Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEA2FA2F57B432D11B6BA8B449D957DBEA156EC075DE78DB77F88B451CD5066D/0/323830313a3132613a3a2f34342d3434203d3e203237393531.roa
File:                     323830313a3132613a3a2f34342d3434203d3e203237393531.roa (raw, json)
Hash identifier:          kEkKAve75uBEnWjFvrfPO2hll8Xj+5i9klGucIeb/Ig=
Subject key identifier:   67:B3:D6:F7:9B:4F:E9:00:08:39:B5:E5:69:E1:A9:18:1C:57:CF:95
Certificate issuer:       /CN=F8040F2870250952B8D8FE9E2F571046E261C711
Certificate serial:       5D8A63421C29C2422D93E5CD68A1D0C4D035DF2A
Authority key identifier: F8:04:0F:28:70:25:09:52:B8:D8:FE:9E:2F:57:10:46:E2:61:C7:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8040F2870250952B8D8FE9E2F571046E261C711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEA2FA2F57B432D11B6BA8B449D957DBEA156EC075DE78DB77F88B451CD5066D/0/323830313a3132613a3a2f34342d3434203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:43:00 +0000
ROA not before:           Tue 04 Feb 2025 18:38:00 +0000
ROA not after:            Tue 03 Feb 2026 18:43:00 +0000
asID:                     27951
IP address blocks:        2801:12a::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BEA2FA2F57B432D11B6BA8B449D957DBEA156EC075DE78DB77F88B451CD5066D/0/F8040F2870250952B8D8FE9E2F571046E261C711.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BEA2FA2F57B432D11B6BA8B449D957DBEA156EC075DE78DB77F88B451CD5066D/0/F8040F2870250952B8D8FE9E2F571046E261C711.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8040F2870250952B8D8FE9E2F571046E261C711.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8a:63:42:1c:29:c2:42:2d:93:e5:cd:68:a1:d0:c4:d0:35:df:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8040F2870250952B8D8FE9E2F571046E261C711
        Validity
            Not Before: Feb  4 18:38:00 2025 GMT
            Not After : Feb  3 18:43:00 2026 GMT
        Subject: CN=67B3D6F79B4FE9000839B5E569E1A9181C57CF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:23:db:7a:77:6e:df:bd:65:66:e5:16:5e:
                    0e:1b:b4:ef:6a:00:34:01:a1:43:30:1b:db:e2:16:
                    2c:ef:37:18:70:46:9d:83:52:0a:c6:7a:d8:f8:e8:
                    a5:11:6e:3a:d9:21:b6:97:aa:88:83:50:b9:32:c3:
                    03:30:c0:ad:90:49:9a:9d:2e:99:2c:61:e9:41:7b:
                    3a:66:6c:ca:db:a2:39:de:11:12:6f:c3:8b:89:22:
                    d9:28:50:d1:cc:7a:3b:63:d9:20:3c:da:df:29:9d:
                    5a:3f:ad:e7:88:ed:82:42:b2:12:76:45:cc:d6:7b:
                    24:6f:20:52:0f:0d:fe:5c:4b:30:4b:27:13:84:b0:
                    cd:6e:43:91:3a:a0:b6:25:df:5a:94:5f:b0:d1:e1:
                    48:06:6a:c0:40:2d:1c:ec:27:48:a7:c1:8a:9b:74:
                    76:c4:d0:42:58:6e:db:77:b9:d1:4f:6c:89:24:32:
                    31:23:da:b8:72:54:45:bb:42:85:84:e4:dd:32:20:
                    23:ad:0e:6f:a6:f7:af:31:2e:c6:86:05:68:44:25:
                    c3:8e:84:24:52:94:84:3f:c7:7a:3e:06:1f:42:50:
                    c3:c3:0a:be:86:75:a9:b8:d2:d6:51:dd:7f:09:d8:
                    d2:86:37:30:14:29:a0:fe:ea:5e:0c:e9:d9:c9:15:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:D6:F7:9B:4F:E9:00:08:39:B5:E5:69:E1:A9:18:1C:57:CF:95
            X509v3 Authority Key Identifier:
                keyid:F8:04:0F:28:70:25:09:52:B8:D8:FE:9E:2F:57:10:46:E2:61:C7:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEA2FA2F57B432D11B6BA8B449D957DBEA156EC075DE78DB77F88B451CD5066D/0/F8040F2870250952B8D8FE9E2F571046E261C711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8040F2870250952B8D8FE9E2F571046E261C711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA2FA2F57B432D11B6BA8B449D957DBEA156EC075DE78DB77F88B451CD5066D/0/323830313a3132613a3a2f34342d3434203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12a::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:01:5b:6d:c9:2b:4a:72:9d:2b:7e:cb:25:64:2c:f2:bd:a7:
         72:c9:0a:0f:30:fc:eb:1e:ef:59:c7:b6:3d:fd:1d:c7:d8:ab:
         8f:b0:8d:f9:8f:7d:c5:6d:35:2f:51:6a:c3:67:9f:0e:ca:c3:
         92:52:b5:50:87:ab:ea:93:dc:cb:77:83:09:f5:1e:53:0a:dd:
         f0:02:01:69:45:a4:0b:d7:3b:14:93:63:3a:49:aa:a9:20:70:
         b3:41:ed:ab:11:dd:3b:7c:a5:d9:d7:42:4d:5a:91:e3:88:7c:
         09:83:de:87:09:e5:86:45:84:89:07:c1:1c:b5:c6:77:ea:f9:
         86:bf:01:d8:e5:1c:cb:8c:d5:2a:14:1b:dd:36:bd:51:f5:f5:
         e5:db:7c:25:0e:78:89:7b:6d:0f:e7:8c:ad:99:83:42:d5:05:
         91:50:bc:80:6e:c8:c3:5f:cb:33:84:93:20:49:8c:33:ee:b1:
         57:5a:56:4a:0e:be:6f:3b:a5:10:a1:c0:45:49:09:df:35:1d:
         a9:d8:c3:c3:04:4b:17:79:06:83:34:84:85:38:3c:b5:16:4f:
         a9:0c:5a:0e:1f:1b:29:53:da:73:3e:01:41:d5:3f:79:94:04:
         85:83:d5:5a:10:c7:30:d7:01:d5:dc:28:fc:b2:6b:d0:95:7c:
         64:b3:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:26 2025 by rpki-client