Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a31663a343830303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          0QXoJxlfHulAK0TOw8R4gz0aZBV/7C5+tEccYvEH4nM=
Subject key identifier:   DD:A2:D1:18:E2:6C:BA:AA:62:60:46:C1:DB:ED:DB:B3:B1:FE:63:A8
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       74085A5420946DC0F2B9EDC41D47ECC2C0B73542
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 19:59:33 +0000
ROA not before:           Tue 04 Feb 2025 19:54:33 +0000
ROA not after:            Tue 03 Feb 2026 19:59:33 +0000
asID:                     27947
IP address blocks:        2801:1f:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:08:5a:54:20:94:6d:c0:f2:b9:ed:c4:1d:47:ec:c2:c0:b7:35:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Feb  4 19:54:33 2025 GMT
            Not After : Feb  3 19:59:33 2026 GMT
        Subject: CN=DDA2D118E26CBAAA626046C1DBEDDBB3B1FE63A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:7f:7d:77:26:79:b3:7c:f8:10:c1:04:32:
                    22:2d:e3:d2:64:14:c1:b1:6f:5c:b1:57:f6:de:4b:
                    ae:f7:7c:c8:5e:3f:39:b1:17:a8:a1:a2:36:fa:b7:
                    5e:63:57:ca:a8:5f:06:e6:94:04:4b:dc:65:ec:d7:
                    ef:db:4e:7f:3a:5a:6e:be:f7:fa:16:0a:67:0e:b5:
                    e1:5a:e0:1b:57:6e:d4:8d:e8:9b:3c:61:b6:59:df:
                    4b:6c:31:50:8a:e9:e5:49:e0:ef:7a:f8:f7:41:b7:
                    f5:93:49:7f:36:d5:dc:f3:d9:48:d8:fc:1c:d5:b9:
                    d1:b1:e6:80:c4:dd:18:4f:b3:4c:20:1b:99:c2:51:
                    d3:d9:a8:15:95:8c:d2:1c:a6:1d:24:39:9c:f8:27:
                    2a:df:5e:17:1b:a7:6f:6c:a3:f0:f5:e7:f6:df:26:
                    f4:d7:19:a2:64:a0:1b:ed:b7:c0:c8:db:90:8a:33:
                    84:23:4a:2e:d2:0f:cb:d7:a6:eb:39:ca:b8:43:3f:
                    35:61:1b:06:8f:99:f1:90:cf:2f:8d:57:38:2d:50:
                    0f:93:24:9d:94:86:ca:e6:3c:e6:e8:80:e6:cc:34:
                    de:23:2d:a5:b0:37:0f:24:d6:86:ea:f1:e5:05:a8:
                    d8:65:f8:0d:5c:56:97:66:0d:de:6e:68:11:b0:ba:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:D1:18:E2:6C:BA:AA:62:60:46:C1:DB:ED:DB:B3:B1:FE:63:A8
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:d2:d4:c2:a1:1f:0e:93:da:f9:b5:16:42:2d:66:e5:81:22:
         14:ac:e7:3d:eb:f1:5c:53:78:7b:4a:38:59:5a:cb:8c:0e:d1:
         56:ce:94:48:f6:77:13:99:3b:eb:be:5b:22:bb:50:38:3d:e0:
         ac:80:af:69:e7:50:4f:42:b9:c3:8e:4d:3d:ff:8c:24:3b:5a:
         85:71:03:43:4a:1c:8d:93:37:8e:28:2e:1f:f1:6d:c3:2c:50:
         a3:59:4e:2b:f6:0f:5b:fb:78:49:05:ae:dd:f8:ad:7d:6d:f3:
         c9:cf:e5:f2:b0:e9:1a:21:ef:04:a3:0c:e8:df:17:1f:9e:47:
         77:a1:da:7e:6d:cb:4f:20:72:40:56:03:d2:fc:f2:5b:ec:06:
         9a:a7:a5:6d:6e:bb:b8:b1:77:46:ec:05:94:51:60:0d:d2:df:
         58:13:f9:4a:a8:eb:da:92:6f:56:9d:a5:45:5c:25:14:58:e7:
         35:48:2e:e6:c3:f4:19:41:22:f5:da:92:64:d5:fc:ee:6a:3d:
         97:49:eb:da:99:2f:30:82:79:76:f8:2a:53:0b:4b:70:31:e8:
         da:4c:f5:f8:49:48:58:18:be:69:14:dd:9c:c2:28:9f:f6:a7:
         7a:93:ef:a0:b0:95:15:98:1d:7d:23:70:14:4f:ed:77:0d:7f:
         29:64:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:58 2025 by rpki-client