Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/323830313a3161313a3a2f34342d3438203d3e20323732303231.roa
File:                     323830313a3161313a3a2f34342d3438203d3e20323732303231.roa (raw, json)
Hash identifier:          AC4AqqXXpZOHiCX4Y7k+MOELf9i3cSOKFCCwUFG/7gc=
Subject key identifier:   88:0F:2A:A1:94:E3:22:9F:AC:60:38:80:41:6D:03:81:38:51:DB:8B
Certificate issuer:       /CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
Certificate serial:       50E206366FDBD8793264E38AF5F86E4C711FB5D8
Authority key identifier: 15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/323830313a3161313a3a2f34342d3438203d3e20323732303231.roa
Signing time:             Tue 04 Feb 2025 18:27:31 +0000
ROA not before:           Tue 04 Feb 2025 18:22:31 +0000
ROA not after:            Tue 03 Feb 2026 18:27:31 +0000
asID:                     272021
IP address blocks:        2801:1a1::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e2:06:36:6f:db:d8:79:32:64:e3:8a:f5:f8:6e:4c:71:1f:b5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
        Validity
            Not Before: Feb  4 18:22:31 2025 GMT
            Not After : Feb  3 18:27:31 2026 GMT
        Subject: CN=880F2AA194E3229FAC603880416D03813851DB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:79:27:64:10:1a:9b:c3:05:84:ca:dd:01:
                    1b:c1:e6:ca:f7:09:79:ad:41:41:3c:7e:11:e6:96:
                    a2:32:74:e6:31:8d:1d:d8:ad:dd:2c:71:da:89:1b:
                    73:09:69:25:cf:1e:b5:94:43:88:26:15:c0:d8:19:
                    f7:14:91:b6:ea:35:9c:6d:9a:9e:a6:04:f8:eb:dc:
                    71:3d:67:ac:10:ce:02:3f:b0:0c:80:95:08:4f:7b:
                    53:8c:17:51:12:35:ae:69:a6:18:ed:e5:79:74:86:
                    98:21:67:9a:af:65:1f:eb:0e:11:4f:df:e8:85:25:
                    c3:71:8e:96:fc:aa:18:ae:ea:4e:f2:f3:7f:bf:0b:
                    d4:b8:e1:f0:d0:f9:f0:36:78:31:73:2a:4d:a5:19:
                    d2:72:56:86:89:a2:c8:44:0f:f4:a0:48:b3:eb:03:
                    87:4d:49:dc:e2:83:ab:10:a3:bc:14:cd:af:8b:33:
                    b6:22:83:42:c9:42:34:e9:a8:99:17:b8:7d:fb:d0:
                    98:08:1d:b0:ab:fb:1a:b5:86:79:30:d5:f8:52:ba:
                    56:61:33:78:8d:c9:3e:4f:82:e8:a1:bd:24:c6:9e:
                    78:8d:94:4e:ed:5f:ec:0f:ca:1a:cd:79:77:b8:d2:
                    1b:53:8d:6d:9e:96:bb:a8:1a:ac:2a:83:fa:b6:82:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0F:2A:A1:94:E3:22:9F:AC:60:38:80:41:6D:03:81:38:51:DB:8B
            X509v3 Authority Key Identifier:
                keyid:15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/323830313a3161313a3a2f34342d3438203d3e20323732303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a1::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:c6:10:ef:08:59:e8:cb:22:b3:49:b9:c1:b0:84:19:84:a5:
