Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/323830313a31313a343830303a3a2f34382d3438203d3e20323639383530.roa
File:                     323830313a31313a343830303a3a2f34382d3438203d3e20323639383530.roa (raw, json)
Hash identifier:          6C9PDfp7GH4kXZaQc3wvg7xX776LzPmKmn6yHmvRR5I=
Subject key identifier:   7A:C8:B0:D3:B3:74:73:D1:34:CD:8C:CD:45:74:1B:E8:98:2A:29:F6
Certificate issuer:       /CN=55321E2845B43924431AF187D47BBD4651E854AF
Certificate serial:       5697AE24BD9408EFDAF3B70B6E9916A6AC170F17
Authority key identifier: 55:32:1E:28:45:B4:39:24:43:1A:F1:87:D4:7B:BD:46:51:E8:54:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55321E2845B43924431AF187D47BBD4651E854AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/323830313a31313a343830303a3a2f34382d3438203d3e20323639383530.roa
Signing time:             Tue 04 Feb 2025 18:16:13 +0000
ROA not before:           Tue 04 Feb 2025 18:11:13 +0000
ROA not after:            Tue 03 Feb 2026 18:16:13 +0000
asID:                     269850
IP address blocks:        2801:11:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/55321E2845B43924431AF187D47BBD4651E854AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/55321E2845B43924431AF187D47BBD4651E854AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55321E2845B43924431AF187D47BBD4651E854AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:97:ae:24:bd:94:08:ef:da:f3:b7:0b:6e:99:16:a6:ac:17:0f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55321E2845B43924431AF187D47BBD4651E854AF
        Validity
            Not Before: Feb  4 18:11:13 2025 GMT
            Not After : Feb  3 18:16:13 2026 GMT
        Subject: CN=7AC8B0D3B37473D134CD8CCD45741BE8982A29F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:ba:69:c8:89:57:a3:b7:49:02:bc:3c:74:
                    b5:51:44:f0:b5:4d:a1:cc:bb:46:90:97:37:cb:d2:
                    80:04:18:f5:3f:08:da:0f:5d:93:da:8f:3b:67:11:
                    af:97:22:5d:1d:37:45:86:47:6a:8c:9a:21:81:86:
                    bc:9f:04:04:6f:53:50:74:8b:a3:61:f1:0f:08:6d:
                    5d:cc:fa:3c:56:b0:de:0b:41:96:8a:29:b9:7c:9e:
                    fb:eb:67:08:8c:82:34:0a:e7:dc:5c:fe:81:73:91:
                    15:e9:d2:11:3f:83:31:37:25:3b:48:8f:c2:4c:92:
                    43:8a:82:97:c7:a4:3e:11:40:d2:ec:60:4f:88:e8:
                    fc:81:c4:48:11:ac:7a:90:1b:70:47:86:76:35:75:
                    57:c1:4a:24:9a:01:31:e7:97:aa:a1:e3:c8:27:19:
                    69:90:53:51:d9:42:4d:4f:e0:8c:32:cb:3a:e3:fa:
                    d9:a9:27:b6:e3:a8:5a:ea:3a:3d:56:ed:ac:1a:9f:
                    f9:7f:8e:a1:85:c9:cd:15:ff:99:c7:58:cd:9e:ec:
                    2e:74:ef:89:ec:88:c2:ea:a0:83:57:bd:53:23:82:
                    d6:e7:c1:32:1a:f5:91:b2:50:49:15:82:b3:3a:30:
                    59:24:b6:2f:d6:1e:83:2c:12:56:92:37:5a:e7:3f:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C8:B0:D3:B3:74:73:D1:34:CD:8C:CD:45:74:1B:E8:98:2A:29:F6
            X509v3 Authority Key Identifier:
                keyid:55:32:1E:28:45:B4:39:24:43:1A:F1:87:D4:7B:BD:46:51:E8:54:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/55321E2845B43924431AF187D47BBD4651E854AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55321E2845B43924431AF187D47BBD4651E854AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/323830313a31313a343830303a3a2f34382d3438203d3e20323639383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:dd:59:68:ad:67:84:8e:30:d1:15:82:4b:f9:c7:f6:9a:c0:
         9f:49:3c:35:3f:02:5c:7a:f4:a6:f1:a0:ce:a6:b6:91:64:db:
         fd:66:ac:53:98:c8:38:23:20:72:e9:53:67:0a:0e:28:36:bb:
         9a:5d:b0:df:4b:0a:0f:1b:6b:2a:4a:38:f8:81:d9:45:9e:97:
         ca:c0:69:9a:82:59:3e:03:0f:65:d7:13:48:f1:61:2c:fe:3d:
         56:76:9b:ab:2c:d9:0b:d4:8a:d8:8d:31:81:1b:57:5f:86:b8:
         bb:1b:d4:61:60:f5:ab:33:11:3f:5f:6f:f2:39:96:bf:7f:12:
         5e:da:f3:d0:d0:65:57:f6:f0:b6:c6:82:11:7e:f4:4a:75:0d:
         2f:d5:8f:e9:af:d6:78:56:f8:52:da:fa:5d:ec:39:0f:75:c5:
         94:f8:cf:ee:73:57:40:38:e3:1c:bd:db:19:a7:d2:36:57:b9:
         a6:8c:a1:b5:f7:9c:70:85:d0:b4:28:8e:79:f6:fd:7b:a7:6b:
         45:a2:ee:90:9c:ba:bc:d7:47:38:49:cd:14:ba:d4:9c:39:8a:
         f3:d7:f8:6b:3e:db:a7:e0:28:67:78:48:3a:67:d1:bf:b4:ff:
         d8:b7:37:16:5a:d5:eb:78:2a:8b:0b:e0:84:7f:08:d1:7a:21:
         c1:04:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:00 2025 by rpki-client