Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/323830313a31653a653030303a3a2f34382d3438203d3e203631353032.roa
File:                     323830313a31653a653030303a3a2f34382d3438203d3e203631353032.roa (raw, json)
Hash identifier:          1/y3aCHbff0GoWj+co0HBjRXO4E/jyjeg6cJHh/Cqo0=
Subject key identifier:   68:C4:34:02:EF:4D:17:4C:64:1B:D8:A2:6B:FB:5D:30:57:29:BB:2E
Certificate issuer:       /CN=5EEF34262E5F7F9A665A1C125355DD1CEA90CA62
Certificate serial:       5BFCD3E38E40840CD802FEAD3C0F665354BB237D
Authority key identifier: 5E:EF:34:26:2E:5F:7F:9A:66:5A:1C:12:53:55:DD:1C:EA:90:CA:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/323830313a31653a653030303a3a2f34382d3438203d3e203631353032.roa
Signing time:             Tue 04 Feb 2025 20:07:50 +0000
ROA not before:           Tue 04 Feb 2025 20:02:50 +0000
ROA not after:            Tue 03 Feb 2026 20:07:50 +0000
asID:                     61502
IP address blocks:        2801:1e:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fc:d3:e3:8e:40:84:0c:d8:02:fe:ad:3c:0f:66:53:54:bb:23:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF34262E5F7F9A665A1C125355DD1CEA90CA62
        Validity
            Not Before: Feb  4 20:02:50 2025 GMT
            Not After : Feb  3 20:07:50 2026 GMT
        Subject: CN=68C43402EF4D174C641BD8A26BFB5D305729BB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:5f:46:98:fa:85:31:0a:59:2f:e5:e9:4b:
                    fa:47:8f:b9:22:11:b5:45:36:4d:3e:26:f8:59:29:
                    1f:69:b7:0c:ec:04:cf:d4:63:49:b8:09:10:a6:73:
                    56:68:e4:81:e3:23:58:43:69:a7:5b:23:1a:c3:68:
                    b6:84:89:10:b2:71:68:07:2a:5e:ba:0f:c8:cc:40:
                    55:95:cb:51:b8:2c:65:b2:17:ed:3e:fd:64:17:89:
                    44:79:c3:d7:31:c8:6d:d4:30:eb:fb:21:34:2a:70:
                    e9:2b:0e:dc:2b:16:e2:8a:65:7f:fb:1d:f1:ef:8a:
                    09:ec:bb:4b:98:1f:c7:73:06:d7:82:85:cc:8b:64:
                    00:f0:12:cc:c0:7c:36:64:f7:a6:a1:02:e9:a3:4a:
                    53:b2:23:d9:93:65:e5:e2:c1:80:44:b2:74:30:24:
                    28:39:76:f3:1c:42:69:de:3f:43:80:8c:f0:c6:db:
                    6e:b7:d4:a7:95:86:bd:1e:73:0a:6f:70:da:f7:91:
                    f5:d3:18:51:31:47:05:f9:2a:80:29:c3:a7:20:63:
                    46:76:d9:27:07:29:86:33:65:6f:e7:f0:39:23:4b:
                    c1:46:60:10:b5:cd:13:7b:bc:4a:9a:46:5c:ad:46:
                    8d:f6:86:11:60:c8:f2:dc:99:cb:ac:6e:f3:5a:0a:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C4:34:02:EF:4D:17:4C:64:1B:D8:A2:6B:FB:5D:30:57:29:BB:2E
            X509v3 Authority Key Identifier:
                keyid:5E:EF:34:26:2E:5F:7F:9A:66:5A:1C:12:53:55:DD:1C:EA:90:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/323830313a31653a653030303a3a2f34382d3438203d3e203631353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:28:f7:ad:31:3d:49:2f:89:e2:3e:b6:1a:d7:66:c5:10:21:
         ca:35:67:97:b5:d2:e9:f1:17:60:fb:90:c6:cc:77:97:74:9b:
         37:fd:6f:f1:5e:5d:1b:78:b9:91:01:37:df:02:01:66:65:e0:
         a1:41:25:e4:af:94:cc:c3:95:55:a8:2c:5c:3d:0d:33:fe:c4:
         54:a9:89:8a:60:e2:86:07:82:fa:23:07:72:99:75:82:c1:57:
         59:b5:75:35:25:a9:b6:9f:8f:5a:9b:4a:7d:fc:c3:d9:3a:b4:
         85:db:c2:05:80:d4:0d:d3:af:60:12:67:25:ff:aa:8c:e4:9b:
         7a:00:d9:63:e4:04:55:9b:80:98:90:a1:01:42:da:7b:64:74:
         c1:9f:e6:52:b3:04:d1:93:22:08:8f:23:70:2a:56:f6:2c:aa:
         1c:d5:46:e2:e7:15:95:74:0d:d1:37:aa:5a:1e:17:8a:8f:ed:
         45:b0:e6:fa:b4:48:9e:8f:d1:6a:59:27:54:10:0e:b8:f8:74:
         ab:60:5f:b2:8c:0b:58:6c:6a:54:10:22:a9:aa:d9:05:eb:d3:
         bd:80:33:05:fc:7f:df:97:75:9f:43:bc:fb:40:7a:18:ee:8d:
         08:84:b4:61:7c:14:cc:97:f8:39:8a:cf:0f:7a:83:2c:5a:a4:
         0d:99:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:18 2025 by rpki-client