Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203232373234.roa
File:                     323830313a31663a343830303a3a2f34382d3438203d3e203232373234.roa (raw, json)
Hash identifier:          fDFzG7hH/6vAk8mggM2ZIChqGWBEWYHRFqcJxL+xW1o=
Subject key identifier:   31:3C:97:AC:A0:90:24:1B:26:FB:46:73:AD:7A:60:CE:37:36:76:2A
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       4FDD6B7CB6C17D93F3D941E08BA1E060344B4B0D
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 19:59:30 +0000
ROA not before:           Tue 04 Feb 2025 19:54:30 +0000
ROA not after:            Tue 03 Feb 2026 19:59:30 +0000
asID:                     22724
IP address blocks:        2801:1f:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dd:6b:7c:b6:c1:7d:93:f3:d9:41:e0:8b:a1:e0:60:34:4b:4b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Feb  4 19:54:30 2025 GMT
            Not After : Feb  3 19:59:30 2026 GMT
        Subject: CN=313C97ACA090241B26FB4673AD7A60CE3736762A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:6e:1d:ae:b7:25:d8:82:58:c9:7d:43:89:
                    0f:9e:f8:9a:81:b5:c5:43:e3:09:6c:52:13:37:6c:
                    8b:46:c0:c5:85:31:0e:73:b3:f5:bd:19:6e:0a:c7:
                    59:f6:6d:9c:0d:d1:0d:4e:0f:2a:98:fc:77:72:05:
                    ba:9d:d6:b9:63:d2:6f:98:d8:55:d2:d8:2a:1b:d8:
                    e0:a0:27:bc:45:66:76:7a:b0:f8:74:05:40:92:91:
                    68:27:96:b4:43:38:2e:e6:5b:51:c0:6f:2e:ab:76:
                    8b:da:35:cf:cd:78:fc:0a:b3:88:81:d2:9c:99:8d:
                    db:72:f6:a8:05:81:24:c1:68:0b:4d:4d:75:0f:bd:
                    4a:ce:de:e4:bf:43:7d:4d:fe:41:f8:7f:a6:8d:1d:
                    52:e9:4f:5b:b9:da:dc:89:57:d0:c0:20:f2:f5:44:
                    07:46:fd:25:bd:51:f5:06:ac:e6:17:fc:bf:b3:19:
                    bb:f4:18:bc:bf:50:7b:27:ed:ff:7e:8c:b0:db:d0:
                    8f:af:98:28:33:1b:3e:84:df:f5:cb:3a:9e:2e:04:
                    c4:98:48:20:83:8a:2e:71:5b:42:2f:5f:e9:4e:e8:
                    57:67:3c:8b:93:c0:c7:d5:28:a4:7a:4b:e8:e8:d5:
                    3c:3a:9d:7c:d5:63:c9:aa:91:3d:d0:c8:00:ab:79:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:97:AC:A0:90:24:1B:26:FB:46:73:AD:7A:60:CE:37:36:76:2A
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:60:9c:0a:1c:14:93:b0:4c:33:71:e8:b7:13:14:35:4f:c0:
         4b:8c:8a:ea:cf:23:6b:2b:10:68:e6:31:2b:a8:4f:6e:68:c9:
         5e:7b:5e:6d:dd:74:1a:7c:e8:7f:0f:f7:42:8d:5a:79:6e:05:
         fb:79:15:92:02:b4:c3:65:5c:5c:be:3b:56:6f:00:df:fd:99:
         37:28:00:de:b2:3c:59:af:30:34:ea:71:a3:2d:67:3a:28:21:
         b1:61:49:ea:91:53:08:86:b0:c4:cc:7f:19:50:a9:c1:06:32:
         0b:1f:de:f0:f4:0d:93:07:bd:cb:a6:2e:79:f0:3c:d1:70:e3:
         7f:43:7f:8a:75:80:72:d6:36:b2:41:ab:5a:95:f8:47:a6:72:
         cd:82:ab:9e:72:ac:88:55:8d:7f:bc:a9:e2:3c:f5:2c:23:e8:
         00:e2:82:ca:44:68:ce:2e:77:3b:eb:f5:dc:c8:56:ae:08:9a:
         03:14:90:5c:66:c1:7d:d4:bf:b2:7c:d7:c1:62:b8:ef:06:78:
         b8:3b:1f:54:f5:75:a5:9f:07:b3:46:b1:e8:29:14:9a:6c:6d:
         6d:fb:33:76:73:7e:16:3f:2d:37:f1:26:9f:52:85:5a:72:6f:
         02:b5:09:61:25:6d:f2:83:ef:9e:07:a5:10:45:8e:47:ca:b1:
         7a:cc:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:36 2025 by rpki-client