Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32613a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3136653a32613a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          Cl5q2hHHMdsqbvy6k3yF+j20FabaXsPrPOUDBgsONNk=
Subject key identifier:   5E:9B:40:14:02:03:AE:03:0C:7C:B4:A6:67:CA:78:3C:5E:D5:08:FF
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       5BE551A3AB832CFC29815D5563FD20A6B3B7AED3
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32613a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:48:28 +0000
ROA not before:           Tue 04 Feb 2025 18:43:28 +0000
ROA not after:            Tue 03 Feb 2026 18:48:28 +0000
asID:                     19429
IP address blocks:        2801:16e:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e5:51:a3:ab:83:2c:fc:29:81:5d:55:63:fd:20:a6:b3:b7:ae:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Feb  4 18:43:28 2025 GMT
            Not After : Feb  3 18:48:28 2026 GMT
        Subject: CN=5E9B40140203AE030C7CB4A667CA783C5ED508FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:b4:42:53:28:f5:0f:55:59:c4:11:45:92:
                    4d:aa:a4:4f:a5:2b:3f:a2:0f:7a:2e:c0:bf:3c:50:
                    d2:e2:64:50:61:df:e7:13:f2:35:64:cc:52:cc:19:
                    ac:46:27:ad:5b:e0:ad:c2:95:8d:df:89:f8:c7:5f:
                    88:28:94:06:92:21:49:51:bb:af:de:c2:60:13:6c:
                    62:ca:e5:2d:e0:b3:1a:22:b8:23:89:4d:d0:86:b3:
                    17:02:23:1c:3d:3c:19:fe:5e:ce:5f:ae:ef:47:a9:
                    e1:04:39:76:bc:df:e0:54:0d:ab:61:72:c5:cc:b4:
                    3e:ad:3b:c0:be:4b:fb:1b:0a:65:3e:22:15:e7:63:
                    85:c7:e4:ff:1a:84:fb:01:21:f4:87:0f:a7:24:00:
                    bb:85:dc:63:24:4e:3e:af:e8:87:cf:17:3f:0f:6d:
                    7d:04:4e:f0:a3:18:89:bd:df:6d:7e:64:1c:31:73:
                    43:a4:eb:e1:80:d1:db:29:05:31:47:f0:64:b6:0d:
                    b0:08:3c:95:86:3e:85:7f:8e:76:06:f9:d6:a6:54:
                    69:c8:6b:8d:3c:5a:2a:82:c0:30:e9:1a:e3:7e:78:
                    36:f7:93:82:e4:6d:67:bd:d9:9a:c7:b6:0e:b4:4f:
                    4e:3e:43:1c:a5:50:a9:dc:15:93:a6:39:f3:ed:17:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:40:14:02:03:AE:03:0C:7C:B4:A6:67:CA:78:3C:5E:D5:08:FF
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32613a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:ed:16:01:d0:80:da:76:1b:69:f6:62:7a:95:bf:86:02:
         fc:d5:ef:3e:e9:29:c1:f8:e3:65:45:fe:c9:23:87:64:be:cb:
         f1:ff:2d:da:51:c4:41:0b:cf:d5:b9:03:11:c2:31:5d:35:59:
         9d:29:d5:64:e7:74:1e:56:11:3c:d2:b6:98:14:6c:81:ca:d2:
         af:32:b3:c0:d2:d7:41:1b:a2:e0:df:ac:2e:f2:6d:ff:18:4d:
         6a:b4:f4:37:13:1c:47:ac:9d:d2:dd:c9:f8:b5:20:26:f1:15:
         e4:1f:de:5b:42:33:63:52:46:ce:af:8b:d8:cb:42:4d:bd:ba:
         3e:8d:a6:35:3a:86:cd:6b:d0:ec:ff:e2:d8:05:5a:ac:d2:62:
         d1:9e:b1:30:5e:da:64:96:df:e7:b1:d0:38:f2:25:e3:69:e8:
         90:99:23:f1:4f:55:9c:35:ae:4c:51:1c:7c:63:59:fd:75:5c:
         c7:34:1f:1c:71:62:34:ee:e7:f0:d8:aa:49:0b:cd:3a:96:cf:
         7e:b0:53:a1:22:e5:a9:04:b1:11:0d:31:f9:5b:2c:e1:49:81:
         76:f0:06:53:27:d9:c9:7d:3c:69:48:15:9c:c6:03:56:9a:31:
         43:14:e9:74:f6:82:e3:15:d4:fb:af:8a:25:7f:2e:96:55:a3:
         82:69:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:52 2025 by rpki-client