Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          3mU2REkxW4FF4YjwJgNC1Ge/I6TEilvcEWmZL1AaFnk=
Subject key identifier:   1C:71:23:75:26:C1:8F:1A:6D:78:0A:CE:D1:B5:9C:B9:5B:B0:92:67
Certificate issuer:       /CN=24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B
Certificate serial:       5B12E8B93C13553E3DA169714DD9ECF70A42B6E6
Authority key identifier: 24:E5:CB:DF:A3:78:0F:8B:7B:FB:97:79:1F:5B:34:87:17:2B:CB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:43:06 +0000
ROA not before:           Tue 04 Feb 2025 18:38:06 +0000
ROA not after:            Tue 03 Feb 2026 18:43:06 +0000
asID:                     27951
IP address blocks:        2801:17:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:12:e8:b9:3c:13:55:3e:3d:a1:69:71:4d:d9:ec:f7:0a:42:b6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B
        Validity
            Not Before: Feb  4 18:38:06 2025 GMT
            Not After : Feb  3 18:43:06 2026 GMT
        Subject: CN=1C71237526C18F1A6D780ACED1B59CB95BB09267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:0b:46:32:98:62:44:3b:5b:4c:14:cb:ff:
                    2a:3e:16:4f:0e:23:d0:87:92:85:0f:fa:41:4f:52:
                    9e:d0:f1:13:a7:4c:67:41:12:93:ef:ba:59:c5:36:
                    14:4d:69:c2:df:d9:98:f6:c2:b6:d3:62:24:42:64:
                    01:fe:a3:ae:4a:1e:b1:01:34:1c:13:83:2d:cb:ea:
                    4f:2c:c6:d8:30:5f:e7:2a:2c:64:af:84:0f:9e:36:
                    21:23:c0:ea:90:79:d0:fa:2b:ef:70:98:0a:5e:1e:
                    06:58:c5:93:68:4e:c9:52:dd:9b:de:72:66:9c:6b:
                    07:64:01:ec:07:9f:64:09:34:fd:ff:85:01:2e:bc:
                    45:9c:a1:19:5c:e5:13:5b:80:fb:23:ff:6e:2e:46:
                    17:9e:12:41:0e:13:ee:9b:d5:56:ca:e8:df:18:32:
                    6c:1f:c6:18:8c:4c:ea:1d:58:e2:36:d3:98:fe:c1:
                    f0:4d:24:1c:80:ce:a7:bd:fc:20:f4:ef:bf:cc:d5:
                    fe:31:46:89:24:6f:ee:f8:53:2c:27:07:e1:b5:3d:
                    14:83:21:72:2f:ae:ee:80:4d:4a:fd:f0:80:f8:10:
                    47:d7:57:a8:e2:14:1f:8e:2d:0d:f7:95:e6:f3:0b:
                    04:a1:54:5f:8f:a4:39:d5:e3:26:8a:da:3e:37:ff:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:71:23:75:26:C1:8F:1A:6D:78:0A:CE:D1:B5:9C:B9:5B:B0:92:67
            X509v3 Authority Key Identifier:
                keyid:24:E5:CB:DF:A3:78:0F:8B:7B:FB:97:79:1F:5B:34:87:17:2B:CB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:55:af:53:75:ec:7f:b9:d9:46:73:4e:4a:cb:2a:b4:18:f2:
         a5:c7:3e:6e:85:26:d2:f1:84:9c:fe:8b:8b:33:99:53:98:63:
         a4:db:15:c6:b3:99:85:77:1d:b2:9c:b2:1f:77:c4:7a:db:03:
         6c:db:93:89:46:19:5c:e0:3c:74:75:9d:96:1e:a7:1c:91:19:
         bf:46:1a:c0:09:17:f8:ef:92:16:15:89:77:cd:bc:a3:cf:3e:
         fb:83:8e:00:fd:13:ef:47:ae:58:3c:2b:4f:97:b8:45:a1:7e:
         b1:9b:03:c0:ed:63:0b:79:39:22:de:6f:6f:f6:f2:1f:60:bb:
         3c:c1:0e:30:cc:c5:5f:4c:e5:c3:82:26:75:5d:88:9c:ad:30:
         4c:58:fe:b7:32:fd:d7:ca:b0:05:93:cc:4c:53:d3:9b:23:d2:
         ca:a8:f0:12:ba:94:72:22:1a:af:2a:55:5d:19:45:c4:9a:fc:
         51:95:7d:c8:05:93:20:b1:a4:be:ae:dd:15:a6:26:67:11:e3:
         ad:54:67:4e:a1:34:b7:ff:d1:d4:ca:0c:cc:f5:01:52:2b:a2:
         b8:73:72:fa:ee:15:13:5c:15:e0:e2:76:c0:c3:04:9f:31:6b:
         01:77:71:2d:d9:c5:96:91:fa:74:0c:c4:5a:17:52:73:6b:5d:
         2c:7e:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:00 2025 by rpki-client