Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          Q28lU4f30ub5ohreBQiunmMz1Rly55a3BtdMnX6SrXo=
Subject key identifier:   0C:06:2A:3B:F5:8B:A8:90:4B:4B:98:49:37:BF:69:F1:AB:1F:68:1E
Certificate issuer:       /CN=C12CA30082FA43FC79525F6B312CCF4D05E1AE0E
Certificate serial:       3A48E1673E14B47E99817C920070C8771DFE593C
Authority key identifier: C1:2C:A3:00:82:FA:43:FC:79:52:5F:6B:31:2C:CF:4D:05:E1:AE:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:34:01 +0000
ROA not before:           Tue 04 Feb 2025 18:29:01 +0000
ROA not after:            Tue 03 Feb 2026 18:34:01 +0000
asID:                     13489
IP address blocks:        2801:1a:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:48:e1:67:3e:14:b4:7e:99:81:7c:92:00:70:c8:77:1d:fe:59:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12CA30082FA43FC79525F6B312CCF4D05E1AE0E
        Validity
            Not Before: Feb  4 18:29:01 2025 GMT
            Not After : Feb  3 18:34:01 2026 GMT
        Subject: CN=0C062A3BF58BA8904B4B984937BF69F1AB1F681E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:12:dc:c0:31:9b:30:fc:e6:a5:02:44:b1:
                    7e:bb:09:88:d5:be:c8:43:db:b4:79:5e:2a:c1:20:
                    52:ca:9b:5f:a6:96:05:ad:f5:17:ed:8e:ad:94:2c:
                    a5:6c:2b:99:54:ed:3f:f4:67:66:8d:f4:40:0d:17:
                    ba:c6:9d:f9:fd:e0:c9:54:27:3b:dc:c5:b2:8b:4d:
                    5b:1f:86:2a:f5:e2:f1:d4:dd:3e:f0:fa:5d:7d:5d:
                    5f:1d:67:c2:27:db:d0:1b:83:7d:ca:ea:fa:4f:0b:
                    af:e2:50:33:3d:95:2c:1d:88:ce:96:79:fa:e3:48:
                    64:f3:6a:34:75:2c:ba:11:a8:54:d1:24:a1:86:a8:
                    34:fe:d0:3f:f9:2c:bb:14:16:fd:ef:e6:cf:71:6e:
                    08:7c:ba:b8:ec:6a:f1:5f:27:76:4e:42:dc:20:1a:
                    35:bd:b6:9f:05:0b:3c:08:c3:4c:d8:be:1b:73:7e:
                    72:6c:f0:6b:35:10:19:a2:4c:56:80:6e:aa:95:4e:
                    c0:13:2d:f5:a7:a8:4c:e5:0a:d3:27:23:8d:da:d5:
                    02:c4:0f:a5:40:1e:50:de:db:15:cd:4d:5d:3d:b4:
                    34:64:74:42:8f:2b:39:b4:d1:06:fe:ff:b2:49:c0:
                    18:2e:5e:c5:56:01:30:2c:b4:fc:36:de:e1:44:09:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:06:2A:3B:F5:8B:A8:90:4B:4B:98:49:37:BF:69:F1:AB:1F:68:1E
            X509v3 Authority Key Identifier:
                keyid:C1:2C:A3:00:82:FA:43:FC:79:52:5F:6B:31:2C:CF:4D:05:E1:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:9d:86:a4:54:c3:cf:74:4e:7d:0a:ab:c9:f1:cf:e6:5a:
         d1:a9:be:17:21:21:54:94:4d:d9:2e:a9:14:25:08:82:4e:80:
         47:86:fb:5e:9b:ea:f7:1e:6f:be:68:4c:ac:7d:2b:3e:c0:93:
         ff:7b:f1:ce:59:bb:33:ba:bc:2a:02:01:76:89:d2:9e:4a:16:
         ef:2a:06:4a:96:01:b7:e3:f9:95:32:27:63:bd:ac:62:8e:06:
         a5:76:9c:fa:c1:b3:e6:d8:34:2e:eb:a3:ad:17:6a:a1:5f:88:
         59:80:c5:5b:cc:16:2c:a5:5a:76:2b:a9:0e:1f:4c:94:d4:59:
         8d:ee:29:1e:f7:5a:d2:45:c0:67:04:bf:d9:e7:67:dd:fc:60:
         aa:0d:64:f2:9b:cc:48:ee:f8:d9:75:d5:dc:7f:de:ea:2f:d1:
         c7:79:cd:72:eb:bc:ce:77:0c:59:6a:f0:ca:20:e2:f4:c2:bc:
         52:1e:a4:89:20:e0:b5:88:b8:0b:88:1c:13:82:8c:e5:56:07:
         a0:28:6c:af:74:10:b4:c5:73:21:83:79:5d:45:3c:59:a6:c9:
         49:d9:02:6c:15:13:08:e5:7d:a7:e5:b7:54:4f:5b:9c:9d:8b:
         21:c0:df:11:23:b9:fd:96:17:ec:dc:f6:12:e1:2c:2a:d1:82:
         7f:23:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:40 2025 by rpki-client