Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          uWKm2+V1W//TLnW+P7b+DFEqFl30zJFV7y798u0FLrE=
Subject key identifier:   FE:3E:B5:E9:3C:0D:ED:22:D3:F2:11:FD:44:98:47:0E:5B:57:74:CC
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       59484F32F24A637758442BAA03086F53FB8D26C4
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 18:55:47 +0000
ROA not before:           Tue 04 Feb 2025 18:50:47 +0000
ROA not after:            Tue 03 Feb 2026 18:55:47 +0000
asID:                     273041
IP address blocks:        2801:1a5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:48:4f:32:f2:4a:63:77:58:44:2b:aa:03:08:6f:53:fb:8d:26:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Feb  4 18:50:47 2025 GMT
            Not After : Feb  3 18:55:47 2026 GMT
        Subject: CN=FE3EB5E93C0DED22D3F211FD4498470E5B5774CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:c1:9c:2f:c3:3a:c6:08:0c:fa:bf:14:98:
                    98:4e:17:40:5a:c2:eb:38:e2:b6:50:8d:ca:0d:c8:
                    32:da:4a:2b:32:b0:1b:e8:af:5d:f8:61:59:90:e6:
                    4a:23:44:c8:50:d0:c0:34:71:d4:e7:a8:5b:6b:66:
                    a0:78:ed:32:d2:8c:ee:ae:bc:94:76:5f:75:f9:3b:
                    7f:05:d6:fd:cb:41:c0:6b:60:72:e7:74:1e:0a:ac:
                    50:74:ed:ae:e0:64:f6:48:45:0a:ae:11:f6:12:19:
                    77:5d:dc:95:fe:fb:ca:d1:36:93:aa:d3:d8:a8:f2:
                    14:bf:61:49:a3:cd:4a:49:13:2f:4d:cf:95:ce:79:
                    7a:63:7f:78:48:2f:7c:88:e4:f1:50:28:60:53:b2:
                    19:f1:7d:d7:88:ee:eb:d5:e6:ae:f9:95:cf:e6:f1:
                    43:9c:b8:f6:14:10:c4:05:05:db:c5:c0:dc:6a:d8:
                    79:b0:cb:b7:da:f2:74:d4:1e:5a:8f:a0:29:21:5e:
                    c9:d1:c4:1b:73:09:ee:57:93:ed:84:af:53:31:ea:
                    63:bb:24:db:5b:43:92:3b:1b:b3:3f:20:2b:1c:86:
                    f1:61:43:ee:b5:53:44:64:72:a0:57:48:f9:ee:57:
                    c1:3b:56:e4:69:60:e4:31:be:1d:6b:e0:9b:e7:16:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:B5:E9:3C:0D:ED:22:D3:F2:11:FD:44:98:47:0E:5B:57:74:CC
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:55:32:51:4a:30:1e:e6:25:fd:84:c9:30:4b:f7:6e:94:c6:
         39:68:9e:5c:24:bb:3b:f8:11:03:61:3e:8c:d0:34:a4:fc:56:
         95:15:70:c0:75:1a:de:8b:d1:f1:fa:67:89:7e:20:8c:ed:fb:
         a9:0f:cf:99:cb:b2:18:3b:1f:a7:dc:23:8a:6c:40:58:c1:a6:
         98:3a:1d:ca:6a:5b:cd:ad:cb:72:05:57:ef:aa:ba:c4:a3:3b:
         2e:f7:7a:bf:fc:c7:6a:de:81:74:81:bb:ef:66:7d:bb:2c:f6:
         04:c3:41:a6:cf:8a:c4:9f:9a:ad:cc:de:c4:66:ad:f6:66:a1:
         76:22:66:c1:d6:b0:44:a4:4a:f4:27:93:90:a1:f1:2e:9e:04:
         20:f2:4f:8a:3b:1a:8a:38:52:63:6b:89:e0:31:99:49:8d:bc:
         63:cc:c4:48:e1:cc:3f:7b:35:ed:f1:15:3d:52:dc:57:a3:4a:
         95:1a:af:2f:f3:07:f3:a6:9e:d4:f0:1a:e7:a8:b5:4f:a8:d0:
         6c:f2:f3:0b:e7:07:a0:d0:a2:5e:91:fc:86:db:5c:11:3f:be:
         ab:18:f8:17:aa:ea:c9:ad:4e:27:f7:69:f3:36:6c:94:1e:82:
         20:23:c7:df:a8:73:6f:2a:9e:ee:f4:87:95:65:b8:f1:8b:e3:
         cf:00:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:14 2025 by rpki-client