Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/323830313a31623a353830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31623a353830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          QQjIeNi5LOSCki3lpX2BaMtQxWvc6l7b4HYUjXIAH9k=
Subject key identifier:   CA:4E:D2:3E:B9:88:DD:52:18:BA:1C:C5:A9:45:03:29:23:91:DC:38
Certificate issuer:       /CN=95EE354D523269E0178D6F4607C13684BAF550EA
Certificate serial:       4AE7491E9AF8333C18ABC49BBE0D48B4520C8291
Authority key identifier: 95:EE:35:4D:52:32:69:E0:17:8D:6F:46:07:C1:36:84:BA:F5:50:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95EE354D523269E0178D6F4607C13684BAF550EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/323830313a31623a353830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:07:32 +0000
ROA not before:           Tue 04 Feb 2025 18:02:32 +0000
ROA not after:            Tue 03 Feb 2026 18:07:32 +0000
asID:                     19429
IP address blocks:        2801:1b:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/95EE354D523269E0178D6F4607C13684BAF550EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/95EE354D523269E0178D6F4607C13684BAF550EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95EE354D523269E0178D6F4607C13684BAF550EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e7:49:1e:9a:f8:33:3c:18:ab:c4:9b:be:0d:48:b4:52:0c:82:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95EE354D523269E0178D6F4607C13684BAF550EA
        Validity
            Not Before: Feb  4 18:02:32 2025 GMT
            Not After : Feb  3 18:07:32 2026 GMT
        Subject: CN=CA4ED23EB988DD5218BA1CC5A94503292391DC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:5e:d3:2e:3b:0c:4a:7d:93:f1:57:1a:4f:
                    b7:b7:1d:87:41:14:bb:43:a9:da:d6:18:46:9e:16:
                    08:45:f0:e6:0d:00:37:a1:64:2f:48:a6:06:43:62:
                    bd:61:44:97:2d:1c:33:2f:ee:56:3a:c7:0e:26:21:
                    b0:78:fb:a6:f5:0c:aa:7f:93:99:61:f1:e7:c2:ef:
                    6c:91:63:a3:f0:34:fd:9a:2f:03:79:1c:7f:13:f3:
                    4b:2d:b0:44:5f:a6:44:b5:fa:8e:6f:fa:05:10:cf:
                    ee:26:71:5f:4a:10:d2:e7:0b:ae:9a:4e:61:3c:ac:
                    fa:14:c3:1c:7c:c4:0a:30:4c:20:91:af:c7:c5:dd:
                    d1:95:68:f0:6e:3d:8f:cf:7b:b3:8a:f4:0f:37:a3:
                    c8:65:36:07:aa:cf:2c:50:21:01:d3:f8:90:ea:0a:
                    1b:32:86:a3:d3:ee:22:6e:79:24:3c:ab:27:ab:9b:
                    58:52:b6:aa:bb:70:8a:91:30:0c:d3:0f:65:a6:0c:
                    1b:4c:5d:d1:5f:be:cf:29:56:6d:a5:d7:86:f5:17:
                    50:09:96:0c:09:a0:84:6d:e5:a4:eb:b2:c8:ae:11:
                    68:77:58:1a:78:51:51:7a:69:62:c1:12:f1:a1:67:
                    0a:72:49:43:6e:d7:d7:ed:1e:42:cf:43:30:56:52:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4E:D2:3E:B9:88:DD:52:18:BA:1C:C5:A9:45:03:29:23:91:DC:38
            X509v3 Authority Key Identifier:
