Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e20323639373932.roa
File:                     323830313a31653a343830303a3a2f34382d3438203d3e20323639373932.roa (raw, json)
Hash identifier:          6yBwMF84oqfqyw+D5VFsnrhU4dPBsyeXGgATzVSib1w=
Subject key identifier:   2B:89:A6:49:E3:43:DB:12:F5:0C:D9:0F:FE:BD:83:B7:44:25:A3:89
Certificate issuer:       /CN=41231346CAA3119B16D3EBB340022A400612414D
Certificate serial:       02C922867E73981A76D43ED37AD625D2A21AF1A3
Authority key identifier: 41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e20323639373932.roa
Signing time:             Tue 04 Feb 2025 18:52:38 +0000
ROA not before:           Tue 04 Feb 2025 18:47:38 +0000
ROA not after:            Tue 03 Feb 2026 18:52:38 +0000
asID:                     269792
IP address blocks:        2801:1e:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c9:22:86:7e:73:98:1a:76:d4:3e:d3:7a:d6:25:d2:a2:1a:f1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41231346CAA3119B16D3EBB340022A400612414D
        Validity
            Not Before: Feb  4 18:47:38 2025 GMT
            Not After : Feb  3 18:52:38 2026 GMT
        Subject: CN=2B89A649E343DB12F50CD90FFEBD83B74425A389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:9f:27:21:cc:10:e9:34:6d:17:ae:36:a0:
                    cd:d2:c9:f9:83:4a:e8:4b:f0:d2:dc:e3:21:02:7c:
                    27:70:e9:20:14:ac:25:dd:c0:9e:ac:5c:2f:4b:1d:
                    a4:c5:7b:cf:5d:a9:f2:f0:bd:55:9d:43:9b:46:98:
                    7f:ac:e9:32:bb:fd:bc:6a:52:be:2c:bd:06:72:f7:
                    d0:6c:84:9c:25:fe:fc:56:4d:a9:99:8e:c9:60:00:
                    b6:07:71:d0:89:f4:43:27:79:a3:71:49:41:9b:e0:
                    88:93:e2:a1:61:a7:24:9b:82:24:3c:9f:95:98:29:
                    ec:11:41:e7:05:76:5e:b7:f9:31:f7:b8:ae:a5:5d:
                    b4:da:68:92:e0:93:7b:a4:34:c5:c0:6e:20:7e:2c:
                    6e:95:79:f4:31:2b:3c:8b:1f:a4:ce:47:7f:04:ff:
                    50:98:54:3e:b2:85:db:96:71:e6:78:95:ad:db:77:
                    2e:ce:bf:35:e7:7f:21:a3:25:78:ec:21:ea:c0:bc:
                    92:ca:22:11:25:09:3c:2a:39:76:d8:d7:48:46:f6:
                    b3:ae:8c:c0:9b:cf:67:19:df:a7:d1:66:3c:c8:88:
                    70:d2:33:65:1d:8e:49:af:1a:be:b1:d6:64:66:da:
                    1e:41:d7:e4:8b:69:d4:a5:39:29:e1:ec:0e:50:0e:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:89:A6:49:E3:43:DB:12:F5:0C:D9:0F:FE:BD:83:B7:44:25:A3:89
            X509v3 Authority Key Identifier:
                keyid:41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e20323639373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:8e:95:f5:19:4a:fd:c0:77:19:32:a6:db:6f:60:01:be:
         83:90:20:2c:75:c3:00:d6:49:ca:5e:fe:6a:cc:2e:c8:cd:eb:
         13:22:27:05:fe:01:ec:ed:31:63:f7:be:96:dd:05:26:ea:97:
         8d:80:5b:c1:a5:ca:6a:6d:d9:95:1c:df:10:56:10:6d:1b:a9:
         90:ed:ea:4f:f0:e3:54:0d:8c:a6:51:3b:8c:49:2a:eb:8c:1d:
         eb:d4:81:9e:02:d5:85:dd:b0:c4:85:ac:17:c5:47:3a:1c:91:
         10:04:b4:09:dc:ea:13:6c:3a:f4:b6:9e:59:15:b8:1c:d6:d8:
         34:42:cc:c5:76:a9:c7:87:e0:81:d1:ee:fc:cb:84:f0:af:44:
         8b:5c:a9:71:46:23:74:56:f4:2f:a1:d7:39:f6:d1:78:a6:3b:
         b1:c6:6b:1f:d3:ae:7c:90:59:92:57:d2:9a:9a:e1:ac:8b:91:
         b8:25:e7:f6:48:f4:9a:cc:c7:a1:a9:f9:da:a7:51:d3:fd:23:
         0d:7a:9b:40:1c:80:2d:10:09:6c:1c:93:95:bf:f2:f6:aa:fe:
         f2:b6:c8:ca:4c:9b:8c:06:1a:ad:e9:e4:89:95:72:e4:5c:54:
         c2:b6:20:39:b8:72:88:5f:0a:98:94:bb:a8:91:b9:60:ec:43:
         bf:fa:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:42 2025 by rpki-client