Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62E873D7809ECD91DA013357E4D73D84792A1069B1A39F14473C423F062E78B1/0/323830313a31303a653830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31303a653830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          ycnsptsf9RRNycXQbor5KX5eqzDVxtMkrgGT8vf90oo=
Subject key identifier:   1A:35:48:5C:F6:2A:5C:80:5B:0B:C2:8B:9A:30:87:70:9D:4A:76:98
Certificate issuer:       /CN=F67110D742A67E51A949D9C677F87710DDB7E97A
Certificate serial:       214F06CADEF3BDC239FE35CF440A384AA59AE8C8
Authority key identifier: F6:71:10:D7:42:A6:7E:51:A9:49:D9:C6:77:F8:77:10:DD:B7:E9:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F67110D742A67E51A949D9C677F87710DDB7E97A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62E873D7809ECD91DA013357E4D73D84792A1069B1A39F14473C423F062E78B1/0/323830313a31303a653830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:29:13 +0000
ROA not before:           Tue 04 Feb 2025 18:24:13 +0000
ROA not after:            Tue 03 Feb 2026 18:29:13 +0000
asID:                     27951
IP address blocks:        2801:10:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62E873D7809ECD91DA013357E4D73D84792A1069B1A39F14473C423F062E78B1/0/F67110D742A67E51A949D9C677F87710DDB7E97A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62E873D7809ECD91DA013357E4D73D84792A1069B1A39F14473C423F062E78B1/0/F67110D742A67E51A949D9C677F87710DDB7E97A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F67110D742A67E51A949D9C677F87710DDB7E97A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4f:06:ca:de:f3:bd:c2:39:fe:35:cf:44:0a:38:4a:a5:9a:e8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67110D742A67E51A949D9C677F87710DDB7E97A
        Validity
            Not Before: Feb  4 18:24:13 2025 GMT
            Not After : Feb  3 18:29:13 2026 GMT
        Subject: CN=1A35485CF62A5C805B0BC28B9A3087709D4A7698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:b6:11:af:95:4e:79:0c:51:0c:7a:1d:e1:
                    e2:00:60:17:59:5b:5a:78:f0:9b:94:ee:6a:f3:60:
                    1f:f4:5c:8b:98:b6:7e:d9:af:49:b7:1a:5d:65:60:
                    a6:88:61:99:8f:aa:3f:34:20:56:14:a9:9b:56:94:
                    12:6f:25:49:d1:5c:28:db:ce:73:95:a4:a2:3e:6b:
                    58:03:74:bc:8f:64:e3:11:41:f5:ff:1c:21:0d:8f:
                    dc:cb:11:a3:db:e5:11:6f:b9:a7:fd:bc:30:5b:67:
                    01:2e:fa:0b:f7:63:5e:24:a9:b8:57:a9:f2:cd:97:
                    25:15:a7:0b:4a:15:8b:43:28:09:9e:9d:20:01:40:
                    08:87:50:b1:dc:20:27:d1:66:18:d6:ca:9a:bc:1c:
                    8d:36:01:e9:8c:ad:08:2f:b4:c2:6b:aa:d3:61:03:
                    8a:a2:2d:2a:77:55:9e:96:05:89:3e:fe:e9:59:ad:
                    8f:dd:cb:db:e5:46:48:6d:f5:8d:c1:bc:84:8a:23:
                    8d:53:ac:9d:9b:eb:7e:5b:2c:b5:5e:c3:52:8c:74:
                    c4:4f:0d:65:3a:bc:36:8c:60:c8:71:f2:54:25:10:
                    f3:c5:df:57:39:2b:09:27:06:c3:03:60:5e:2e:e2:
                    54:4f:aa:3f:9e:1d:27:6c:47:bb:db:48:91:c6:ee:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:35:48:5C:F6:2A:5C:80:5B:0B:C2:8B:9A:30:87:70:9D:4A:76:98
            X509v3 Authority Key Identifier:
                keyid:F6:71:10:D7:42:A6:7E:51:A9:49:D9:C6:77:F8:77:10:DD:B7:E9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62E873D7809ECD91DA013357E4D73D84792A1069B1A39F14473C423F062E78B1/0/F67110D742A67E51A949D9C677F87710DDB7E97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F67110D742A67E51A949D9C677F87710DDB7E97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62E873D7809ECD91DA013357E4D73D84792A1069B1A39F14473C423F062E78B1/0/323830313a31303a653830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:35:48:4a:3d:6b:45:d8:75:c2:48:61:9a:ef:28:b6:1a:
         2e:e6:b5:3f:c7:cb:42:58:c4:08:e3:06:36:e5:d1:2d:08:02:
         48:93:fa:eb:47:ab:92:de:95:ca:26:11:b9:3f:e9:d7:8e:57:
         cb:d0:22:8d:21:c0:09:90:f3:6c:8f:a6:45:f9:91:6e:80:d4:
         d3:19:86:75:23:59:b4:e5:ed:6f:99:3f:15:0a:44:7d:95:84:
         18:8c:03:ae:3f:09:e5:44:65:e5:2b:3f:40:82:6a:e2:2f:72:
         f6:c5:0c:53:35:b6:bd:37:a1:c4:cf:d9:54:40:99:5f:d7:a0:
         c2:78:7c:11:c1:23:62:97:f1:04:41:43:a8:48:5e:ce:67:95:
         16:85:54:15:fa:f8:5f:f1:f0:75:a7:c5:2e:d4:b6:40:6a:f7:
         2e:08:b2:ba:fa:7e:3f:f1:58:20:64:c7:b9:d8:8c:61:4b:36:
         9c:d5:a4:1a:aa:07:d6:3a:ff:82:53:a4:87:70:b8:38:8b:c7:
         26:95:2b:e3:f2:9d:e6:b9:de:e7:19:6f:54:7b:e3:e9:f7:af:
         01:c2:75:d7:8f:ed:9a:f3:36:1d:c3:c1:45:1f:b8:a1:bb:f3:
         bc:4e:b8:e0:88:68:05:02:6c:c2:58:ef:37:50:50:87:98:22:
         26:b1:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:10 2025 by rpki-client