Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/323830313a31303a643030303a3a2f34382d3438203d3e20323634383334.roa
File:                     323830313a31303a643030303a3a2f34382d3438203d3e20323634383334.roa (raw, json)
Hash identifier:          Kgy7kVFrdwzWaxroPcFl/ZNpQ6TQMbQjSEmT39avXYA=
Subject key identifier:   FA:3F:96:19:E0:70:D9:72:FC:43:61:08:F7:5E:C0:A6:77:C1:63:7A
Certificate issuer:       /CN=EC26663ACAE29445E5B6D7E1004A10C38B71FA71
Certificate serial:       769876C26C6FCE0CE22CD914C35C767A36709959
Authority key identifier: EC:26:66:3A:CA:E2:94:45:E5:B6:D7:E1:00:4A:10:C3:8B:71:FA:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/323830313a31303a643030303a3a2f34382d3438203d3e20323634383334.roa
Signing time:             Tue 04 Feb 2025 18:16:36 +0000
ROA not before:           Tue 04 Feb 2025 18:11:36 +0000
ROA not after:            Tue 03 Feb 2026 18:16:36 +0000
asID:                     264834
IP address blocks:        2801:10:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:98:76:c2:6c:6f:ce:0c:e2:2c:d9:14:c3:5c:76:7a:36:70:99:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC26663ACAE29445E5B6D7E1004A10C38B71FA71
        Validity
            Not Before: Feb  4 18:11:36 2025 GMT
            Not After : Feb  3 18:16:36 2026 GMT
        Subject: CN=FA3F9619E070D972FC436108F75EC0A677C1637A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:2a:0e:f5:44:7e:66:4d:e9:7d:29:31:4f:
                    5a:29:16:f4:47:e3:f7:db:67:e9:74:a5:cf:b6:e4:
                    b9:55:fd:b3:bc:54:6d:84:df:3a:37:15:57:fc:3b:
                    74:49:1f:73:8f:3c:ec:d1:b5:cd:4e:52:2d:c0:38:
                    5d:ca:c8:d0:d0:0b:ca:f4:a3:d5:25:ca:83:d7:f6:
                    99:90:48:7b:be:e4:f6:e0:ee:cf:ed:c4:1d:3b:43:
                    ab:40:b5:5d:f3:6a:ae:8d:90:4e:ad:b6:71:36:f1:
                    34:99:a3:4a:4e:37:b7:4b:26:60:5b:03:f5:31:77:
                    80:e0:b6:89:d5:1a:2e:37:cb:95:c7:6e:60:5a:3f:
                    aa:84:81:62:cb:9e:35:d6:71:53:06:df:a0:7e:c1:
                    f9:6c:d4:18:08:64:20:5f:7d:a9:0f:e4:4d:25:c4:
                    c8:cd:4e:ca:ce:5f:3c:9f:7c:24:e0:28:72:57:c5:
                    51:9b:64:08:62:86:19:3d:6d:ad:da:91:ba:39:29:
                    fd:86:10:61:93:67:54:9d:cc:f5:a6:13:36:2d:65:
                    63:20:c9:8b:43:52:36:cb:be:19:f9:ac:43:3e:24:
                    b9:ad:3a:29:12:b3:90:c8:c1:30:5e:f8:07:64:8e:
                    09:c0:07:32:c2:d3:bb:4a:d4:bd:50:82:9d:43:95:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3F:96:19:E0:70:D9:72:FC:43:61:08:F7:5E:C0:A6:77:C1:63:7A
            X509v3 Authority Key Identifier:
                keyid:EC:26:66:3A:CA:E2:94:45:E5:B6:D7:E1:00:4A:10:C3:8B:71:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/323830313a31303a643030303a3a2f34382d3438203d3e20323634383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:be:20:93:6d:b6:54:9a:2f:0a:fb:15:21:70:b9:17:7f:
         3a:e0:a7:12:cc:93:76:31:eb:80:57:59:e3:ba:60:e0:b6:a5:
         e7:c5:6f:f5:f7:6b:38:a1:dd:0a:85:d5:c1:91:0a:6a:7f:3b:
         08:1f:65:ae:80:5e:00:22:8a:96:7c:12:86:98:95:29:bd:98:
         6e:89:0c:58:7d:2d:2b:10:40:33:d2:0f:10:88:85:a5:3c:cd:
         ea:5a:c5:ab:26:6a:f6:0b:91:8d:6a:58:9d:f3:80:ae:04:c0:
         63:ff:d9:08:9d:be:34:2b:89:f5:d5:ce:fe:98:39:ad:a6:11:
         c2:ac:88:45:86:57:41:17:b6:80:ad:22:6e:30:06:25:0b:ca:
         50:0c:31:a9:24:27:f7:93:a5:cf:b2:ae:8b:00:31:ac:38:02:
         7f:a2:6b:76:56:a4:90:54:89:ee:31:99:13:48:fc:e7:f1:5b:
         e9:8a:c4:73:4c:7c:be:34:78:22:ca:5d:54:d5:97:52:d2:5b:
         41:15:e2:98:17:e7:19:9d:67:6c:9a:d0:7b:af:86:70:cd:55:
         e0:57:df:c8:69:5a:1d:99:e7:b3:b6:2c:10:69:59:4b:78:5a:
         92:50:7d:22:b6:7f:83:e8:e1:57:28:e0:22:92:30:bd:55:2b:
         40:5c:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:32:23 2025 by rpki-client