Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa
File:                     323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa (raw, json)
Hash identifier:          6/bWVIl4IMs8EX0zqFMc/ojM7TmrynkH5+wNxbc9/HM=
Subject key identifier:   9D:D4:02:71:E3:35:65:4E:9D:93:4F:B4:AD:EB:61:77:62:1A:37:A4
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       0BC6967C5D0C1B49480E75FB5C21C613390FF64A
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa
Signing time:             Tue 04 Feb 2025 18:29:24 +0000
ROA not before:           Tue 04 Feb 2025 18:24:24 +0000
ROA not after:            Tue 03 Feb 2026 18:29:24 +0000
asID:                     8048
IP address blocks:        2801:11:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c6:96:7c:5d:0c:1b:49:48:0e:75:fb:5c:21:c6:13:39:0f:f6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Feb  4 18:24:24 2025 GMT
            Not After : Feb  3 18:29:24 2026 GMT
        Subject: CN=9DD40271E335654E9D934FB4ADEB6177621A37A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:b7:36:d1:43:a5:34:61:ff:f7:3a:49:28:
                    cb:bc:42:34:5d:7f:28:62:65:3d:b8:e7:33:4a:89:
                    37:7c:59:56:0b:4f:7e:a6:9e:24:d2:e4:77:9f:6f:
                    fc:8d:ed:a2:66:d6:be:22:26:cb:83:d3:c3:18:54:
                    95:4e:0c:5f:19:cc:d7:2b:7c:61:aa:c3:d2:c8:c3:
                    33:81:59:1e:37:7c:57:85:b0:07:55:05:3c:ce:ad:
                    c5:00:67:b0:20:8c:d5:43:61:a4:64:62:78:73:07:
                    97:2c:a8:c8:cf:1d:5a:e8:4b:88:94:46:19:b0:50:
                    22:43:fe:fb:cb:5c:60:9e:be:0b:01:5f:6d:28:ca:
                    58:f7:e9:60:5e:80:5a:24:bb:e5:13:30:07:43:13:
                    75:8c:51:fb:40:35:62:bc:26:93:86:15:dd:e7:4f:
                    12:32:a5:e9:25:37:e4:89:a1:74:f0:47:14:6e:92:
                    8c:03:bb:d2:fd:0d:30:7d:08:d1:60:e1:56:34:98:
                    b0:b2:ff:11:39:7d:a5:df:72:ee:81:8e:8c:f1:75:
                    47:fa:3c:7d:68:2c:d4:39:11:b0:9b:36:6c:ad:f9:
                    1b:e9:90:4e:1d:a8:71:d7:4e:42:3c:90:e3:e1:62:
                    45:64:4e:86:7a:fd:99:7a:88:5d:14:64:42:15:f3:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D4:02:71:E3:35:65:4E:9D:93:4F:B4:AD:EB:61:77:62:1A:37:A4
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:a2:9c:c1:c5:96:59:d2:22:de:08:f8:1d:83:71:3b:bb:
         ff:80:e0:01:06:8e:63:1e:90:8d:b3:d3:e5:77:de:7c:f1:82:
         04:27:ed:e0:19:3e:63:ea:07:25:66:5c:b4:fa:3f:6f:fd:2c:
         58:81:90:47:3c:8a:de:e3:31:09:8c:b6:9d:c8:ee:cd:d2:27:
         0f:2d:43:90:ed:fb:04:aa:77:f2:e4:4a:9e:3a:86:ce:49:b5:
         5e:3a:bd:c2:21:87:74:9c:08:c3:83:c8:d3:e2:de:f6:e0:28:
         4c:4e:74:d4:75:6f:80:59:0e:cc:fa:b0:79:62:cd:7a:e0:f6:
         4f:64:32:74:c8:60:7e:3a:b9:98:ec:fa:ef:83:88:4e:ff:e3:
         a4:ac:ca:53:55:61:34:8e:bd:d5:cb:4e:bc:8f:bd:e2:a8:97:
         c7:05:d9:88:49:6c:bd:c8:47:7c:a3:f2:cc:3a:47:b6:bb:55:
         fe:c5:62:b5:7c:8d:8f:c9:06:40:c9:ad:8f:32:d8:90:0b:ee:
         eb:fb:05:f1:8c:3f:65:d2:f2:18:ec:e9:6a:e9:20:05:07:6b:
         99:dd:16:2c:3f:0e:df:bb:00:cb:81:8e:20:30:0f:87:b8:77:
         72:fd:b6:d0:2a:b5:98:a0:4b:b7:58:6b:4b:42:fb:e4:a9:f1:
         19:9e:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:34 2025 by rpki-client