Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/323830313a31313a613830303a3a2f34382d3438203d3e20323731383031.roa
File:                     323830313a31313a613830303a3a2f34382d3438203d3e20323731383031.roa (raw, json)
Hash identifier:          63K8y0ptXfxy9xe+TXmETEpRPrr9SFHR5cIT7NLLAWA=
Subject key identifier:   8F:CF:2C:51:55:8A:AE:D0:75:86:6F:C0:60:DE:FF:2E:03:C6:28:4A
Certificate issuer:       /CN=351DE46C026FDAE43B8CF33874035663B8897F33
Certificate serial:       7CECEC6C5DEE73169A69F46B2A24667B8E5C659D
Authority key identifier: 35:1D:E4:6C:02:6F:DA:E4:3B:8C:F3:38:74:03:56:63:B8:89:7F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/351DE46C026FDAE43B8CF33874035663B8897F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/323830313a31313a613830303a3a2f34382d3438203d3e20323731383031.roa
Signing time:             Tue 04 Feb 2025 18:29:20 +0000
ROA not before:           Tue 04 Feb 2025 18:24:20 +0000
ROA not after:            Tue 03 Feb 2026 18:29:20 +0000
asID:                     271801
IP address blocks:        2801:11:a800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/351DE46C026FDAE43B8CF33874035663B8897F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/351DE46C026FDAE43B8CF33874035663B8897F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/351DE46C026FDAE43B8CF33874035663B8897F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ec:ec:6c:5d:ee:73:16:9a:69:f4:6b:2a:24:66:7b:8e:5c:65:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351DE46C026FDAE43B8CF33874035663B8897F33
        Validity
            Not Before: Feb  4 18:24:20 2025 GMT
            Not After : Feb  3 18:29:20 2026 GMT
        Subject: CN=8FCF2C51558AAED075866FC060DEFF2E03C6284A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:ca:86:fa:0a:c7:d5:6e:f2:37:80:c7:44:
                    d7:21:7a:a1:f1:0d:d3:43:bc:8d:fc:ff:eb:a2:b5:
                    ad:84:a5:b1:a5:6c:c0:53:fd:ac:c2:ca:54:6f:3b:
                    17:99:c1:d3:89:97:d8:95:d0:9f:f1:54:a8:07:4c:
                    d3:94:d2:1b:9b:52:db:70:74:c5:20:ae:1c:98:d8:
                    04:d4:ea:d7:7a:22:d6:c5:c3:6c:26:1c:a2:2f:f1:
                    1e:42:2b:7d:08:0c:e7:1d:3b:eb:40:38:55:ca:ce:
                    af:31:83:86:8c:24:68:63:df:3a:88:d9:be:a7:46:
                    c8:fc:75:17:cb:82:e3:71:75:2b:73:70:bc:0f:01:
                    d9:50:17:30:3c:9c:ef:2c:9e:86:52:68:49:b8:85:
                    53:d3:0d:ed:8e:3d:39:42:3a:60:05:47:10:c2:30:
                    fc:3f:e1:59:f6:a7:16:ca:2d:7d:84:18:ec:e1:61:
                    ce:27:39:38:a9:fb:78:42:14:bc:ed:96:18:2c:8a:
                    b6:4b:91:7d:77:53:b7:28:e5:fd:dd:f8:bd:9b:af:
                    53:9b:90:bd:78:5f:f8:e2:f8:b7:11:ce:29:97:32:
                    ba:fd:6f:fb:57:d1:86:b7:c4:58:a4:cb:15:fe:db:
                    69:0e:5f:4a:56:56:7c:b6:a5:3e:07:be:9e:8c:dc:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CF:2C:51:55:8A:AE:D0:75:86:6F:C0:60:DE:FF:2E:03:C6:28:4A
            X509v3 Authority Key Identifier:
                keyid:35:1D:E4:6C:02:6F:DA:E4:3B:8C:F3:38:74:03:56:63:B8:89:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/351DE46C026FDAE43B8CF33874035663B8897F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/351DE46C026FDAE43B8CF33874035663B8897F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/323830313a31313a613830303a3a2f34382d3438203d3e20323731383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:ab:e0:2a:51:4a:17:d9:13:67:e4:d2:2f:53:2c:47:af:
         bf:a5:13:d5:1a:24:49:fd:27:ce:67:aa:fe:65:a7:92:01:12:
         7f:1e:21:1f:6e:1d:be:81:a3:b2:fc:3e:12:07:3a:0c:b0:0a:
         3a:58:61:46:ee:7e:e7:8f:78:eb:c6:ec:b4:52:90:c0:48:37:
         fe:de:f1:7f:32:3e:ef:9c:3e:20:ec:ea:f4:c0:29:28:a8:6e:
         d7:60:e7:ae:74:1a:d7:6c:91:71:c7:ca:a6:f1:98:d9:5b:3a:
         03:50:1f:35:6c:c0:67:d4:64:37:5b:fb:bd:5f:28:f3:20:3e:
         38:1b:82:dc:5c:b7:34:f4:d9:40:86:f7:e9:67:f5:14:78:90:
         27:33:0e:b0:fa:39:b7:eb:5b:5a:45:4b:91:e7:97:90:f4:46:
         24:39:ad:01:02:3a:1f:b0:31:e3:24:00:7e:d9:cd:14:06:f4:
         36:a5:2b:f2:4c:39:2a:1d:42:30:41:9f:c7:86:f8:05:ce:4b:
         09:4e:91:2d:c0:53:7e:8d:0c:19:1e:fc:98:a3:1f:88:0c:ea:
         b6:b3:54:c5:c3:f5:33:ef:30:52:0a:c1:4f:75:19:b4:bc:03:
         bc:dc:f0:6b:a2:01:18:04:85:85:8d:3b:49:90:11:b4:eb:ce:
         6f:ef:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:50:41 2025 by rpki-client