Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31653a343830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          BptrHmp7NyWdRpSk+TADrgB//YIGh6gc+FHZkZEOPZU=
Subject key identifier:   21:C5:DA:B4:A9:3E:BF:E9:0D:0B:80:0D:C4:05:DD:49:A3:54:1A:62
Certificate issuer:       /CN=41231346CAA3119B16D3EBB340022A400612414D
Certificate serial:       229FFAB49E18E11778FA584ED3ED2AA8864590C2
Authority key identifier: 41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Mon 14 Jul 2025 16:00:00 +0000
ROA not before:           Mon 14 Jul 2025 15:55:00 +0000
ROA not after:            Mon 13 Jul 2026 16:00:00 +0000
asID:                     61468
IP address blocks:        2801:1e:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Jul 2025 19:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9f:fa:b4:9e:18:e1:17:78:fa:58:4e:d3:ed:2a:a8:86:45:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41231346CAA3119B16D3EBB340022A400612414D
        Validity
            Not Before: Jul 14 15:55:00 2025 GMT
            Not After : Jul 13 16:00:00 2026 GMT
        Subject: CN=21C5DAB4A93EBFE90D0B800DC405DD49A3541A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:38:b2:88:d0:da:e5:9c:7c:84:74:ce:84:
                    b1:78:7d:39:5c:69:62:a6:f0:86:1d:4b:af:39:87:
                    d0:d4:b4:b5:dd:82:cc:a2:b3:5d:2e:21:7e:b2:bb:
                    b5:b8:ea:8c:ea:d3:8f:0b:fd:5b:91:2f:97:f7:ea:
                    2b:2d:bb:df:97:38:8f:fc:bf:c3:ce:b1:0d:35:7f:
                    3e:10:9f:d6:72:74:bd:53:bc:19:94:72:ee:a1:3c:
                    99:b8:cf:62:d6:53:bb:92:30:ef:53:30:8b:5a:9b:
                    78:20:94:ce:48:54:bb:ec:7e:b0:95:48:cc:45:57:
                    ee:59:4c:10:24:01:4c:92:b4:08:e8:9f:5e:96:ce:
                    88:15:5f:80:4e:7f:dc:dd:a7:66:9e:ed:d6:87:70:
                    f7:68:2a:89:0a:32:50:79:ad:9e:b0:d0:89:5f:4b:
                    50:6e:ae:58:11:d0:ae:70:b6:a3:9f:6f:6b:84:b3:
                    52:45:bc:81:85:1f:0e:b9:28:6d:8e:22:cf:3b:91:
                    5f:b0:81:0d:f7:6c:b2:ae:4a:e3:54:47:75:c5:4e:
                    09:2c:0a:5e:73:2a:4e:c4:d2:a4:0f:e1:9d:c2:a5:
                    fe:2f:de:37:cb:6c:98:bb:2f:50:6f:4c:70:ab:87:
                    ef:df:ad:b1:41:a6:2f:81:2a:c1:ea:8e:ee:5c:30:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:DA:B4:A9:3E:BF:E9:0D:0B:80:0D:C4:05:DD:49:A3:54:1A:62
            X509v3 Authority Key Identifier:
                keyid:41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:04:1e:7c:10:d7:65:c4:3a:0f:46:f3:b5:e1:fb:0e:53:
         54:28:43:11:ff:ff:f5:c9:a4:de:38:4c:32:d7:8a:f4:43:d6:
