Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/323830313a31643a313830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31643a313830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          onr4R3R7pEfAOikcIiCYfeS12+/DqYfUF2Kxh/9oS6Q=
Subject key identifier:   42:B3:5D:9D:1F:E9:70:15:F6:81:42:40:42:3C:CF:AC:B3:A1:51:3E
Certificate issuer:       /CN=A3533827D639847A1C29B774A395C0442B169432
Certificate serial:       644355AA7BF8A0E35C19E394CE22B95B1C83224D
Authority key identifier: A3:53:38:27:D6:39:84:7A:1C:29:B7:74:A3:95:C0:44:2B:16:94:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3533827D639847A1C29B774A395C0442B169432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/323830313a31643a313830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:08:31 +0000
ROA not before:           Tue 04 Feb 2025 18:03:31 +0000
ROA not after:            Tue 03 Feb 2026 18:08:31 +0000
asID:                     262589
IP address blocks:        2801:1d:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/A3533827D639847A1C29B774A395C0442B169432.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/A3533827D639847A1C29B774A395C0442B169432.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3533827D639847A1C29B774A395C0442B169432.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:43:55:aa:7b:f8:a0:e3:5c:19:e3:94:ce:22:b9:5b:1c:83:22:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3533827D639847A1C29B774A395C0442B169432
        Validity
            Not Before: Feb  4 18:03:31 2025 GMT
            Not After : Feb  3 18:08:31 2026 GMT
        Subject: CN=42B35D9D1FE97015F6814240423CCFACB3A1513E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:52:4e:1f:db:9a:13:75:09:7f:bc:97:8c:56:
                    26:aa:83:09:f3:34:d1:d2:6e:58:ce:aa:35:f4:df:
                    a5:b0:74:2d:05:eb:63:c3:6d:c1:8d:b9:91:6c:3d:
                    53:8d:6b:36:84:47:24:f7:e9:f6:01:ff:d3:bb:dd:
                    7f:79:78:dd:69:6c:7d:69:10:42:7b:ff:7b:60:ce:
                    bd:01:47:20:16:cf:59:81:fe:89:45:14:6c:d4:ec:
                    43:ed:7d:8b:7b:2f:b3:9e:ff:96:7d:62:9e:84:4f:
                    a3:40:88:0f:e1:03:2e:d8:0b:28:0e:6a:9a:fc:73:
                    01:ef:11:47:d4:51:6f:e6:80:ee:68:51:38:59:65:
                    a8:f5:71:02:44:8c:56:3e:02:4e:1d:21:1d:3f:23:
                    ac:2f:f0:d2:2b:91:5d:0c:a2:a5:00:36:ec:99:87:
                    e8:c7:94:63:3b:b4:50:e3:5b:c6:6b:c6:f9:6f:05:
                    26:0b:35:34:f0:36:d2:72:8e:5f:75:2f:4b:7b:c9:
                    e2:66:de:c7:69:cf:7b:a6:6f:55:e3:2d:9a:7f:52:
                    55:0f:c7:ba:6b:da:f7:7b:fb:96:c3:ac:dd:ed:8c:
                    2e:dd:7f:da:74:6f:1d:70:65:d3:85:c5:64:05:de:
                    80:d1:59:fa:8b:5f:83:26:61:e7:fc:7f:0b:ed:57:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B3:5D:9D:1F:E9:70:15:F6:81:42:40:42:3C:CF:AC:B3:A1:51:3E
            X509v3 Authority Key Identifier:
                keyid:A3:53:38:27:D6:39:84:7A:1C:29:B7:74:A3:95:C0:44:2B:16:94:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/A3533827D639847A1C29B774A395C0442B169432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3533827D639847A1C29B774A395C0442B169432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/323830313a31643a313830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:d7:2b:d9:7e:10:30:75:90:f7:33:bc:74:66:0d:d3:b7:02:
         3c:d5:57:3b:aa:09:07:68:02:ed:ba:3d:11:b8:90:48:be:54:
         53:50:29:6e:f1:98:16:13:3c:19:2e:c4:2c:34:d5:bd:e1:28:
         79:d0:9a:43:3e:da:8b:dd:2d:5a:83:51:83:17:b5:3e:d5:32:
         e3:63:e9:e0:d2:8a:61:c6:5b:c1:0d:67:d4:38:29:7c:27:c1:
         ff:a8:8b:55:e9:93:be:5b:e7:e3:2d:fc:06:0f:00:e6:b3:6e:
         74:33:33:41:78:67:c0:ef:87:87:3f:86:f7:fe:bd:d8:fa:92:
         7b:72:d5:88:da:56:ad:db:9a:05:47:4a:07:81:8f:68:b5:56:
         db:cd:46:85:ba:9f:e3:7d:54:07:0b:ec:cd:0b:63:75:43:cc:
         08:69:a7:5b:39:62:4a:e3:a0:02:24:d8:20:57:99:be:4b:c3:
         4e:fd:b2:a6:3b:07:02:1c:30:85:79:8f:99:68:da:e0:fd:43:
         9b:e2:95:ea:75:3b:53:96:c1:79:5b:06:a3:44:4e:0b:16:c3:
         93:35:51:1f:75:b4:71:e4:14:75:78:fc:ed:cb:1f:9b:75:7d:
         7f:bc:30:50:cd:08:af:4b:32:9e:08:7f:9e:3c:63:e0:54:18:
         2e:2a:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:22 2025 by rpki-client