Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/323830313a31303a353830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31303a353830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          NepkRGZpKRFGiGQVoSpAsWVzUVN6Qp81kOuiqhTbHHg=
Subject key identifier:   8A:D5:C7:FA:8D:47:EB:A5:81:84:81:25:03:E4:86:9C:17:A5:00:BE
Certificate issuer:       /CN=9FB011501E0E167D04273DED442BE972FA3836F0
Certificate serial:       7882BC215EB9D671F538A0E66E5A8DEFB086F6D8
Authority key identifier: 9F:B0:11:50:1E:0E:16:7D:04:27:3D:ED:44:2B:E9:72:FA:38:36:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/323830313a31303a353830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:21:51 +0000
ROA not before:           Tue 04 Feb 2025 18:16:51 +0000
ROA not after:            Tue 03 Feb 2026 18:21:51 +0000
asID:                     19429
IP address blocks:        2801:10:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:82:bc:21:5e:b9:d6:71:f5:38:a0:e6:6e:5a:8d:ef:b0:86:f6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB011501E0E167D04273DED442BE972FA3836F0
        Validity
            Not Before: Feb  4 18:16:51 2025 GMT
            Not After : Feb  3 18:21:51 2026 GMT
        Subject: CN=8AD5C7FA8D47EBA58184812503E4869C17A500BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:f4:5e:58:8b:c9:e7:fe:18:6f:b1:4d:e0:
                    47:23:61:ba:b4:ea:e0:2c:61:22:cd:fa:d2:42:1c:
                    0b:3c:93:49:94:43:6a:97:ec:00:67:f9:9d:65:ec:
                    f3:9a:d9:f2:71:68:5b:59:1a:40:d7:93:25:21:ba:
                    85:54:58:d7:ed:cf:7b:b4:ef:a0:aa:fd:6c:a7:5f:
                    25:d1:9d:db:75:b4:5c:be:88:ac:a4:6e:f5:fe:fc:
                    7a:6a:36:55:a1:d0:52:a6:60:d9:e8:ca:b7:cd:1e:
                    35:0b:c9:61:85:ab:42:f2:8a:6c:2e:53:25:68:03:
                    e1:c6:f0:a7:e6:8a:b6:2f:8c:96:61:37:be:d5:c9:
                    7a:ed:e6:58:5d:27:59:d1:8b:21:e9:35:c8:4b:50:
                    69:41:7c:1a:46:5b:f1:43:21:d5:36:f6:6f:5e:00:
                    80:ac:08:62:e6:b9:68:39:44:56:cd:d3:83:0d:80:
                    8d:1b:0f:06:23:96:67:32:f6:a1:7c:f5:f8:cb:bd:
                    28:47:b1:cd:4e:2f:a1:50:05:7a:21:1a:1f:c5:18:
                    79:4c:1b:35:0d:24:15:f5:9d:11:03:e2:79:07:00:
                    d2:89:f6:bd:04:ae:0b:2d:33:15:a8:4a:9d:5a:f9:
                    06:18:3c:7d:f6:63:fe:b3:62:04:3a:a7:29:e3:1f:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D5:C7:FA:8D:47:EB:A5:81:84:81:25:03:E4:86:9C:17:A5:00:BE
            X509v3 Authority Key Identifier:
                keyid:9F:B0:11:50:1E:0E:16:7D:04:27:3D:ED:44:2B:E9:72:FA:38:36:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/323830313a31303a353830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:6e:0a:a4:be:34:d4:4d:d9:b7:d7:de:b9:48:77:1d:cd:7d:
         31:0d:38:40:31:cb:c1:05:2b:4b:32:d7:63:4b:e5:3b:82:1a:
         62:4d:c6:43:82:58:9a:c3:e5:c8:67:1d:ee:51:c8:68:02:07:
         47:78:18:b3:97:d2:32:ed:e0:6f:45:84:56:bf:a1:a5:82:03:
         c2:98:46:bd:5a:25:17:1c:b8:73:b7:2d:c3:70:d0:06:90:3f:
         f8:ec:9c:7f:c5:55:7d:81:f9:0f:22:a9:be:20:b5:a4:92:7b:
         15:47:e2:d0:53:21:59:19:45:be:59:29:2a:0c:1f:da:a0:f9:
         9b:5c:da:78:21:87:e5:59:e7:00:bd:1b:fb:7f:e5:d3:ec:77:
         ee:36:71:12:a1:3e:9f:be:94:cf:90:86:bf:01:89:dd:ca:83:
         28:d0:b1:64:31:9f:3e:24:ff:b3:f7:00:e7:59:45:b2:3e:fd:
         02:20:d8:94:08:f0:73:6c:08:cf:49:7c:aa:e4:8f:25:55:c7:
         e7:76:9e:a6:de:1f:c0:f7:6e:e5:94:ea:02:12:02:7b:ca:44:
         19:b1:27:e4:5e:11:bc:2e:67:9e:fa:92:83:6f:86:0d:b2:ff:
         64:b2:8d:c3:65:e4:a9:30:f4:32:a2:dd:24:48:f0:88:22:4d:
         64:f7:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:10 2025 by rpki-client