Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          Sw2+1sZAq4vKdPeBz3McOhklGiUVtnCw9e1FTPrb1hE=
Subject key identifier:   B7:29:26:BC:AA:F1:B0:F4:76:83:E9:07:8C:3C:39:E0:8B:DA:53:EA
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       7B4BF9F0F54438898B15946165DC288B84F90AEC
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 18:55:49 +0000
ROA not before:           Tue 04 Feb 2025 18:50:49 +0000
ROA not after:            Tue 03 Feb 2026 18:55:49 +0000
asID:                     273041
IP address blocks:        2801:1a5:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4b:f9:f0:f5:44:38:89:8b:15:94:61:65:dc:28:8b:84:f9:0a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Feb  4 18:50:49 2025 GMT
            Not After : Feb  3 18:55:49 2026 GMT
        Subject: CN=B72926BCAAF1B0F47683E9078C3C39E08BDA53EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:76:32:06:1b:05:46:40:1d:e5:07:79:ce:
                    46:76:e6:96:89:5c:86:73:26:97:de:cf:7f:8f:79:
                    49:37:7f:cf:fd:e0:00:7d:17:19:ff:d1:09:12:4d:
                    18:10:dc:54:47:1c:8c:9c:0e:8d:d4:18:da:e3:98:
                    da:63:b6:f7:c9:54:c7:18:6d:15:2a:24:d7:db:9a:
                    e4:1b:41:fe:dc:6c:01:dc:e5:40:02:89:0a:68:8b:
                    02:8a:b3:ef:28:79:24:6f:98:c4:5e:cd:b3:85:be:
                    ad:4a:87:2e:89:f3:69:a4:be:cd:73:98:56:6e:72:
                    33:b9:37:bd:db:92:54:42:a2:23:f7:5f:cf:ea:51:
                    ba:6f:c8:45:0c:21:b5:fc:1d:c4:93:cb:d8:47:ce:
                    1b:30:78:ea:0a:4b:ab:b4:c0:07:70:21:f6:3c:0d:
                    38:7f:ad:6a:57:6a:f2:f0:7f:63:55:6d:a0:16:90:
                    6a:0b:7b:1c:c0:30:35:9b:0b:6f:19:51:f9:b9:43:
                    43:61:a9:f7:dc:11:2b:6d:06:dd:92:0b:6e:75:62:
                    20:6a:28:80:51:08:00:9f:65:90:23:bd:18:ba:7d:
                    e2:02:97:8c:55:31:14:a8:22:67:8b:d1:70:78:4b:
                    f2:c9:ba:ca:4d:b5:3a:d9:a8:be:27:63:66:60:99:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:29:26:BC:AA:F1:B0:F4:76:83:E9:07:8C:3C:39:E0:8B:DA:53:EA
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:d2:99:f7:ca:8b:3d:fc:45:80:38:72:23:b8:ad:54:48:
         c0:f2:9a:26:a7:81:67:62:53:6e:51:d8:94:45:5d:b0:ce:2b:
         e3:0f:bd:c6:79:a1:18:75:6a:ea:36:fc:bc:53:54:a5:6d:67:
         7a:dd:3f:69:6e:86:db:2c:82:7c:fd:f8:d7:2b:5b:4a:31:c5:
         35:ca:07:eb:20:56:e4:63:53:84:0d:8f:85:24:36:a8:28:83:
         f9:51:99:7f:b5:a4:19:a9:fd:63:1d:de:e0:68:ed:02:7f:62:
         6e:6d:b4:7b:2a:c4:96:27:12:11:18:0b:34:39:a3:fa:27:35:
         f6:e9:00:08:df:ef:40:5f:05:27:9d:de:7d:a1:f7:52:9d:1c:
         44:c5:c1:1b:ab:f1:1d:c1:cd:53:d4:e9:10:3c:b5:ec:28:a2:
         b1:69:77:ac:f5:1c:4a:12:8f:bc:bc:d6:7f:c8:26:26:36:2a:
         bb:e0:5b:12:a1:85:12:4b:91:36:0d:96:ab:78:10:34:6a:28:
         e7:44:19:e6:b2:72:49:19:9f:55:70:21:f6:af:74:e4:3c:64:
         ed:3f:c4:ec:29:8c:04:5f:92:0e:c6:98:c4:4c:f2:2c:ff:56:
         fd:53:8f:a5:97:dc:a6:20:b8:0f:d4:d3:88:da:59:85:e4:12:
         78:21:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:49 2025 by rpki-client