         32:57:de:aa:92:fe:7a:5e:21:48:79:26:a4:69:11:12:5a:fb:
         98:19:bd:39:53:ba:dc:2e:ba:d4:39:c9:ff:23:c6:c7:42:60:
         a7:f9:10:41:58:78:82:5c:7a:b5:96:ad:bb:47:d9:a7:4c:fe:
         cb:a2:95:c5:e5:1d:92:fe:fb:93:81:99:19:ff:4b:92:9c:cd:
         70:06:8f:78:47:07:65:87:39:5f:8a:b4:3a:61:e7:97:e7:6a:
         00:9c:16:05:cd:03:2b:1c:de:06:79:17:7d:38:e7:13:c0:cf:
         ba:7b:8e:38:85:e2:0a:fa:67:0a:7b:25:6e:28:1f:43:8e:c0:
         fc:1b:8a:92:2e:57:80:60:6f:a9:25:e4:89:84:31:b6:7f:b5:
         36:2b:98:3b:96:cd:b1:d3:99:84:2a:dd:02:22:cf:61:c7:dd:
         37:a5:af:21:ec:09:74:41:80:3b:d8:9b:21:54:49:4d:b8:55:
         f3:c2:d8:91:ee:eb:1f:8b:00:17:83:ac:e7:a0:71:46:bd:73:
         ce:54:fc:89:bc:c9:a1:c4:ae:1b:e1:2e:08:ec:e7:9d:07:13:
         af:80:4a:c7
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUIp/6tJ4Y4Rd4+lhO0+0qqIZFkMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEyMzEzNDZDQUEzMTE5QjE2RDNFQkIzNDAwMjJBNDAw
NjEyNDE0RDAeFw0yNTA3MTQxNTU1MDBaFw0yNjA3MTMxNjAwMDBaMDMxMTAvBgNV
BAMTKDIxQzVEQUI0QTkzRUJGRTkwRDBCODAwREM0MDVERDQ5QTM1NDFBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfTiyiNDa5Zx8hHTOhLF4fTlc
aWKm8IYdS685h9DUtLXdgsyis10uIX6yu7W46ozq048L/VuRL5f36istu9+XOI/8
v8POsQ01fz4Qn9ZydL1TvBmUcu6hPJm4z2LWU7uSMO9TMItam3gglM5IVLvsfrCV
SMxFV+5ZTBAkAUyStAjon16WzogVX4BOf9zdp2ae7daHcPdoKokKMlB5rZ6w0Ilf
S1BurlgR0K5wtqOfb2uEs1JFvIGFHw65KG2OIs87kV+wgQ33bLKuSuNUR3XFTgks
Cl5zKk7E0qQP4Z3Cpf4v3jfLbJi7L1BvTHCrh+/frbFBpi+BKsHqju5cMMz1AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUIcXatKk+v+kNC4ANxAXdSaNUGmIwHwYDVR0j
BBgwFoAUQSMTRsqjEZsW0+uzQAIqQAYSQU0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTk3QTgzNDBGRjExMjZBNjZDQUU5MkI1NDM4QzA2MEZC
OUNCQzhFRTQyRDRBRjIwQTk1NjgxMDNERjZBNjBDLzAvNDEyMzEzNDZDQUEzMTE5
QjE2RDNFQkIzNDAwMjJBNDAwNjEyNDE0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTIzMTM0NkNBQTMxMTlCMTZE
M0VCQjM0MDAyMkE0MDA2MTI0MTRELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE5N0E4MzQwRkYxMTI2QTY2Q0FFOTJCNTQzOEMwNjBGQjlDQkM4RUU0
MkQ0QUYyMEE5NTY4MTAzREY2QTYwQy8wLzMyMzgzMDMxM2EzMTY1M2EzNDM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzEzNDM2Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAeSAAwDQYJKoZIhvcNAQELBQADggEBAI/OBB58ENdlxDoPRvO14fsOU1QoQxH/
//XJpN44TDLXivRD1jJX3qqS/npeIUh5JqRpERJa+5gZvTlTutwuutQ5yf8jxsdC
YKf5EEFYeIJcerWWrbtH2adM/suilcXlHZL++5OBmRn/S5KczXAGj3hHB2WHOV+K
tDph55fnagCcFgXNAysc3gZ5F3045xPAz7p7jjiF4gr6Zwp7JW4oH0OOwPwbipIu
V4Bgb6kl5ImEMbZ/tTYrmDuWzbHTmYQq3QIiz2HH3TelryHsCXRBgDvYmyFUSU24
VfPC2JHu6x+LABeDrOegcUa9c85U/Im8yaHErhvhLgjs550HE6+ASsc=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:24 2025 by rpki-client