Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/323830313a31323a393830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31323a393830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          gI0H3kPQ0aRS9GQpfIJrtbJVZvdUNmWrwo37502njSQ=
Subject key identifier:   76:D2:3F:E4:C7:F5:B8:EA:0A:B1:8E:3C:53:90:CB:B5:70:FA:06:FB
Certificate issuer:       /CN=9AD9774FD60FD938A234B990EB8F69705567FCEB
Certificate serial:       12C3EE9C548AE0D3B5679A27DF1F72C8CEB06773
Authority key identifier: 9A:D9:77:4F:D6:0F:D9:38:A2:34:B9:90:EB:8F:69:70:55:67:FC:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/323830313a31323a393830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 19:58:01 +0000
ROA not before:           Tue 04 Feb 2025 19:53:01 +0000
ROA not after:            Tue 03 Feb 2026 19:58:01 +0000
asID:                     262589
IP address blocks:        2801:12:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c3:ee:9c:54:8a:e0:d3:b5:67:9a:27:df:1f:72:c8:ce:b0:67:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD9774FD60FD938A234B990EB8F69705567FCEB
        Validity
            Not Before: Feb  4 19:53:01 2025 GMT
            Not After : Feb  3 19:58:01 2026 GMT
        Subject: CN=76D23FE4C7F5B8EA0AB18E3C5390CBB570FA06FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:bf:cf:08:31:ab:17:ab:42:f3:21:c6:d0:
                    03:d7:cc:c9:81:74:20:5f:49:a5:18:06:1e:0f:fc:
                    96:2d:6d:fd:9a:08:e8:76:ef:4a:93:98:67:2a:f0:
                    94:77:41:3c:b7:ca:a3:4d:37:15:e1:de:bc:6a:3f:
                    35:dc:5e:7f:8f:b3:ad:49:a2:ec:62:9e:a3:25:43:
                    6b:72:cd:a8:61:ce:bd:a3:6f:97:f0:59:41:c4:86:
                    cb:4c:d8:c8:ba:7a:79:c5:20:54:d7:9e:2b:33:20:
                    c5:87:a7:27:dc:25:32:08:22:91:40:5d:e0:e0:7e:
                    dc:b5:2e:4f:de:f4:33:67:77:1f:5e:47:8b:e3:f2:
                    72:b7:03:06:b7:ee:f1:59:21:ad:f4:43:4c:49:a5:
                    4b:58:24:39:57:cd:18:2d:3b:78:80:5d:57:d0:1c:
                    e6:47:32:93:ba:a8:53:52:b1:26:56:b8:56:ae:4c:
                    f9:24:c8:fc:62:ce:87:8f:db:7a:1a:f0:59:d6:68:
                    18:02:24:03:b0:e7:ac:24:28:81:2d:e0:d7:69:56:
                    bf:b6:0f:22:2a:81:19:9f:ef:80:0d:95:c5:1c:a3:
                    5b:6d:8a:6f:b0:08:68:34:91:fd:4b:c9:a3:c4:54:
                    b7:c0:0b:a9:af:9e:7a:fd:2e:c0:22:a1:93:62:73:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D2:3F:E4:C7:F5:B8:EA:0A:B1:8E:3C:53:90:CB:B5:70:FA:06:FB
            X509v3 Authority Key Identifier:
                keyid:9A:D9:77:4F:D6:0F:D9:38:A2:34:B9:90:EB:8F:69:70:55:67:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/323830313a31323a393830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:82:90:0d:25:da:41:39:c7:eb:84:2d:64:70:f5:03:50:
         8e:23:ff:a4:11:c9:b4:19:ab:a0:5a:f6:90:c8:cf:4c:77:55:
         96:15:84:41:5c:5b:70:d0:f4:dc:74:e1:67:2e:68:a3:0e:6d:
         0b:cd:6c:35:84:49:10:cc:03:2f:f4:e0:60:11:32:3e:e4:2c:
         81:53:32:55:c0:1b:e4:5a:4c:f8:cc:56:85:fd:5d:69:b6:8b:
         8c:ee:4c:1e:6a:4b:95:7d:0b:d5:de:71:31:65:25:d4:c3:62:
         a0:8c:24:a5:0b:27:c4:5e:2b:ce:a5:d1:ba:d0:7c:4c:14:52:
         a7:d0:2f:fe:1b:f9:17:fa:66:e1:46:76:ad:9c:03:d1:47:5b:
         a3:cb:66:9a:34:8e:26:e3:b8:a7:3d:a8:8a:58:cf:48:a4:ad:
         f2:3a:0c:48:69:48:15:41:97:23:d5:aa:b7:78:31:db:91:8a:
         64:d7:9d:ad:a0:56:f4:08:80:32:d4:14:bc:92:20:15:9b:73:
         ae:25:c1:af:a3:a8:2f:92:4c:d0:0d:b8:81:aa:4c:bd:62:9d:
         f5:a9:8b:5a:ef:77:1e:31:d0:85:f8:7f:d8:09:4f:bd:a0:b9:
         aa:e5:76:34:b9:67:12:9d:25:21:4a:1a:53:f7:47:52:3a:f6:
         20:fd:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:18 2025 by rpki-client