Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e203237393239.roa
File:                     323830313a31323a653830303a3a2f34382d3438203d3e203237393239.roa (raw, json)
Hash identifier:          V4ZE5Uab78fcIDcTzc31eKLt9gMqmX1D9SgmnAw6VTU=
Subject key identifier:   96:B6:4B:03:1B:94:F2:6C:F1:07:15:D4:9E:46:21:49:86:1F:49:6A
Certificate issuer:       /CN=AADC68CACCD7A12B6A019949E964F33953EF7228
Certificate serial:       0E2D6390150E24CE667E16D9AF94CD1EA0A79287
Authority key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e203237393239.roa
Signing time:             Tue 04 Feb 2025 18:32:07 +0000
ROA not before:           Tue 04 Feb 2025 18:27:07 +0000
ROA not after:            Tue 03 Feb 2026 18:32:07 +0000
asID:                     27929
IP address blocks:        2801:12:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2d:63:90:15:0e:24:ce:66:7e:16:d9:af:94:cd:1e:a0:a7:92:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADC68CACCD7A12B6A019949E964F33953EF7228
        Validity
            Not Before: Feb  4 18:27:07 2025 GMT
            Not After : Feb  3 18:32:07 2026 GMT
        Subject: CN=96B64B031B94F26CF10715D49E462149861F496A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:1e:ce:0d:d6:c7:be:74:d5:18:2a:f9:f4:
                    ee:6e:41:96:1c:c3:86:a4:ec:13:b7:23:c8:94:46:
                    4b:ab:c6:3e:4e:86:95:22:d3:48:0d:c8:a9:a6:67:
                    ea:c5:07:23:5d:ab:00:67:44:a4:22:c0:9f:7b:ee:
                    86:df:eb:c1:b0:4d:96:82:d9:cc:3c:ad:42:fc:d0:
                    13:b2:8c:a6:6c:d0:14:f4:ef:07:94:b8:05:21:c8:
                    ac:cf:77:f6:0e:f5:f3:f6:a7:26:60:20:37:f3:6f:
                    77:b2:67:82:27:47:7d:6e:97:ea:cf:7e:07:64:89:
                    2f:97:30:09:86:79:ec:99:52:13:11:1c:28:d0:7e:
                    1b:7a:aa:ca:67:d4:58:9d:c5:af:63:9c:a9:a0:ec:
                    cb:48:e8:29:f0:41:b3:d6:42:cc:42:22:e3:f0:cc:
                    58:dc:77:e7:2c:6b:6d:d4:7d:b0:37:b5:fc:6a:76:
                    ed:c3:e7:58:46:9f:49:15:15:e6:73:d3:4b:f6:33:
                    57:21:dc:94:3f:86:08:56:c5:9a:29:5a:37:c3:ef:
                    4c:5d:05:8e:80:b1:ca:36:53:01:cc:98:aa:23:74:
                    a8:df:32:bc:bb:b1:a2:8f:44:82:7e:2f:bc:f1:54:
                    cf:2e:ae:c0:c8:e6:60:1e:45:56:b3:05:a9:60:65:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B6:4B:03:1B:94:F2:6C:F1:07:15:D4:9E:46:21:49:86:1F:49:6A
            X509v3 Authority Key Identifier:
                keyid:AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e203237393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:7f:59:d2:a1:af:13:83:9b:96:4d:9c:8c:ad:64:a5:75:
         ad:00:dc:b5:5d:ff:d2:18:67:d4:a6:3d:36:04:db:ca:17:46:
         8d:53:52:63:69:40:77:f9:dd:60:c0:60:f1:74:82:89:6d:e9:
         68:a8:aa:38:4b:01:be:8a:dd:e8:12:d2:e2:cb:dd:1a:84:3b:
         8a:3b:66:f9:26:71:35:b0:0c:0c:c9:c0:ed:79:ad:a5:cd:7d:
         61:99:13:78:70:1d:55:27:28:eb:ce:85:07:4c:06:18:73:db:
         e4:71:41:88:99:1e:d4:e7:d5:52:c5:29:0e:ab:66:30:fa:61:
         08:d0:99:0f:02:1e:43:bb:90:09:a9:75:70:28:83:9b:d1:65:
         54:ad:cc:11:03:f3:be:67:53:26:c5:44:34:8a:94:fb:25:5b:
         e4:ed:b9:ad:ed:27:a5:47:9a:64:11:f5:61:85:2e:e4:4b:ea:
         24:95:64:c6:79:89:68:dc:4e:ab:d9:9a:aa:3b:cb:24:12:4d:
         59:67:98:43:43:ad:6e:5e:02:dd:80:c4:7f:ba:f7:9b:64:03:
         f4:9c:59:35:25:51:72:97:ca:2a:e9:4e:e8:26:25:d6:7e:14:
         1c:42:26:0f:4b:ad:b0:b2:09:f2:3f:93:d9:af:43:1e:98:7a:
         5f:9e:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:52:53 2025 by rpki-client