Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/323830313a31623a393030303a3a2f34382d3438203d3e20313938393439.roa
File:                     323830313a31623a393030303a3a2f34382d3438203d3e20313938393439.roa (raw, json)
Hash identifier:          DIX6fLm0zeISFLE6VJXLmaMkajYDGAZ71FMCoPJU9r4=
Subject key identifier:   78:20:8B:3E:FB:CF:AC:66:2E:B3:96:AE:84:78:29:10:99:AB:06:D3
Certificate issuer:       /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial:       62C86D6FE61A3CCCE53173B7FAE7526E13132499
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/323830313a31623a393030303a3a2f34382d3438203d3e20313938393439.roa
Signing time:             Tue 25 Mar 2025 18:40:01 +0000
ROA not before:           Tue 25 Mar 2025 18:35:01 +0000
ROA not after:            Tue 24 Mar 2026 18:40:01 +0000
asID:                     198949
IP address blocks:        2801:1b:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c8:6d:6f:e6:1a:3c:cc:e5:31:73:b7:fa:e7:52:6e:13:13:24:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
        Validity
            Not Before: Mar 25 18:35:01 2025 GMT
            Not After : Mar 24 18:40:01 2026 GMT
        Subject: CN=78208B3EFBCFAC662EB396AE8478291099AB06D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:31:dd:01:a2:d2:28:0a:6b:ec:cd:53:e2:
                    b8:ce:7c:81:54:70:11:1a:0a:d6:81:3f:29:68:15:
                    ba:0d:4f:5f:e6:2a:6e:5f:77:e9:80:02:11:67:0e:
                    db:2d:3a:61:bb:cd:c5:5a:10:a3:37:0e:ac:03:c6:
                    fe:96:7f:ef:8c:96:bb:b3:a0:21:1a:d9:31:05:8e:
                    48:9d:50:6a:bf:de:c3:be:ff:20:47:c9:a1:96:7a:
                    92:95:19:bd:ab:77:9b:07:13:a3:f4:88:2d:e3:6b:
                    8a:5f:53:8c:70:50:08:f0:88:93:94:0f:3f:de:dd:
                    4f:cf:52:41:9f:3a:f6:33:53:1d:5c:9c:c4:6b:ce:
                    37:cd:1d:df:11:4f:e6:83:3b:53:2e:27:bf:d8:68:
                    4c:60:76:c0:ee:98:9b:3a:01:5f:db:d9:36:ee:99:
                    23:f7:23:32:e5:96:42:40:a2:5b:68:89:f1:83:e9:
                    71:62:05:64:7e:fd:16:11:05:b6:33:fd:08:9a:ce:
                    4f:c0:c7:0d:94:7c:12:69:be:66:08:df:e5:4d:bd:
                    4f:2f:ed:ec:b5:a3:88:d3:c5:b7:91:9f:d8:81:29:
                    40:bd:62:39:27:5c:e8:86:c8:83:d1:9f:b3:65:f8:
                    51:ff:a9:5a:e5:e0:c7:f9:dd:bb:02:1c:f8:c9:72:
                    37:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:20:8B:3E:FB:CF:AC:66:2E:B3:96:AE:84:78:29:10:99:AB:06:D3
            X509v3 Authority Key Identifier:
                keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/323830313a31623a393030303a3a2f34382d3438203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:23:18:3c:4c:c3:65:d4:f7:e6:1c:f8:a3:3d:2f:01:c0:
         af:00:a7:27:36:5c:2b:f7:91:02:be:8a:28:85:7b:aa:cc:be:
         15:bf:39:ad:ee:48:b3:c3:2b:e8:c6:6e:6a:a0:bb:ef:a4:c4:
         82:1c:58:b6:24:f7:e1:24:49:87:43:2c:86:55:4e:a2:18:75:
         2e:53:2c:5b:b9:47:2c:ae:a7:98:7a:37:5d:42:92:f4:42:fb:
         ae:b0:47:7a:46:e3:cb:04:59:6b:4a:3c:2c:c9:7a:31:8d:c2:
         e2:32:06:82:c9:14:08:f7:5c:bf:29:d3:f0:9e:1b:ce:d1:e3:
         ef:68:d8:70:7e:36:3e:99:34:dd:95:dc:86:2e:93:6a:a8:1c:
         be:9f:5d:75:a5:a9:4c:19:ba:78:f0:4a:cb:aa:7a:b0:f3:6d:
         c1:1e:22:7d:fe:b8:78:97:84:1a:02:dd:9a:eb:21:37:92:9a:
         e0:a2:4e:3a:3c:cf:75:3c:3f:ba:d0:4d:32:30:ee:b5:ec:5b:
         e4:0b:f0:83:09:0a:95:d6:e2:fa:cb:df:e2:8d:c8:73:b4:22:
         3d:27:77:00:47:a8:83:58:0c:3e:40:d2:db:3d:2b:49:da:07:
         bf:00:df:b4:4b:5d:ed:00:e0:74:ab:62:82:f8:8d:7e:14:8c:
         7f:9c:73:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:21 2025 by rpki-client