                keyid:95:EE:35:4D:52:32:69:E0:17:8D:6F:46:07:C1:36:84:BA:F5:50:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/95EE354D523269E0178D6F4607C13684BAF550EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95EE354D523269E0178D6F4607C13684BAF550EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/323830313a31623a353830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:59:16:9f:98:33:7b:c6:0c:c6:32:ce:93:7d:fd:5e:b8:
         9b:9b:38:e5:0f:a1:d4:c5:dd:c7:7b:e7:d8:2f:2c:af:73:d5:
         bc:38:7f:67:f8:6f:62:67:ad:0f:9a:dc:7a:4e:62:6f:5a:83:
         f3:9d:bc:92:ca:ae:03:23:09:99:1a:54:2d:b5:5f:06:15:d2:
         c2:7e:93:84:f4:8d:af:0f:61:73:00:ca:08:6a:39:da:32:01:
         55:4d:fd:b3:de:bc:0c:f9:1a:86:66:5d:02:a9:49:c3:70:bb:
         a2:4b:b9:ce:7a:af:84:b2:94:03:ce:1a:27:46:7f:fe:34:ec:
         7b:c9:72:41:64:ff:b7:df:dc:28:01:cd:3e:bb:fb:1e:4b:9e:
         cf:8b:8c:6f:c9:84:6f:1b:09:0e:af:9d:3c:80:45:d1:3e:1c:
         a7:3d:cc:79:8c:c9:87:da:c7:b1:34:2a:ec:d8:9f:c7:5b:bf:
         28:0e:2e:ed:e6:9a:6d:da:bc:1b:90:91:7d:4a:ce:a2:01:02:
         72:96:e1:50:83:d6:5d:e8:59:4a:a6:26:4e:a9:15:7c:d7:23:
         65:87:5e:f8:1b:ec:23:70:14:6a:dd:03:b5:c3:83:87:1b:b2:
         46:c1:e2:f2:9e:92:97:a6:eb:d3:31:07:97:d4:81:89:b0:fe:
         03:bd:38:cd
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUSudJHpr4MzwYq8Sbvg1ItFIMgpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRTM1NEQ1MjMyNjlFMDE3OEQ2RjQ2MDdDMTM2ODRC
QUY1NTBFQTAeFw0yNTAyMDQxODAyMzJaFw0yNjAyMDMxODA3MzJaMDMxMTAvBgNV
BAMTKENBNEVEMjNFQjk4OERENTIxOEJBMUNDNUE5NDUwMzI5MjM5MURDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkl7TLjsMSn2T8VcaT7e3HYdB
FLtDqdrWGEaeFghF8OYNADehZC9IpgZDYr1hRJctHDMv7lY6xw4mIbB4+6b1DKp/
k5lh8efC72yRY6PwNP2aLwN5HH8T80stsERfpkS1+o5v+gUQz+4mcV9KENLnC66a
TmE8rPoUwxx8xAowTCCRr8fF3dGVaPBuPY/Pe7OK9A83o8hlNgeqzyxQIQHT+JDq
ChsyhqPT7iJueSQ8qyerm1hStqq7cIqRMAzTD2WmDBtMXdFfvs8pVm2l14b1F1AJ
lgwJoIRt5aTrssiuEWh3WBp4UVF6aWLBEvGhZwpySUNu19ftHkLPQzBWUjoNAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUyk7SPrmI3VIYuhzFqUUDKSOR3DgwHwYDVR0j
BBgwFoAUle41TVIyaeAXjW9GB8E2hLr1UOowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNDhBODA1OTA2REM3NjY0RDM3RkY1MDRDNEE2RDE5RTc1
QjlFMkVDQTUzOTUwREM2MDRFN0U5RUU2MDg3QjdCLzAvOTVFRTM1NEQ1MjMyNjlF
MDE3OEQ2RjQ2MDdDMTM2ODRCQUY1NTBFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NUVFMzU0RDUyMzI2OUUwMTc4
RDZGNDYwN0MxMzY4NEJBRjU1MEVBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTQ4QTgwNTkwNkRDNzY2NEQzN0ZGNTA0QzRBNkQxOUU3NUI5RTJFQ0E1
Mzk1MERDNjA0RTdFOUVFNjA4N0I3Qi8wLzMyMzgzMDMxM2EzMTYyM2EzNTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzNDMyMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAbWAAwDQYJKoZIhvcNAQELBQADggEBAAv6WRafmDN7xgzGMs6Tff1euJubOOUP
odTF3cd759gvLK9z1bw4f2f4b2JnrQ+a3HpOYm9ag/OdvJLKrgMjCZkaVC21XwYV
0sJ+k4T0ja8PYXMAyghqOdoyAVVN/bPevAz5GoZmXQKpScNwu6JLuc56r4SylAPO
GidGf/407HvJckFk/7ff3CgBzT67+x5Lns+LjG/JhG8bCQ6vnTyARdE+HKc9zHmM
yYfax7E0KuzYn8dbvygOLu3mmm3avBuQkX1KzqIBAnKW4VCD1l3oWUqmJk6pFXzX
I2WHXvgb7CNwFGrdA7XDg4cbskbB4vKekpem69MxB5fUgYmw/gO9OM0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:03 2025 by rpki-client