Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa
File:                     323830313a3138363a3a2f34342d3434203d3e203237393531.roa (raw, json)
Hash identifier:          EcdZfM2lAaCqwri6N0HtqY+16bAcRgEe3By5y1oUMD8=
Subject key identifier:   C0:13:6D:89:F7:5B:15:F9:91:F0:7C:E8:64:0A:94:BF:F0:3E:A2:58
Certificate issuer:       /CN=D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466
Certificate serial:       2E4BCF76C91A294AEFFF7C00A6628C8DA79E5D9E
Authority key identifier: D0:9A:0E:1E:A6:05:B7:A8:EA:80:B5:B3:9D:56:BD:8E:02:A0:A4:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:26:20 +0000
ROA not before:           Tue 04 Feb 2025 18:21:20 +0000
ROA not after:            Tue 03 Feb 2026 18:26:20 +0000
asID:                     27951
IP address blocks:        2801:186::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4b:cf:76:c9:1a:29:4a:ef:ff:7c:00:a6:62:8c:8d:a7:9e:5d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466
        Validity
            Not Before: Feb  4 18:21:20 2025 GMT
            Not After : Feb  3 18:26:20 2026 GMT
        Subject: CN=C0136D89F75B15F991F07CE8640A94BFF03EA258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:c9:f8:49:7d:f4:19:85:f8:41:0c:f5:14:
                    2c:d4:28:86:ba:56:ef:be:71:ce:05:a1:5b:d0:f8:
                    71:9d:d7:ed:2b:cb:06:82:b0:0b:22:39:83:54:84:
                    d4:fa:f4:af:20:1e:cd:c8:e5:ea:ec:e1:12:93:a6:
                    db:8f:db:ab:6e:77:41:87:58:4a:5e:e2:54:60:5e:
                    43:2e:da:a8:87:f8:2f:0f:e9:97:9a:6d:14:b5:f3:
                    6e:6f:24:22:33:89:db:87:64:f7:15:43:95:30:db:
                    69:1c:19:5f:fa:e9:de:90:39:85:46:77:62:1c:95:
                    e9:b5:65:7c:66:92:88:05:e3:00:40:40:85:c6:83:
                    d3:2f:2f:4a:c9:43:13:9e:6f:a7:20:6c:55:f8:bb:
                    15:e1:0c:d4:74:42:26:b0:21:e6:55:2f:28:12:93:
                    fb:ea:80:96:d5:a9:4a:45:b3:05:bf:29:cc:ad:e9:
                    41:4a:e5:5d:2d:fe:a9:fe:f9:ad:77:57:59:7d:42:
                    bd:89:2e:b7:26:83:8e:a3:97:78:1a:c7:0e:de:ad:
                    ba:14:c5:2c:5f:a3:c6:b0:61:cb:08:ba:58:b3:68:
                    f8:d6:d7:53:bf:d6:fa:5d:d1:b5:0b:45:5f:83:92:
                    f2:26:ab:d6:1f:55:5d:12:e1:ff:42:83:33:89:06:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:6D:89:F7:5B:15:F9:91:F0:7C:E8:64:0A:94:BF:F0:3E:A2:58
            X509v3 Authority Key Identifier:
                keyid:D0:9A:0E:1E:A6:05:B7:A8:EA:80:B5:B3:9D:56:BD:8E:02:A0:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:186::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:2d:0f:63:1b:a7:29:4b:01:0f:8e:9c:80:f5:ae:5d:8e:73:
         5e:d6:05:b3:9c:36:ff:16:db:8d:13:38:fc:83:eb:05:84:7f:
         b8:e7:0a:e1:01:b6:60:27:36:68:aa:7f:90:9e:4b:ae:3f:d9:
         4c:46:b4:78:d2:65:1f:1b:d9:65:3b:e3:75:73:d0:1c:4a:ba:
         3b:78:3d:e2:19:ed:81:6e:f8:3b:84:8e:9e:73:2b:3e:ff:ef:
         f8:c9:5b:0e:20:81:46:91:94:74:7b:17:79:f3:54:95:7c:13:
         6e:ae:ed:1a:77:40:3c:09:7f:26:7e:2a:e9:89:91:df:f1:c7:
         a7:57:a4:2a:44:eb:0a:85:26:56:0f:ad:be:f8:ef:39:16:a7:
         42:c0:c6:54:8b:b4:6f:e8:75:ae:2e:41:79:2e:4e:82:8c:d9:
         b2:f8:6e:a5:61:30:ef:2c:34:4b:a6:d5:94:e1:b9:56:45:24:
         a0:2a:6c:e9:da:f0:54:66:f2:cf:78:b3:e0:b6:30:7d:50:d4:
         89:e3:b7:72:11:eb:34:cd:d7:36:1b:9e:81:43:8a:d0:9f:a6:
         f5:37:02:9d:8b:e3:d0:ea:73:a4:55:55:0b:45:df:d2:9b:99:
         c2:73:1d:0e:cc:33:aa:1c:b6:83:74:ed:95:a6:6a:91:8b:3e:
         7d:e0:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:44:57 2025 by rpki-client