Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/323830313a31373a653030303a3a2f34382d3438203d3e20323633383130.roa
File:                     323830313a31373a653030303a3a2f34382d3438203d3e20323633383130.roa (raw, json)
Hash identifier:          aGgsmjQpbenLYqcLgY4OS11CRgKnRd1p1vTwX/STvmU=
Subject key identifier:   5D:7B:74:73:50:B3:43:C2:26:A3:2B:80:84:43:9C:32:A5:5C:29:7A
Certificate issuer:       /CN=A7B8DED03E12C864EE6F1C50B966C80D93223151
Certificate serial:       62D1B2B7F07625521AB663BF0480F64D6BB9B1FF
Authority key identifier: A7:B8:DE:D0:3E:12:C8:64:EE:6F:1C:50:B9:66:C8:0D:93:22:31:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/323830313a31373a653030303a3a2f34382d3438203d3e20323633383130.roa
Signing time:             Tue 04 Feb 2025 18:04:16 +0000
ROA not before:           Tue 04 Feb 2025 17:59:16 +0000
ROA not after:            Tue 03 Feb 2026 18:04:16 +0000
asID:                     263810
IP address blocks:        2801:17:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d1:b2:b7:f0:76:25:52:1a:b6:63:bf:04:80:f6:4d:6b:b9:b1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7B8DED03E12C864EE6F1C50B966C80D93223151
        Validity
            Not Before: Feb  4 17:59:16 2025 GMT
            Not After : Feb  3 18:04:16 2026 GMT
        Subject: CN=5D7B747350B343C226A32B8084439C32A55C297A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:c8:d1:41:c5:a7:13:9d:1f:80:a2:b1:3c:
                    40:9e:b2:83:fc:23:9b:9c:ea:60:e7:ff:71:86:f7:
                    49:ef:6c:a3:be:62:3e:29:f8:d7:df:e7:7d:ba:6f:
                    d4:b9:01:d0:1b:d1:db:e4:ec:81:88:ed:c2:3a:5d:
                    d0:66:1e:a3:0b:c8:ab:3e:2b:94:f0:8c:37:9e:52:
                    55:b4:32:97:32:d1:ef:92:c0:3b:7b:49:1b:21:3b:
                    ef:27:80:a4:47:98:5d:e7:d0:57:b1:74:c3:89:02:
                    97:a1:38:3c:fd:11:9e:8b:7f:90:aa:dd:6c:79:f5:
                    ca:2f:09:dc:85:43:b6:36:29:90:9a:26:fb:90:d1:
                    81:ba:a1:a6:4f:a0:12:4e:37:12:a0:c4:73:bc:9c:
                    43:61:48:4b:43:81:e9:33:b1:01:77:a6:5e:4e:1d:
                    58:9a:02:25:98:6a:b1:05:ce:94:4f:e7:32:23:4d:
                    13:29:4d:23:ea:bc:5f:fa:d4:b0:d2:b6:62:34:5b:
                    48:12:1e:bf:6f:0d:e1:ed:7e:58:dc:19:d3:55:c6:
                    1f:35:00:16:5d:9b:fe:ae:8d:63:c1:01:4f:7f:15:
                    9b:3e:23:7b:85:0c:f4:b5:b2:89:0a:9d:ee:7b:75:
                    57:f5:91:dc:96:8b:48:2a:3f:6f:83:1b:62:77:e8:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7B:74:73:50:B3:43:C2:26:A3:2B:80:84:43:9C:32:A5:5C:29:7A
            X509v3 Authority Key Identifier:
                keyid:A7:B8:DE:D0:3E:12:C8:64:EE:6F:1C:50:B9:66:C8:0D:93:22:31:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/323830313a31373a653030303a3a2f34382d3438203d3e20323633383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:71:33:11:1a:f8:fc:cb:3c:1b:e1:68:d7:27:4e:af:73:
         af:f6:b7:ed:07:44:6a:ff:50:38:e2:f7:32:e6:32:eb:0a:3c:
         85:ad:19:30:73:93:e3:7e:79:d4:76:ea:8b:69:a6:f6:a0:4c:
         72:40:65:51:34:87:8f:67:6d:f3:35:cb:fc:05:5f:da:2c:77:
         62:25:19:7a:e2:5f:59:6c:c7:3b:50:0e:f4:72:e9:52:16:7c:
         f9:21:5d:3b:ea:1e:93:af:2b:c4:a9:2e:9f:3a:5e:82:e3:49:
         9d:ba:f6:12:a1:76:52:d9:63:6b:7a:ea:df:48:bf:07:e0:f6:
         a4:0b:a5:d2:58:00:fa:dc:b2:43:42:21:8d:0a:65:6b:6f:19:
         5b:ab:ae:b7:da:76:80:55:d3:e1:ba:05:27:e6:25:9d:2d:50:
         46:0b:f9:77:36:77:fa:50:04:92:10:7b:4c:23:8d:d6:77:8d:
         d1:19:9f:74:a9:a2:fc:72:89:2e:5f:d6:a7:2b:54:bc:a9:d2:
         19:a9:f9:9d:94:da:ef:b0:07:75:f4:fd:87:69:7c:1c:ea:19:
         72:98:c1:42:9a:d0:9c:ad:ef:2d:42:e2:bd:0d:7a:9c:0a:7b:
         59:e0:53:ae:cb:95:40:af:1f:1b:ad:12:cd:a2:ae:49:da:ed:
         fb:bf:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:37:25 2025 by rpki-client