Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa
File:                     323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa (raw, json)
Hash identifier:          rf4QUnVdKpWGaCs+46OA5oaqIQiNEbB0zEshfAQbBMw=
Subject key identifier:   AE:D5:1F:43:8F:61:68:CA:0F:2C:92:15:8C:0F:9F:50:57:B2:B5:74
Certificate issuer:       /CN=B1584F435951195F9A1F345DE3A71C0FFAED9417
Certificate serial:       30555274B1FD21B3FFA5647F9BC86CF079BEB908
Authority key identifier: B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa
Signing time:             Tue 04 Feb 2025 18:29:04 +0000
ROA not before:           Tue 04 Feb 2025 18:24:04 +0000
ROA not after:            Tue 03 Feb 2026 18:29:04 +0000
asID:                     269791
IP address blocks:        2801:16:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:55:52:74:b1:fd:21:b3:ff:a5:64:7f:9b:c8:6c:f0:79:be:b9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1584F435951195F9A1F345DE3A71C0FFAED9417
        Validity
            Not Before: Feb  4 18:24:04 2025 GMT
            Not After : Feb  3 18:29:04 2026 GMT
        Subject: CN=AED51F438F6168CA0F2C92158C0F9F5057B2B574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:2f:02:a5:0d:00:c2:8b:45:5c:5f:8d:ed:
                    7b:8e:32:e2:f8:f3:1f:6f:24:ee:76:09:e5:d6:05:
                    ad:76:2a:9e:b1:d4:7b:b1:d8:3d:93:9b:61:1b:ed:
                    3e:33:bd:d3:19:71:16:ae:be:8f:70:4a:9b:23:05:
                    e0:bb:76:63:70:ac:5e:42:19:eb:2d:4b:f5:9f:85:
                    e1:58:6f:1b:e2:da:35:5f:b8:d8:1d:00:1a:c6:5d:
                    07:10:b5:89:24:87:dd:f4:b1:45:f1:c5:01:0a:50:
                    8c:f5:ee:74:4b:b1:bb:eb:15:17:b1:7b:c9:53:1f:
                    f8:33:a5:1e:ad:12:9d:4b:01:8f:64:74:ca:d9:9d:
                    8b:60:f1:2d:64:4a:6c:f4:df:18:10:e8:cf:94:92:
                    44:d7:c6:13:3d:47:ba:a7:55:22:7f:6f:62:2f:1d:
                    82:e8:25:93:39:2f:11:53:0d:c9:46:94:e5:23:bb:
                    bf:f8:a7:a3:58:04:e5:0f:c9:3c:e3:9c:f4:d1:5c:
                    72:4d:5e:24:aa:38:35:ab:8a:f6:5c:2f:b2:7e:ac:
                    b9:1b:36:0e:3e:40:0e:ca:9b:fc:52:13:e2:c5:bf:
                    39:4c:4e:e2:df:f8:2f:dd:26:34:1a:5e:db:d6:28:
                    d3:9c:34:88:8c:ee:6b:9a:c6:d3:19:d6:d8:1c:ee:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D5:1F:43:8F:61:68:CA:0F:2C:92:15:8C:0F:9F:50:57:B2:B5:74
            X509v3 Authority Key Identifier:
                keyid:B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:59:ca:25:b4:75:67:4a:46:90:f5:a3:af:36:34:2d:12:32:
         c9:87:64:69:60:4e:6e:33:d5:d5:7d:e9:6e:a5:45:53:29:40:
         b8:ba:02:fd:73:cb:34:d5:33:64:91:d2:09:59:e0:87:e7:ae:
         cf:5f:bf:64:31:2a:68:1f:2b:4e:72:9b:33:3b:b3:e4:58:c7:
         17:aa:15:75:4b:b5:86:57:b7:46:f5:34:27:38:d0:d8:74:7a:
         af:de:ec:1a:9f:6b:14:9c:cd:f9:93:f0:43:97:94:78:47:ef:
         4c:cb:b4:3d:bd:0e:33:8d:ac:03:ee:f5:a8:5f:1c:e3:dd:a3:
         da:f4:fe:f4:38:d3:fb:a4:a8:e0:65:ed:38:1a:5a:df:dc:39:
         0f:fa:8a:bb:1a:3a:a1:8e:20:2c:31:e0:48:2a:5e:7b:ef:61:
         81:da:34:88:b8:c3:82:7b:42:6b:fe:7c:98:39:35:e2:2e:9a:
         63:bf:2a:42:c0:94:63:7f:7c:65:31:ce:fd:53:90:09:0b:1b:
         01:95:29:66:e6:76:03:c0:35:c6:f2:a2:ae:59:82:13:13:0b:
         30:17:ff:3d:9e:d1:3d:24:45:55:9a:85:bb:8e:f5:c0:69:69:
         20:d0:be:c0:af:e3:1f:64:c3:b5:39:fd:6c:6d:99:0e:99:ab:
         17:86:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:44 2025 by rpki-client