Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/323830313a31623a623830303a3a2f34382d3438203d3e20323733313139.roa
File:                     323830313a31623a623830303a3a2f34382d3438203d3e20323733313139.roa (raw, json)
Hash identifier:          v7fzOrYwJuqLIXozUcyNELLEiKWPBnjJ+9yL9Qi9kNs=
Subject key identifier:   03:24:73:BE:08:D9:12:12:D9:FF:64:81:5D:29:ED:F7:10:93:F0:D8
Certificate issuer:       /CN=64A9B58D9CA1F4B52522EFDE758B7420B9D36373
Certificate serial:       2EFAB7595CE55F5E4ADE1F9B485572E0BFB558E3
Authority key identifier: 64:A9:B5:8D:9C:A1:F4:B5:25:22:EF:DE:75:8B:74:20:B9:D3:63:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/323830313a31623a623830303a3a2f34382d3438203d3e20323733313139.roa
Signing time:             Fri 05 Sep 2025 13:43:12 +0000
ROA not before:           Fri 05 Sep 2025 13:38:12 +0000
ROA not after:            Fri 04 Sep 2026 13:43:12 +0000
asID:                     273119
IP address blocks:        2801:1b:b800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fa:b7:59:5c:e5:5f:5e:4a:de:1f:9b:48:55:72:e0:bf:b5:58:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64A9B58D9CA1F4B52522EFDE758B7420B9D36373
        Validity
            Not Before: Sep  5 13:38:12 2025 GMT
            Not After : Sep  4 13:43:12 2026 GMT
        Subject: CN=032473BE08D91212D9FF64815D29EDF71093F0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6b:b3:fa:72:de:f9:49:c0:78:33:a9:46:fc:
                    83:5b:99:49:34:f9:9d:62:ca:e1:d2:25:9d:0c:41:
                    76:9c:06:31:c2:8e:4a:e5:65:38:cb:70:14:68:ad:
                    1e:1b:a5:72:1b:2b:38:ae:04:06:07:f5:25:a7:ee:
                    37:5e:77:c2:8a:5c:d4:95:0f:e4:af:18:2e:65:96:
                    42:1e:25:1a:99:6f:32:53:f9:ee:85:70:d8:b8:32:
                    ae:48:7d:6d:37:01:5f:51:94:13:ea:60:8f:83:b8:
                    37:70:0a:0e:f8:e8:23:6e:df:77:fa:8e:44:18:28:
                    1b:b0:81:c2:1d:60:32:93:ce:c2:42:75:12:ac:5a:
                    4c:40:3a:fe:65:22:84:00:b0:95:16:26:36:fd:39:
                    f5:c0:c6:a3:75:55:23:62:9d:b1:0e:52:be:d3:2b:
                    30:37:f0:70:f8:25:1d:d3:58:fa:e1:8f:16:ec:18:
                    0f:b5:65:1a:fd:d6:37:03:c8:5b:06:57:26:78:ef:
                    28:28:5e:e4:f3:57:2c:7a:e5:e4:fb:ae:46:e9:37:
                    43:15:22:e8:e5:f2:b4:e2:61:21:65:f8:49:9c:e6:
                    de:cf:a8:91:5d:8b:4b:bb:8a:67:6e:15:99:54:d6:
                    ef:86:45:e9:4a:b2:2f:7b:43:89:c8:05:d2:5d:c9:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:24:73:BE:08:D9:12:12:D9:FF:64:81:5D:29:ED:F7:10:93:F0:D8
            X509v3 Authority Key Identifier:
                keyid:64:A9:B5:8D:9C:A1:F4:B5:25:22:EF:DE:75:8B:74:20:B9:D3:63:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/323830313a31623a623830303a3a2f34382d3438203d3e20323733313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:39:7b:e0:76:a2:0e:62:33:23:dc:bf:dd:02:24:41:05:f5:
         9e:de:d4:9d:4c:bd:a6:90:a0:ec:d6:87:01:20:a3:c6:09:96:
         38:5b:1b:c7:3e:3b:5a:4e:ff:89:17:c6:20:a4:6b:c4:d0:87:
         30:1b:d2:9e:72:fd:bd:d0:f4:75:bf:5e:f6:00:f1:d6:d6:8f:
         c9:76:0b:ab:21:2d:7a:15:8d:7c:20:a7:11:eb:d0:d3:29:0f:
         65:44:f7:41:0c:7d:eb:36:bf:97:fb:6b:48:8d:4b:50:92:76:
         4b:b8:76:1a:fa:46:a6:80:b6:57:2f:8e:f1:37:1f:07:f0:ed:
         a5:fa:d5:ea:86:14:fb:e8:3c:6c:0c:4a:e3:3e:3f:89:93:64:
         20:e7:4f:8e:a2:6c:2d:a5:31:0c:91:ba:9e:22:41:89:9a:ce:
         35:69:67:73:18:d0:5a:18:a4:89:d7:97:e7:16:74:57:e0:6d:
         f5:90:51:cf:ba:e8:da:ce:bc:12:bc:46:58:8f:41:ef:09:3e:
         0f:4c:76:9c:99:0c:fd:77:e6:a5:93:88:7b:ee:26:12:f1:a3:
         49:c5:59:5c:44:ab:94:61:e5:99:51:fd:98:3c:1e:bb:9e:3b:
         14:b4:79:f0:cf:6f:04:b6:ad:c6:3b:c1:51:19:d0:f7:75:f0:
         1b:cd:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:19:00 2025 by rpki-client