         71:66:de:46:01:ea:37:3e:17:a4:71:ad:29:00:f5:2f:8b:0d:
         aa:aa:7b:3f:9d:f7:61:5c:6f:3e:42:78:21:be:41:d7:77:a3:
         a4:e4:24:b7:84:9e:80:8b:32:5c:c1:7f:11:2e:b3:9d:59:ac:
         ac:8b:9b:32:cd:83:96:5d:e7:a3:bb:37:d2:11:35:8b:18:fd:
         15:03:1f:15:75:50:14:09:95:f2:6d:8b:4f:9c:0d:1b:02:be:
         2c:fe:2e:c3:0e:47:3a:7d:81:ca:33:eb:31:0f:51:fc:e8:47:
         13:1c:91:fa:76:9f:fe:6d:18:44:b7:b6:0d:00:c2:9a:94:ae:
         ca:54:f6:b1:5b:6f:9b:eb:a9:4c:ee:3a:53:cf:55:df:a5:76:
         bb:c4:73:dd:d4:f8:b0:c2:36:2b:26:0a:f4:06:e4:34:bc:d5:
         38:ea:19:6c:72:ac:86:90:65:13:df:6c:b5:e3:66:03:01:e0:
         db:c9:3d:ac:4c:8f:18:c5:c7:18:2d:19:f8:a3:c8:a9:fd:fa:
         3b:5b:a5:51:55:dd:90:ca:13:12:31:ef:dd:f2:a4:26:fa:6e:
         27:cf:11:23:a2:96:15:fa:32:25:dc:c4:fb:20:c4:5c:75:60:
         50:0d:ed:c3
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUOIGNm/b2HkyZOOK9fhuTHEftdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVBRUZCNDdEREIwNzc1NTFCMkJDNkYyMjZBMDUxODU1
RTBBMEY2RDAeFw0yNTAyMDQxODIyMzFaFw0yNjAyMDMxODI3MzFaMDMxMTAvBgNV
BAMTKDg4MEYyQUExOTRFMzIyOUZBQzYwMzg4MDQxNkQwMzgxMzg1MURCOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhXknZBAam8MFhMrdARvB5sr3
CXmtQUE8fhHmlqIydOYxjR3Yrd0scdqJG3MJaSXPHrWUQ4gmFcDYGfcUkbbqNZxt
mp6mBPjr3HE9Z6wQzgI/sAyAlQhPe1OMF1ESNa5pphjt5Xl0hpghZ5qvZR/rDhFP
3+iFJcNxjpb8qhiu6k7y83+/C9S44fDQ+fA2eDFzKk2lGdJyVoaJoshED/SgSLPr
A4dNSdzig6sQo7wUza+LM7Yig0LJQjTpqJkXuH370JgIHbCr+xq1hnkw1fhSulZh
M3iNyT5PguihvSTGnniNlE7tX+wPyhrNeXe40htTjW2elruoGqwqg/q2gjytAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUiA8qoZTjIp+sYDiAQW0DgThR24swHwYDVR0j
BBgwFoAUFa77R92wd1UbK8byJqBRhV4KD20wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84ODc4RENGQ0ZDMzMyNjBDMEJEOEEyQTY4M0Y5RjY3Njky
RTIxRkQ0Rjc0NDY1MkRGRDZCQUI2NTFCRDJFNzgyLzAvMTVBRUZCNDdEREIwNzc1
NTFCMkJDNkYyMjZBMDUxODU1RTBBMEY2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNUFFRkI0N0REQjA3NzU1MUIy
QkM2RjIyNkEwNTE4NTVFMEEwRjZELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODg3OERDRkNGQzMzMjYwQzBCRDhBMkE2ODNGOUY2NzY5MkUyMUZENEY3
NDQ2NTJERkQ2QkFCNjUxQkQyRTc4Mi8wLzMyMzgzMDMxM2EzMTYxMzEzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMjM3MzIzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQGhAAAw
DQYJKoZIhvcNAQELBQADggEBAAvGEO8IWejLIrNJucGwhBmEpXFm3kYB6jc+F6Rx
rSkA9S+LDaqqez+d92Fcbz5CeCG+Qdd3o6TkJLeEnoCLMlzBfxEus51ZrKyLmzLN
g5Zd56O7N9IRNYsY/RUDHxV1UBQJlfJti0+cDRsCviz+LsMORzp9gcoz6zEPUfzo
RxMckfp2n/5tGES3tg0AwpqUrspU9rFbb5vrqUzuOlPPVd+ldrvEc93U+LDCNism
CvQG5DS81TjqGWxyrIaQZRPfbLXjZgMB4NvJPaxMjxjFxxgtGfijyKn9+jtbpVFV
3ZDKExIx793ypCb6bifPESOilhX6MiXcxPsgxFx1YFAN7cM=
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:44:30 2025 by rpki-client