Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a383a3a2f34382d3438203d3e203238343538.roa
File:                     323830363a3230323a383a3a2f34382d3438203d3e203238343538.roa (raw, json)
Hash identifier:          VndKp+o+zKTbxkNYsmqF1ISRPCHw+2CjfxA4uJ7DfRY=
Subject key identifier:   1D:DF:5C:CC:E2:50:99:D7:58:2C:02:69:6F:F1:9D:E9:97:52:B3:F1
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       787A5D6A8ECCEA2E270A024B18453C4740475752
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a383a3a2f34382d3438203d3e203238343538.roa
Signing time:             Tue 04 Feb 2025 19:58:06 +0000
ROA not before:           Tue 04 Feb 2025 19:53:06 +0000
ROA not after:            Tue 03 Feb 2026 19:58:06 +0000
asID:                     28458
IP address blocks:        2806:202:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7a:5d:6a:8e:cc:ea:2e:27:0a:02:4b:18:45:3c:47:40:47:57:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Feb  4 19:53:06 2025 GMT
            Not After : Feb  3 19:58:06 2026 GMT
        Subject: CN=1DDF5CCCE25099D7582C02696FF19DE99752B3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5b:80:ce:2e:37:6b:69:1f:76:2a:a3:8b:f8:
                    f5:39:d4:4d:ae:d5:3c:f4:1d:75:e3:bc:6d:f8:54:
                    88:9c:d2:72:04:e4:fa:92:0d:a0:c7:39:ef:5a:62:
                    eb:b9:b4:6d:e5:25:2d:30:0a:ab:78:ec:cf:54:bd:
                    9d:2b:ae:35:1c:60:27:e8:33:b5:33:86:47:05:0e:
                    f5:21:96:5e:23:17:32:eb:fb:ad:e0:e8:df:e0:10:
                    c1:9c:a2:9a:34:9b:60:be:ab:2b:01:10:f3:f3:40:
                    b3:f6:da:5f:90:65:26:c6:b0:3f:e6:ef:cc:5b:7e:
                    9c:7b:66:35:20:37:a0:1c:75:76:92:d3:48:a1:67:
                    5f:a2:df:6d:04:36:6f:13:e0:01:a8:28:ee:34:bd:
                    4c:71:02:ea:4d:24:dc:b5:9a:84:36:46:66:2a:19:
                    ce:4c:07:5a:e7:7e:8b:53:d9:13:46:33:50:a5:e8:
                    00:7b:af:eb:7e:fd:b7:f2:8c:ef:8e:e9:46:81:6d:
                    6e:05:47:f6:bb:15:68:db:03:8b:17:97:d8:45:37:
                    61:75:69:48:d1:78:dd:c6:41:39:67:b8:c7:6e:c3:
                    a8:04:01:14:e8:a8:44:7f:ad:b5:d1:d5:93:08:af:
                    45:08:ab:67:72:93:e8:b3:c4:31:38:de:79:b9:63:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DF:5C:CC:E2:50:99:D7:58:2C:02:69:6F:F1:9D:E9:97:52:B3:F1
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a383a3a2f34382d3438203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:34:ea:fe:7d:aa:7e:79:45:b4:12:af:9b:86:e8:8a:4c:46:
         85:44:c1:0c:3f:56:2f:f3:96:29:a5:46:07:49:06:f5:d7:0a:
         66:d4:df:db:17:e3:07:b3:50:b0:b3:d3:bf:dc:93:62:62:10:
         c5:ee:05:21:87:24:17:f3:04:dc:d9:13:f6:79:94:81:13:7e:
         28:99:01:9c:91:f7:a2:3a:80:8f:94:c2:80:00:f8:89:23:3d:
         dc:3c:c5:6e:0f:16:c1:67:ba:e1:a8:9b:78:72:c6:19:be:7a:
         a4:27:4a:41:47:d8:8f:05:78:63:f2:6f:5b:ba:0a:d8:59:99:
         33:71:be:92:57:64:e5:97:64:f9:2d:30:ee:d4:33:6f:c7:1f:
         11:4c:06:cb:67:22:25:00:15:09:43:01:5e:0c:6e:60:19:06:
         bb:95:d1:12:56:03:cd:2b:16:c2:79:76:1c:d1:fd:b6:d3:94:
         b2:25:98:c7:e3:71:fe:5e:1d:41:a0:06:d9:8f:1b:84:fb:d2:
         8d:94:e6:d1:de:fa:8c:8f:03:5e:31:8c:80:aa:2e:d4:be:bd:
         01:31:d5:f0:31:ad:03:3f:1c:d0:3e:26:e2:4a:78:41:ae:2d:
         01:99:b8:f8:c4:bb:cc:a7:e9:71:e6:d9:fe:00:59:9f:03:dd:
         38:e0:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:44 2025 by rpki-client