Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          +JIef3OPdiOSw7HAjcmOEv6apjWTx6xR6RiNtTx72NQ=
Subject key identifier:   0C:3E:01:86:46:AE:90:D0:85:42:CA:34:1E:40:28:18:78:8C:68:E6
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       3F33B3048A0968E818BD0E49F3B849922528CE1B
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:53:36 +0000
ROA not before:           Tue 04 Feb 2025 18:48:36 +0000
ROA not after:            Tue 03 Feb 2026 18:53:36 +0000
asID:                     27947
IP address blocks:        2801:16:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:33:b3:04:8a:09:68:e8:18:bd:0e:49:f3:b8:49:92:25:28:ce:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Feb  4 18:48:36 2025 GMT
            Not After : Feb  3 18:53:36 2026 GMT
        Subject: CN=0C3E018646AE90D08542CA341E402818788C68E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:dc:b8:55:10:ab:91:eb:49:60:4c:14:5b:
                    94:b1:04:3c:fe:e2:4e:31:d0:65:59:c3:0f:00:d4:
                    56:54:b3:cc:fc:ca:c9:1d:7c:50:54:df:f1:a5:29:
                    9d:be:35:79:42:72:61:ab:23:03:20:13:34:20:ca:
                    aa:0c:b7:cd:b8:27:30:01:91:fa:ee:5e:82:14:e9:
                    18:a8:81:ba:7b:59:e0:dc:3a:86:d1:f9:0a:c6:ca:
                    a0:d3:72:72:8e:17:6a:e8:01:bf:31:94:ff:c7:e1:
                    bf:f2:b3:d0:90:9b:f5:49:a8:d1:e1:b4:eb:c6:8d:
                    cb:d5:41:69:a2:1d:90:83:4d:ce:44:2a:23:eb:74:
                    78:4d:fc:0e:b4:d2:fe:80:f5:e5:54:5e:22:35:5e:
                    16:85:75:d4:37:14:a1:49:4f:49:2f:d8:aa:39:67:
                    95:67:02:25:f1:7b:5b:2c:ab:ea:f3:dd:08:9e:67:
                    68:65:19:72:33:b0:b0:0d:64:a9:20:bd:7e:44:9f:
                    15:81:14:44:58:26:0d:55:8e:a4:94:68:68:17:a2:
                    22:b2:3e:8f:7d:d3:3f:64:89:9a:cb:b6:f6:a1:da:
                    f6:36:f8:66:6c:f2:c1:e1:3d:a9:bb:02:1a:62:fe:
                    62:76:db:46:77:48:93:14:d4:66:93:2c:f5:1a:34:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:01:86:46:AE:90:D0:85:42:CA:34:1E:40:28:18:78:8C:68:E6
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:e9:65:af:7f:8c:86:cb:38:38:d2:34:5a:97:fe:32:a1:01:
         69:24:67:9d:93:2a:30:54:5c:30:c6:e3:96:0a:ba:21:3b:b4:
         29:b9:b8:4b:30:7a:3e:ff:90:89:58:54:73:55:10:a3:0f:bc:
         d1:43:fc:00:5a:2a:ed:77:8a:31:94:c5:da:ec:a4:92:f5:e4:
         7c:7d:c0:9f:fc:4c:60:ed:14:27:c0:af:c9:23:23:1d:61:07:
         7c:37:7c:4c:d5:94:b7:45:f7:2f:a5:58:91:1b:5a:54:fa:6c:
         58:af:21:91:ce:85:6f:25:a8:88:29:34:48:36:87:37:8a:3a:
         6d:b1:9c:c8:d6:b7:da:69:f1:c5:6b:34:eb:a6:26:cb:ef:fc:
         c3:37:fb:33:22:02:e5:8d:23:8b:98:4a:d9:c0:29:2b:5a:24:
         0a:54:37:f9:e1:7e:ee:1b:10:25:9a:5c:fd:34:7b:27:c4:6f:
         9c:20:fd:73:ac:55:7b:75:86:7f:68:10:b2:04:30:13:6f:0f:
         af:1f:69:06:5c:de:9e:06:31:9c:a2:e0:b7:31:46:c1:22:eb:
         fa:f5:45:85:5e:ac:a0:1a:f2:a3:2c:b1:2f:8d:38:89:92:67:
         fc:e2:cb:a8:35:b9:b3:80:ce:67:f6:95:d5:7d:c1:67:0f:a6:
         57:3c:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:23 2025 by rpki-client