:ef:00:d6:38:
         d4:4d:1d:87:ee:76:22:ea:51:62:9f:00:fa:cb:99:d8:91:22:
         ed:13:ed:9d:ff:f1:25:58:86:be:60:c0:2b:2b:0d:f9:2f:b2:
         ed:c7:a8:52:c7:99:20:1d:c8:0a:8a:ad:03:ee:9f:d2:be:60:
         e7:44:cb:c9:3c:8b:4b:82:f0:31:02:be:5e:8a:9e:3e:38:6d:
         b1:b7:e0:9d:34:ef:e1:b6:4b:ea:d6:6b:d2:88:42:61:16:2f:
         f5:fc:d2:7f:6e:7f:9e:96:74:cd:c0:ea:20:11:a0:ac:a4:46:
         c0:d5:6a:6b:a1:29:07:e6:8e:35:4d:91:2a:3e:24:2b:fc:ff:
         30:5f:63:b1:94:b1:96:6e:3f:1b:17:fc:31:6c:3c:da:6c:06:
         4b:44:a5:59:ce:09:46:60:ae:cd:7d:e9:ea:dd:37:6a:d7:2e:
         40:10:66:96:f8:3a:4e:73:5b:49:8a:94:97:28:a3:51:6c:af:
         f1:ed:e6:72:54:4e:46:af:42:e1:72:5d:a4:db:02:bb:18:95:
         0b:1f:83:a6:d6:42:4c:b5:22:fd:ee:0b:7a:67:cf:4a:05:b6:
         53:94:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:47:54 2025 by rpki-client