Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/323830313a31313a3830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31313a3830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          8xCZT/g+7vp7BMWJWTC0q4mnPEnWglxqk05NXWIVGSg=
Subject key identifier:   39:1F:01:BB:E7:7A:01:54:82:3B:8B:5F:06:49:9A:5A:C8:AD:52:2A
Certificate issuer:       /CN=C09C1AE097C22CE10A6962137307EE7E8ED80E79
Certificate serial:       4A34E4AE5D0E53C3C8C19DEE01EEEF94362FD8DA
Authority key identifier: C0:9C:1A:E0:97:C2:2C:E1:0A:69:62:13:73:07:EE:7E:8E:D8:0E:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/323830313a31313a3830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:52:28 +0000
ROA not before:           Tue 04 Feb 2025 18:47:28 +0000
ROA not after:            Tue 03 Feb 2026 18:52:28 +0000
asID:                     14080
IP address blocks:        2801:11:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 12:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:34:e4:ae:5d:0e:53:c3:c8:c1:9d:ee:01:ee:ef:94:36:2f:d8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C09C1AE097C22CE10A6962137307EE7E8ED80E79
        Validity
            Not Before: Feb  4 18:47:28 2025 GMT
            Not After : Feb  3 18:52:28 2026 GMT
        Subject: CN=391F01BBE77A0154823B8B5F06499A5AC8AD522A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:cb:a2:80:f3:f7:3f:5a:ec:f1:4d:b4:ad:
                    1e:ec:5d:3b:f4:3f:b5:d6:65:30:26:40:a1:88:51:
                    07:6d:77:ab:d1:4e:54:3a:7e:05:d6:a4:1a:9f:7c:
                    8a:5a:c9:bf:59:d8:2e:3d:82:38:94:eb:80:ad:3b:
                    90:2a:7d:21:60:5d:a1:99:50:c7:82:30:56:7b:c8:
                    ec:cf:fe:50:c9:16:ba:d4:31:78:5f:8d:dd:fd:7a:
                    1e:63:48:79:f2:d3:8d:73:74:d2:b9:9e:83:2e:95:
                    16:1a:bf:e5:f1:85:48:11:ed:e2:d9:70:b0:df:44:
                    93:7d:0b:63:cd:36:70:c0:a9:ad:c6:79:a8:0f:29:
                    b7:a2:2e:96:b1:e4:cb:9b:a8:f6:23:05:07:d1:ce:
                    df:03:61:f0:8d:d0:d2:ad:ff:ad:21:d1:46:65:16:
                    4c:f9:92:4e:61:1a:90:89:a9:05:bd:27:2d:48:48:
                    0f:9f:16:f0:c6:f0:da:a1:ae:7f:8c:85:91:df:df:
                    1f:78:47:12:d0:ec:9f:9f:00:de:49:97:81:b7:43:
                    f4:a4:4c:75:6d:3e:3c:de:06:1c:fd:7b:d0:6b:c6:
                    6d:39:98:3f:3f:f3:77:55:9c:ff:55:14:32:f7:79:
                    c8:bb:e9:4f:f7:4e:a3:9e:f8:71:17:8e:2b:3f:41:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1F:01:BB:E7:7A:01:54:82:3B:8B:5F:06:49:9A:5A:C8:AD:52:2A
            X509v3 Authority Key Identifier:
                keyid:C0:9C:1A:E0:97:C2:2C:E1:0A:69:62:13:73:07:EE:7E:8E:D8:0E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/323830313a31313a3830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:9e:3b:cc:41:af:18:91:6d:ac:42:58:a0:66:3d:f4:bf:
         f0:29:55:04:59:81:b9:c0:4f:13:11:cd:fa:e8:90:db:e9:ef:
         aa:1f:c0:d8:08:00:70:43:56:d1:e3:dd:5f:3e:04:04:b2:f2:
         d9:62:d4:43:4f:c2:1c:81:81:9e:2c:14:5e:8d:38:ee:5e:b0:
         6b:a8:db:d5:46:6d:28:1f:84:c1:c3:35:15:fb:40:6f:ff:c5:
         7e:6b:8c:d1:53:4f:8e:4f:02:c1:51:27:ba:65:2a:3f:f3:e5:
         5f:04:15:c2:d6:58:2c:7b:73:f9:d0:b4:b8:da:eb:87:56:78:
         24:97:c6:81:50:d7:cd:12:57:14:8d:49:40:e7:16:54:80:93:
         da:56:a5:86:07:49:f8:90:de:bf:28:8b:78:1c:a0:a7:1d:59:
         3c:46:7b:b9:f0:bd:c8:e4:7a:de:ff:aa:68:c5:7d:7b:41:51:
         8c:4f:2e:21:1c:dd:0e:40:b2:5c:15:d2:08:eb:3c:2b:ff:c4:
         f2:4a:88:f8:3f:2d:2b:01:bc:e1:28:e2:b5:7e:d0:63:89:58:
         e7:08:62:98:93:54:0d:ce:ff:da:2b:75:ec:6b:ec:85:08:24:
         fd:23:f5:bd:9f:8a:bf:16:eb:b2:a5:fd:43:88:47:5b:61:31:
         5e:db:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:28:51 2025 by rpki-client