Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/323830313a31333a383830303a3a2f34382d3438203d3e20323639373538.roa
File:                     323830313a31333a383830303a3a2f34382d3438203d3e20323639373538.roa (raw, json)
Hash identifier:          ZFpRVjHVgYvhXCvVF3H406mXP/QtSAK6yvs24dP54aY=
Subject key identifier:   1A:01:43:E4:24:3A:91:5A:B5:D8:57:53:06:D4:3B:E5:6B:42:A6:29
Certificate issuer:       /CN=626C22B37E986FBB36DBE7A36C8BC48148D8366D
Certificate serial:       5FC3964C12DAF2831F348DB2637D8499AD5F30CB
Authority key identifier: 62:6C:22:B3:7E:98:6F:BB:36:DB:E7:A3:6C:8B:C4:81:48:D8:36:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/323830313a31333a383830303a3a2f34382d3438203d3e20323639373538.roa
Signing time:             Tue 04 Feb 2025 18:12:13 +0000
ROA not before:           Tue 04 Feb 2025 18:07:13 +0000
ROA not after:            Tue 03 Feb 2026 18:12:13 +0000
asID:                     269758
IP address blocks:        2801:13:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c3:96:4c:12:da:f2:83:1f:34:8d:b2:63:7d:84:99:ad:5f:30:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626C22B37E986FBB36DBE7A36C8BC48148D8366D
        Validity
            Not Before: Feb  4 18:07:13 2025 GMT
            Not After : Feb  3 18:12:13 2026 GMT
        Subject: CN=1A0143E4243A915AB5D8575306D43BE56B42A629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:d5:27:7f:43:9e:6b:de:28:f8:61:6d:7b:
                    e2:b6:22:83:c6:d6:88:d9:37:b0:b2:75:04:b3:7a:
                    31:f3:0d:61:fe:3f:b8:65:f5:6d:a6:06:dc:ce:f7:
                    7d:09:5f:89:0b:6f:35:a5:9b:78:6b:d4:b2:ff:03:
                    87:a7:a9:85:4f:47:a0:89:8e:df:0e:47:b9:16:6f:
                    33:aa:06:d6:31:99:b3:84:6c:b9:f3:02:30:e8:9c:
                    0a:e1:22:46:e4:c2:fd:a5:90:4a:a8:0b:bb:74:e9:
                    f8:54:3c:2c:f8:89:4b:6c:3d:fa:ac:1f:7d:bc:65:
                    e0:4c:26:f6:d3:68:53:28:23:69:15:43:d9:14:ff:
                    b3:e8:61:2f:a0:70:94:43:06:3c:cb:f8:fd:a4:77:
                    07:46:6c:f3:84:23:d0:6d:6f:90:8b:e8:83:ff:e3:
                    17:c6:40:13:16:4f:32:a0:62:21:0f:d3:9e:05:02:
                    7c:81:e3:e0:57:c4:70:84:9d:34:e4:5f:2d:e8:c8:
                    84:9c:aa:bf:b9:33:8d:cd:eb:2b:69:7b:eb:fc:7b:
                    1a:ff:f0:38:e9:76:7e:17:28:93:8a:92:ab:6e:22:
                    be:06:af:00:7f:1c:f9:41:c1:b6:08:e8:25:21:f0:
                    66:67:52:2e:6e:b9:cc:85:ce:e6:90:40:43:aa:09:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:01:43:E4:24:3A:91:5A:B5:D8:57:53:06:D4:3B:E5:6B:42:A6:29
            X509v3 Authority Key Identifier:
                keyid:62:6C:22:B3:7E:98:6F:BB:36:DB:E7:A3:6C:8B:C4:81:48:D8:36:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/323830313a31333a383830303a3a2f34382d3438203d3e20323639373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:2c:94:b5:61:4f:0c:b3:dc:ae:e0:61:75:e1:ca:01:3f:db:
         64:5a:dd:41:39:ac:68:1b:c1:fa:ff:c6:41:3f:f8:ab:9c:62:
         a4:f8:35:8b:1a:e3:45:f9:45:16:0e:95:34:2e:78:12:67:9f:
         28:d4:4d:42:6b:e9:78:8a:c0:f2:88:32:a5:3f:25:fc:0e:16:
         48:95:45:82:48:31:15:17:e9:90:cf:c8:30:e0:2c:6f:7e:5b:
         d5:18:fa:9b:42:8b:a7:b8:72:e3:35:28:5e:f7:9a:0a:74:f8:
         5a:ec:5e:fc:f6:7d:7c:3b:f5:d6:03:8b:63:34:3c:18:89:c8:
         c2:11:47:a9:9e:b3:18:12:21:aa:51:fe:e2:09:09:1d:40:06:
         d4:53:99:20:d9:d8:1f:65:58:e1:0d:ee:14:d1:ba:de:b6:66:
         81:a6:0c:dd:58:cf:1c:65:f8:1d:93:c7:1e:cf:e5:1d:88:e4:
         18:7e:7c:15:af:fa:2b:59:90:ad:23:76:a0:bf:98:19:81:bf:
         0e:3e:29:eb:e2:c8:8d:e0:9d:2e:25:08:a9:cf:73:68:3a:1e:
         77:f3:9f:0c:22:b4:9c:0f:36:d7:44:66:92:d4:1e:d5:7a:7d:
         81:9d:a8:ec:1e:ac:1b:3e:7d:f4:17:3e:60:9f:7d:4f:9e:ca:
         95:e8:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:41:32 2025 by rpki-client