Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a31393a343830303a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          aConzw7YA4XQX+pYh4bHqGCVRWvIm4Lbx4O3WrOVZQs=
Subject key identifier:   A4:F4:44:EE:BF:FF:C9:B7:E3:84:3F:FA:24:28:EC:A0:5B:7A:C9:CA
Certificate issuer:       /CN=16801C6CB7A9588FAE9720CC164C99F5DD8BE74B
Certificate serial:       15A5FA5172AB486CD1CAABA1FAD07790EDE63F70
Authority key identifier: 16:80:1C:6C:B7:A9:58:8F:AE:97:20:CC:16:4C:99:F5:DD:8B:E7:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e203138373437.roa
Signing time:             Mon 03 Feb 2025 20:50:00 +0000
ROA not before:           Mon 03 Feb 2025 20:45:00 +0000
ROA not after:            Mon 02 Feb 2026 20:50:00 +0000
asID:                     18747
IP address blocks:        2801:19:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a5:fa:51:72:ab:48:6c:d1:ca:ab:a1:fa:d0:77:90:ed:e6:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16801C6CB7A9588FAE9720CC164C99F5DD8BE74B
        Validity
            Not Before: Feb  3 20:45:00 2025 GMT
            Not After : Feb  2 20:50:00 2026 GMT
        Subject: CN=A4F444EEBFFFC9B7E3843FFA2428ECA05B7AC9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:c5:54:83:f5:8b:82:74:55:05:60:b8:b0:
                    13:1b:30:9d:1a:03:7c:3d:1b:7c:b9:d0:56:88:9d:
                    7e:8b:be:2f:0e:46:3a:f1:4a:90:ba:7e:2c:9d:1e:
                    d1:e8:de:71:ef:4c:1f:8a:6d:15:aa:87:e7:d8:24:
                    ef:14:93:af:01:cd:0a:63:26:64:6e:c0:8b:df:58:
                    c6:8a:c4:46:14:f0:82:fb:9b:b0:49:90:b9:b9:d8:
                    7a:cc:01:e2:d3:7d:03:f2:1e:09:54:2f:bc:19:bb:
                    70:8b:16:4c:a5:75:58:d2:34:05:f1:08:33:78:d6:
                    25:ab:f0:b9:f7:34:23:ff:6e:e7:ac:13:95:03:b5:
                    4d:15:9c:ef:dc:22:b4:c5:c9:c8:1d:42:2c:f1:56:
                    e6:0c:c9:2d:4a:9b:42:96:3e:35:4f:b0:46:90:e0:
                    07:0e:3d:18:b6:ce:9b:a2:38:3c:5b:e2:11:66:73:
                    38:93:ef:22:27:d5:f7:b7:97:5d:26:3d:a8:c8:c6:
                    1d:c8:d2:fc:4e:06:cd:d5:d5:52:69:7c:f6:f8:ae:
                    d9:05:4f:60:de:f3:cb:42:58:d6:3f:bd:30:e6:99:
                    2c:f8:3a:c3:4f:cc:cc:ec:9f:6e:8c:1b:80:75:bd:
                    c4:96:bd:be:4b:1f:68:9c:4d:f2:99:5f:10:7d:97:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F4:44:EE:BF:FF:C9:B7:E3:84:3F:FA:24:28:EC:A0:5B:7A:C9:CA
            X509v3 Authority Key Identifier:
                keyid:16:80:1C:6C:B7:A9:58:8F:AE:97:20:CC:16:4C:99:F5:DD:8B:E7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:ca:ce:e1:d4:ed:58:09:9c:5f:49:7d:b0:6d:40:13:e4:32:
         25:f3:77:7f:5b:25:56:c0:e9:d5:c3:b8:4a:11:53:4d:fd:cc:
         53:ab:65:f6:62:56:36:a4:83:63:cb:8d:9b:ca:70:fe:e8:4b:
         02:17:84:04:56:35:a1:9e:f5:e6:7f:d7:e8:52:2c:55:da:a3:
         fd:2b:4b:7b:30:cf:86:e9:bf:85:da:a8:e9:13:ff:ca:8b:2d:
         70:15:1d:0f:92:83:11:ac:47:b4:3b:e9:7b:8e:20:f7:4c:77:
         11:cc:a7:90:1f:55:c1:62:3a:30:e9:21:2b:92:7a:92:72:e0:
         f6:c3:fe:ea:8a:4e:d8:c5:96:de:aa:5b:dd:dc:f6:67:d6:69:
         47:92:ac:8f:7c:f5:1c:1f:8d:74:6d:f1:8c:ba:01:e5:01:5a:
         a3:21:e3:c9:de:79:09:53:15:7e:ce:1d:64:45:d0:4f:73:90:
         00:dd:a3:f9:95:de:51:d1:ee:ba:44:5a:b1:71:98:aa:9a:80:
         29:f7:78:f7:a5:e0:a6:97:cf:ea:90:60:11:49:09:70:9c:0a:
         c7:2a:b3:f7:b1:6a:ac:39:9e:8f:b7:4f:dc:ee:22:e9:d1:08:
         86:12:72:98:d4:9f:96:94:b5:56:8d:9c:91:f5:91:79:61:84:
         5b:7e:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:38 2025 by rpki-client