Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3130353a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          YAup3QVj8YpLuGgmfb+C8wsXmZSuT3HNVT4gkgAwcE8=
Subject key identifier:   45:D1:41:2E:DD:30:DA:0D:65:22:7E:A1:F7:F1:CA:EE:36:00:3A:5E
Certificate issuer:       /CN=511EC7ECE8F3FF815535163C5C512E56C1CDA048
Certificate serial:       0D88D298F64F4C1D7CCEF23F7864CDBE99A38643
Authority key identifier: 51:1E:C7:EC:E8:F3:FF:81:55:35:16:3C:5C:51:2E:56:C1:CD:A0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:38:28 +0000
ROA not before:           Tue 04 Feb 2025 18:33:28 +0000
ROA not after:            Tue 03 Feb 2026 18:38:28 +0000
asID:                     19429
IP address blocks:        2801:105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:88:d2:98:f6:4f:4c:1d:7c:ce:f2:3f:78:64:cd:be:99:a3:86:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511EC7ECE8F3FF815535163C5C512E56C1CDA048
        Validity
            Not Before: Feb  4 18:33:28 2025 GMT
            Not After : Feb  3 18:38:28 2026 GMT
        Subject: CN=45D1412EDD30DA0D65227EA1F7F1CAEE36003A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:49:95:f9:f4:f7:5c:d4:fc:55:6a:f9:45:
                    c6:96:60:3d:76:7a:39:59:46:67:94:fa:a2:00:89:
                    ac:b4:32:22:32:55:71:06:2c:69:d3:f6:94:86:8a:
                    9e:29:2b:58:51:52:e0:8a:43:f2:96:8c:e3:82:f5:
                    be:7c:70:cd:41:15:c1:95:a4:3e:4f:dd:8b:7e:07:
                    50:eb:45:7b:3c:78:93:80:ee:53:c7:ad:b6:8f:a7:
                    e8:8d:1f:64:09:35:ad:3c:a5:df:69:a9:c7:c3:01:
                    8f:56:0e:33:b8:21:9c:3a:81:91:98:15:89:d4:ac:
                    70:87:6f:77:76:d8:97:b6:d9:66:1d:58:f8:a1:a3:
                    1d:e8:31:c1:e4:b7:80:3c:f5:96:de:cb:cc:07:7a:
                    47:b2:21:2c:d8:d5:1c:2b:db:cd:43:c4:aa:ca:a7:
                    94:1e:b4:8f:02:08:99:70:d1:68:05:be:17:55:a1:
                    59:11:cf:11:e2:17:a8:66:73:e3:e8:88:2d:4a:32:
                    e6:ac:7e:a8:14:7a:83:26:b9:5b:8e:4b:ea:9e:55:
                    d6:c8:d8:70:ee:5f:19:b8:1d:ff:e0:1b:49:fe:49:
                    fa:97:f9:5e:fa:f0:86:42:cc:c4:14:8b:bf:79:66:
                    ae:3a:ee:8d:84:9d:5e:b0:39:fa:ca:e8:35:ee:40:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D1:41:2E:DD:30:DA:0D:65:22:7E:A1:F7:F1:CA:EE:36:00:3A:5E
            X509v3 Authority Key Identifier:
                keyid:51:1E:C7:EC:E8:F3:FF:81:55:35:16:3C:5C:51:2E:56:C1:CD:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:ef:8c:24:4d:29:21:0d:41:bb:8a:ba:a8:02:6f:6c:b0:
         95:aa:05:41:84:70:27:91:b6:b2:fb:5d:2a:15:5d:26:31:03:
         f5:29:b4:04:04:39:8b:0d:29:24:ad:b1:44:25:9d:7d:00:1e:
         65:49:a2:62:b3:3e:93:29:73:5e:de:15:60:62:3f:c4:1f:07:
         93:eb:f5:c1:7c:be:5a:fc:0d:00:aa:63:23:e8:23:b7:d5:83:
         93:86:ef:cc:03:46:71:5f:a0:3d:4e:2e:a0:fa:0b:d5:ed:58:
         39:da:0d:4b:6e:88:07:ca:20:0e:47:29:a7:7c:6b:80:e2:52:
         61:de:19:45:f4:1a:33:67:f0:01:5b:a8:f3:22:8d:04:fa:6a:
         75:78:91:11:35:6e:25:3f:74:3f:b8:f2:c3:48:42:c1:f4:e0:
         24:f3:86:5c:6e:73:b7:11:6b:7b:dc:ac:d2:90:15:44:e8:3d:
         fd:b6:8e:85:16:d4:50:a8:de:7d:0e:f5:ed:b1:2c:57:eb:0d:
         53:30:5e:5f:46:ed:1e:59:b7:5b:45:42:f4:e9:3a:4a:db:c6:
         4c:d1:ce:f7:81:c0:bc:c2:20:5e:96:81:d5:6e:e4:bf:41:60:
         1b:f3:30:00:ff:31:a2:46:a9:8e:70:60:02:cb:62:a9:12:11:
         82:c1:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:36:06 2025 by rpki-client