Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/323830313a31343a353830303a3a2f34382d3438203d3e20323732313534.roa
File:                     323830313a31343a353830303a3a2f34382d3438203d3e20323732313534.roa (raw, json)
Hash identifier:          dbnAlSrhgqGseMqqlf1XpbNiGlNKUc1tMtMyGZGU/mw=
Subject key identifier:   BE:F8:FD:AC:11:F7:47:D2:12:A8:02:BE:DA:98:94:FA:2C:8C:9B:04
Certificate issuer:       /CN=7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0
Certificate serial:       50306FD54470ACD473B500699EBE696943EA5F61
Authority key identifier: 7B:99:00:64:AA:53:A1:5F:F6:FE:CC:8E:19:5D:28:C5:C4:A2:A6:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/323830313a31343a353830303a3a2f34382d3438203d3e20323732313534.roa
Signing time:             Tue 04 Feb 2025 18:01:59 +0000
ROA not before:           Tue 04 Feb 2025 17:56:59 +0000
ROA not after:            Tue 03 Feb 2026 18:01:59 +0000
asID:                     272154
IP address blocks:        2801:14:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:30:6f:d5:44:70:ac:d4:73:b5:00:69:9e:be:69:69:43:ea:5f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0
        Validity
            Not Before: Feb  4 17:56:59 2025 GMT
            Not After : Feb  3 18:01:59 2026 GMT
        Subject: CN=BEF8FDAC11F747D212A802BEDA9894FA2C8C9B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:1f:3e:08:8b:2e:eb:88:94:70:67:98:e6:
                    cc:f9:4f:83:23:e8:35:2d:48:19:71:23:be:8a:bd:
                    40:ab:89:95:d9:0c:81:9a:6e:67:78:54:a4:63:f3:
                    2d:4a:1b:f9:d2:0f:6b:02:49:86:06:9e:e1:2e:bd:
                    49:bc:d9:a9:a3:31:ab:da:ab:8e:0e:ec:9b:36:12:
                    ff:c5:73:00:1d:f1:10:a7:df:3c:f5:b9:1d:ee:dd:
                    55:6e:d4:b0:bb:0a:44:df:41:01:47:53:e8:ae:1e:
                    3e:b2:26:d7:b8:a0:56:c9:18:29:e2:9b:22:0a:23:
                    18:24:d0:93:23:16:37:e0:e2:2c:2f:09:6d:53:8b:
                    1d:0b:06:f9:68:31:6b:04:70:32:7e:f7:28:00:88:
                    66:43:18:34:e1:c7:0e:df:93:60:e2:de:74:a2:c2:
                    7c:d9:8c:75:9e:4d:ea:b2:01:6b:96:06:5d:08:23:
                    c0:9a:52:a0:fd:9b:ff:55:fa:f1:0a:20:ea:df:91:
                    d2:30:a7:d1:29:67:91:8f:4f:62:d3:9d:5a:cc:dc:
                    d7:32:0f:d9:cc:1a:24:65:22:f8:54:a5:58:3f:8d:
                    49:28:6f:04:fe:24:f3:7b:21:2d:99:6a:f1:8f:8c:
                    a9:36:82:90:97:41:95:2c:fe:e7:57:0d:76:b4:ac:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:FD:AC:11:F7:47:D2:12:A8:02:BE:DA:98:94:FA:2C:8C:9B:04
            X509v3 Authority Key Identifier:
                keyid:7B:99:00:64:AA:53:A1:5F:F6:FE:CC:8E:19:5D:28:C5:C4:A2:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/323830313a31343a353830303a3a2f34382d3438203d3e20323732313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:c4:ed:50:73:04:dd:cd:b4:70:11:b5:b3:22:11:a9:61:bd:
         02:94:b9:d9:c4:b0:cc:09:06:16:f9:53:70:17:53:af:ab:93:
         a8:52:7c:50:34:f3:b4:e9:88:f8:5f:3c:f3:7b:4e:76:b0:f5:
         3f:d3:26:7f:f4:ef:c2:60:34:56:52:f0:5d:ab:f6:76:3a:00:
         48:2d:e1:31:fd:2e:2a:0a:56:a5:39:51:de:7b:69:39:27:9d:
         19:79:61:14:af:62:ba:38:4b:2d:c8:0a:47:6b:45:d1:a6:63:
         37:94:c2:c5:a6:af:37:5c:a9:d1:06:fa:27:2a:47:12:9e:f2:
         1f:b7:eb:ed:b2:7d:c9:9d:a6:41:01:9e:77:a3:80:c2:e5:5d:
         78:a2:db:01:e6:93:3d:f3:eb:39:1e:27:94:81:cf:95:5b:72:
         a9:f2:02:70:10:97:07:60:5a:87:ce:95:35:4d:d4:11:7e:8b:
         51:20:29:6d:e1:8d:de:4b:32:a9:49:44:fd:39:7c:59:55:69:
         b3:ca:3c:31:0d:c6:a1:b9:d3:b8:c9:35:40:6c:d3:88:21:7b:
         2c:c6:cf:55:05:7c:51:9c:50:6c:cc:de:45:90:4e:d6:dc:fc:
         ae:02:50:02:27:31:90:30:17:bd:54:2f:99:72:96:89:df:a4:
         05:a4:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:30 2025 by rpki-client