Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          tRPMgSDdB36L0vYHTAdn8rlY0f106QCl6KCEa0XAS+Q=
Subject key identifier:   EB:BE:B4:9A:A4:98:F3:14:46:49:14:7E:0B:F5:37:D0:22:CE:57:02
Certificate issuer:       /CN=65ABB800C3E6526FD0368FC597BC1D1E1863AE04
Certificate serial:       22D25E87204438399B02F33A877980E91F1494
Authority key identifier: 65:AB:B8:00:C3:E6:52:6F:D0:36:8F:C5:97:BC:1D:1E:18:63:AE:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:24:05 +0000
ROA not before:           Tue 04 Feb 2025 18:19:05 +0000
ROA not after:            Tue 03 Feb 2026 18:24:05 +0000
asID:                     262589
IP address blocks:        2801:1c:a800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d2:5e:87:20:44:38:39:9b:02:f3:3a:87:79:80:e9:1f:14:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ABB800C3E6526FD0368FC597BC1D1E1863AE04
        Validity
            Not Before: Feb  4 18:19:05 2025 GMT
            Not After : Feb  3 18:24:05 2026 GMT
        Subject: CN=EBBEB49AA498F3144649147E0BF537D022CE5702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:be:41:77:84:61:c5:2a:96:3c:d8:95:cd:
                    47:14:46:d9:72:a2:3a:fb:0c:1e:06:a7:df:e7:c1:
                    98:3d:37:8e:45:fe:48:26:38:c8:26:53:4d:1d:5c:
                    d1:28:81:f7:58:ee:60:22:d0:54:01:5b:0d:a0:19:
                    e5:cb:8e:40:3e:27:21:8a:88:ad:16:19:0d:1b:82:
                    f4:78:28:dc:fa:5f:9a:54:4e:d7:b3:b8:01:e2:09:
                    5b:37:91:05:4f:16:3a:2a:a8:07:2a:3f:2d:72:bd:
                    61:ce:f1:ac:6c:63:d6:d5:07:7b:16:9c:ef:84:6e:
                    08:3c:fd:b6:83:fe:40:c4:99:76:3b:25:e5:18:53:
                    f3:11:ce:18:8d:1a:45:4d:d6:96:d4:4e:c3:d1:fa:
                    18:70:a3:79:5b:79:6f:e5:38:d0:c3:35:ac:0d:77:
                    22:a7:f2:41:d4:63:1b:0d:1a:b9:aa:d7:5b:5b:2f:
                    3a:a5:62:38:0d:88:e5:e8:d1:c9:5f:39:e7:ea:48:
                    2e:a7:d1:5b:a6:b3:47:2d:8a:17:ea:ca:98:30:36:
                    b5:47:80:99:2a:a0:45:49:91:57:bf:70:cc:89:7b:
                    cd:b9:e4:78:a0:ea:f4:e3:a7:b1:4c:17:d7:a1:81:
                    17:ba:a5:f6:72:c0:27:30:d3:56:5d:19:59:66:35:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BE:B4:9A:A4:98:F3:14:46:49:14:7E:0B:F5:37:D0:22:CE:57:02
            X509v3 Authority Key Identifier:
                keyid:65:AB:B8:00:C3:E6:52:6F:D0:36:8F:C5:97:BC:1D:1E:18:63:AE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:37:20:ad:3a:37:06:74:4e:08:a0:b0:d4:c5:40:f3:d3:87:
         97:6d:f3:74:58:5b:c0:49:c2:9c:6e:70:19:79:5f:64:2c:31:
         43:34:a1:89:80:6c:39:94:cb:c0:79:b8:8f:01:93:75:94:c5:
         a2:2b:8a:d2:17:c3:6d:1d:44:59:ae:2a:6e:0a:79:7d:92:9c:
         6b:fb:6a:81:33:e2:c1:a0:0f:39:42:a6:2f:09:04:da:d2:65:
         cf:19:5e:54:e5:d9:a6:86:35:86:b4:cc:6a:a2:de:52:92:f9:
         fa:ae:e5:d3:4a:dc:e3:ad:ba:b2:7c:e4:fc:51:30:24:a9:df:
         d9:20:65:ab:0c:a4:9e:72:fb:9c:a9:38:80:11:fa:d2:d0:fd:
         90:b4:3e:16:28:dc:d3:0a:bf:26:32:1e:b1:1d:4c:d2:80:50:
         b5:2b:4b:a2:be:d6:13:6e:72:00:d2:fe:4f:7e:cf:4f:5f:6b:
         e1:82:90:35:6b:1f:c2:99:74:0f:c9:77:5e:46:fd:c9:19:d0:
         51:35:55:c7:7d:89:1f:c5:e9:28:38:f9:06:3a:a8:6d:1b:cd:
         2b:32:fb:bf:43:97:35:7b:95:31:19:0b:ba:29:54:89:2b:bf:
         5d:23:77:36:10:c3:8a:34:cc:b1:d3:44:c2:38:32:aa:03:b9:
         c9:b6:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:24 2025 by rpki-client