Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa
File:                     323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa (raw, json)
Hash identifier:          N09RkeNrqOI6bacArMRUR/y1HyXat+Dq1F3hUmMYodk=
Subject key identifier:   5A:B5:84:B3:21:CB:8D:DA:D1:19:99:0F:68:5A:CE:78:6F:BF:49:7C
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       51081B03D2469DC6F08AE38FC58CA019CE508500
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa
Signing time:             Tue 04 Feb 2025 18:29:25 +0000
ROA not before:           Tue 04 Feb 2025 18:24:25 +0000
ROA not after:            Tue 03 Feb 2026 18:29:25 +0000
asID:                     61471
IP address blocks:        2801:11:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:08:1b:03:d2:46:9d:c6:f0:8a:e3:8f:c5:8c:a0:19:ce:50:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Feb  4 18:24:25 2025 GMT
            Not After : Feb  3 18:29:25 2026 GMT
        Subject: CN=5AB584B321CB8DDAD119990F685ACE786FBF497C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:ce:1c:d2:64:22:d6:d5:8d:2c:f4:7c:e2:
                    82:0c:9a:94:c2:ac:a1:83:a2:c8:7a:40:b7:9c:e5:
                    74:2b:77:33:d0:a4:fd:dc:12:a9:65:b5:b3:fb:74:
                    b2:8c:ec:fe:8b:b1:53:63:c8:7c:71:bd:0e:2c:39:
                    a8:91:af:b2:89:0a:7e:49:55:a6:27:5e:aa:b7:23:
                    b3:63:02:c6:45:81:cb:0d:11:8b:26:77:2a:d5:18:
                    bf:54:db:22:0a:65:bb:b6:e0:0e:e3:21:be:01:de:
                    6b:35:6e:a9:85:b5:38:6d:95:02:84:2d:15:8e:7f:
                    dd:5a:b6:1b:55:2a:9e:ab:05:2d:97:32:d2:b3:d8:
                    d5:a7:08:a5:70:bc:09:4e:03:2e:e2:78:87:e3:05:
                    e0:3d:09:9d:82:6b:9f:58:63:58:c4:8e:85:0f:e7:
                    e7:5d:52:b9:54:15:64:b2:41:4c:7e:a7:1b:d0:7d:
                    76:33:59:98:68:61:ea:ce:81:67:1f:37:9e:ac:c6:
                    98:b8:4c:34:95:1e:fd:4c:77:fe:87:0c:88:5f:01:
                    04:0c:ad:4e:f3:a4:e7:42:c7:62:9a:ae:bb:fa:2f:
                    af:94:a4:93:65:ce:8b:a2:1b:96:c8:16:0d:d2:a1:
                    5b:e0:1b:c9:d8:1c:35:3b:59:17:a6:08:35:11:e4:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B5:84:B3:21:CB:8D:DA:D1:19:99:0F:68:5A:CE:78:6F:BF:49:7C
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:b5:b8:fa:c4:53:7b:b5:6b:e2:c1:fc:b3:a5:37:1a:52:7e:
         c0:ae:3b:24:a2:c1:08:7e:c4:46:6d:a3:c9:8a:92:bb:c2:f6:
         b2:68:72:2d:d5:0f:81:e3:fe:4e:6e:77:c9:aa:3c:9e:9b:0d:
         c5:06:10:23:78:b5:08:fe:56:74:68:0e:19:1c:55:68:02:3d:
         39:88:39:49:09:5a:7c:b7:02:de:20:b7:9b:46:bf:05:05:00:
         33:f9:1c:94:29:ff:ee:81:d9:c3:56:6e:e8:e5:c7:ae:5c:db:
         19:7c:24:88:00:82:bd:48:7b:4b:df:a4:3d:42:18:e2:6c:82:
         d6:c8:97:71:0a:36:aa:31:26:20:d8:36:6f:64:0f:49:9b:be:
         99:95:d3:0d:b2:e0:68:cd:b9:8b:52:9d:ec:a4:ae:11:39:ae:
         3c:ed:f0:ba:0a:dd:e9:45:cc:43:3a:d7:93:13:06:61:92:f0:
         f1:8f:cd:29:ae:76:41:cf:1b:d7:32:12:2f:87:1b:48:d7:bb:
         20:62:0d:31:8d:e3:d5:e2:2b:b8:56:fe:94:6a:29:b0:4d:5c:
         65:17:53:1a:51:2b:bc:94:fa:d0:67:5a:8f:f9:13:70:bd:c3:
         7e:09:1d:e8:37:9d:75:d2:c5:6f:cb:40:5f:8b:7b:9c:c0:cf:
         16:e3:cb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:04:11 2025 by rpki-client