Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31663a383830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          iDDH9sp8yHcK6g1+Qtf+ioOoVbMxi1TLvpeB/aXgs+U=
Subject key identifier:   FA:3A:56:0D:03:EE:ED:E5:1F:69:2B:91:FA:1B:70:6B:79:52:DC:D8
Certificate issuer:       /CN=1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27
Certificate serial:       1559E5294DF52013AAEB53FACEDE151948196611
Authority key identifier: 1E:D0:DC:5C:A7:7A:08:4E:E8:F2:BA:EC:17:C8:58:34:20:4A:CF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Sun 01 Jun 2025 21:20:46 +0000
ROA not before:           Sun 01 Jun 2025 21:15:46 +0000
ROA not after:            Sun 31 May 2026 21:20:46 +0000
asID:                     14080
IP address blocks:        2801:1f:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 19:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:59:e5:29:4d:f5:20:13:aa:eb:53:fa:ce:de:15:19:48:19:66:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27
        Validity
            Not Before: Jun  1 21:15:46 2025 GMT
            Not After : May 31 21:20:46 2026 GMT
        Subject: CN=FA3A560D03EEEDE51F692B91FA1B706B7952DCD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:f0:95:1f:48:33:31:4e:02:5b:b8:5b:ff:
                    d2:63:32:d9:49:1d:21:aa:4f:be:c3:8d:71:1c:03:
                    d5:fc:73:a7:02:e8:fa:4e:a2:1b:5e:cc:e9:55:9c:
                    03:70:df:3e:ad:33:c7:c6:72:dc:39:74:a6:4c:78:
                    20:64:68:0c:0a:74:34:f1:10:c0:b3:18:5d:49:8f:
                    0f:6d:3f:03:37:e1:bc:f8:04:b7:9d:d4:b2:f8:a1:
                    2e:52:a6:4a:b1:f3:97:06:e0:58:2b:b4:a1:63:0e:
                    af:06:54:ed:09:4d:18:99:05:e7:5f:85:6e:22:3f:
                    39:cb:46:b2:5f:fa:b8:88:5b:22:6e:a9:78:f1:07:
                    94:e1:8a:4e:19:6f:38:7e:5e:c7:c2:ee:c6:29:95:
                    ea:77:f1:1c:72:c8:39:91:e2:17:a8:76:5a:12:52:
                    5f:1f:ba:04:ae:d2:c6:5d:a7:40:e2:df:24:01:a6:
                    fd:03:a8:8b:b7:81:6d:ed:55:05:5c:81:35:14:05:
                    7a:2a:26:7b:73:0f:7f:9f:d3:27:80:e6:88:b5:3b:
                    b8:02:82:bc:8b:5f:8d:ad:72:02:47:0e:12:cb:0d:
                    63:dc:78:c2:25:91:df:bc:6a:4e:6f:ae:e2:94:ba:
                    20:fe:24:b3:88:e2:19:a3:d2:d3:e1:1c:d9:7b:95:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3A:56:0D:03:EE:ED:E5:1F:69:2B:91:FA:1B:70:6B:79:52:DC:D8
            X509v3 Authority Key Identifier:
                keyid:1E:D0:DC:5C:A7:7A:08:4E:E8:F2:BA:EC:17:C8:58:34:20:4A:CF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:2d:cd:1d:ea:d0:5d:b8:b9:74:08:a6:38:c3:f0:f6:52:
         a9:06:57:af:85:d2:b8:e8:94:0e:09:26:31:3b:c3:d3:8a:20:
         f4:0f:37:23:0c:2f:f7:21:24:27:96:d8:b8:ec:7c:07:a9:d6:
         b0:0f:52:90:cc:e4:b4:c0:9b:7e:68:75:87:7f:ca:a0:71:c8:
         40:e8:6d:98:51:e5:b2:a8:fb:fc:5a:bc:13:b3:dd:2c:d9:94:
         54:d2:08:f8:06:22:af:91:96:42:1e:61:8d:1c:0e:c0:9c:7a:
         46:37:01:5d:4b:d3:26:75:e1:b7:c0:59:20:36:3c:6c:1e:53:
         27:34:92:3a:f3:15:ae:14:58:0f:54:ac:99:0e:3a:0f:1d:11:
         4a:57:b1:7a:9a:24:1d:af:0d:ed:8b:1d:e3:ad:d6:05:62:93:
         92:59:1f:26:46:0f:6f:8b:c7:9c:fd:77:b7:0e:46:f7:37:ca:
         92:52:c0:29:77:f7:df:22:36:76:98:9d:2a:2d:4e:91:df:23:
         4a:04:bc:33:19:82:e0:30:97:8f:16:f2:03:90:e6:de:fb:dc:
         1d:db:9c:0b:24:75:4f:d2:fc:e9:13:25:88:22:fb:94:9b:ba:
         e4:8b:9e:0d:9b:c0:71:e7:67:1c:0f:f8:f3:72:6f:97:4a:51:
         37:08:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 15:27:30 2025 by rpki-client