Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/323830313a31373a333030303a3a2f34382d3438203d3e203231373635.roa
File:                     323830313a31373a333030303a3a2f34382d3438203d3e203231373635.roa (raw, json)
Hash identifier:          qGNJwybKc+RY5WFcwC7ZjpCLewxniZUIHtx3LCIvXGE=
Subject key identifier:   32:23:E4:24:68:EB:03:3D:65:E7:CA:2E:2F:2A:0B:AC:A6:99:29:35
Certificate issuer:       /CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE
Certificate serial:       53665D99B85F0B7FE70BE95876A0B75F9A57833C
Authority key identifier: F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/323830313a31373a333030303a3a2f34382d3438203d3e203231373635.roa
Signing time:             Tue 04 Feb 2025 18:02:08 +0000
ROA not before:           Tue 04 Feb 2025 17:57:08 +0000
ROA not after:            Tue 03 Feb 2026 18:02:08 +0000
asID:                     21765
IP address blocks:        2801:17:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 02:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:66:5d:99:b8:5f:0b:7f:e7:0b:e9:58:76:a0:b7:5f:9a:57:83:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE
        Validity
            Not Before: Feb  4 17:57:08 2025 GMT
            Not After : Feb  3 18:02:08 2026 GMT
        Subject: CN=3223E42468EB033D65E7CA2E2F2A0BACA6992935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:84:db:3a:9a:b8:7f:c1:dd:b9:c8:36:d4:
                    fe:17:c9:a9:84:b6:e7:61:4d:cc:c3:0c:64:6f:d4:
                    5f:e9:23:b4:85:1f:4e:f1:3c:1e:e0:16:a8:ff:54:
                    97:73:10:a3:dc:20:68:cb:ce:4d:82:c7:88:43:d2:
                    0a:e5:fe:de:21:1a:a8:b8:d6:cb:a2:93:a0:cd:05:
                    c2:2a:3a:4e:95:00:db:6a:2b:9a:fd:18:b6:3b:69:
                    0e:ae:f4:db:85:b4:02:d2:5d:a0:10:55:69:15:e1:
                    64:d8:09:2e:31:97:31:b9:3e:01:aa:0b:b5:b4:3b:
                    0d:d8:8a:2c:e3:66:da:23:2b:f5:b9:0e:a0:92:97:
                    37:92:ef:fa:40:ff:4d:5e:67:02:27:a8:82:7c:76:
                    80:1a:b2:a4:ee:fe:6d:8f:47:b7:24:ad:f5:3c:88:
                    9c:49:3e:bc:81:68:c8:0f:5e:02:d5:80:3e:24:7e:
                    0e:6f:e9:78:eb:57:f8:73:f3:09:25:d7:39:78:f8:
                    5a:4a:ae:92:7a:a6:0a:fd:aa:e0:fc:6b:67:ef:41:
                    3c:2b:76:bc:d6:58:04:43:a2:a5:ee:4b:34:df:54:
                    19:58:da:60:46:eb:58:da:f6:22:de:b5:6e:26:5e:
                    e7:79:50:14:c8:b5:78:f1:57:46:b3:e6:98:13:1a:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:23:E4:24:68:EB:03:3D:65:E7:CA:2E:2F:2A:0B:AC:A6:99:29:35
            X509v3 Authority Key Identifier:
                keyid:F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/323830313a31373a333030303a3a2f34382d3438203d3e203231373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:72:0c:78:de:ef:9e:af:ac:9f:7e:25:ee:fd:37:1b:b3:
         33:9f:8b:7b:1e:41:ae:c3:d7:5e:6f:6c:bf:7f:15:04:a3:85:
         79:e3:ea:3a:09:d5:17:30:3a:f1:d0:41:67:19:d7:ea:d9:63:
         94:dd:f6:1c:1c:5b:0d:62:30:9e:3b:f3:4e:ab:b5:c0:bd:3a:
         8d:26:3e:1c:6e:d1:7d:60:be:a8:0d:9f:fa:b3:f3:b8:a8:4b:
         01:d5:ae:e3:a1:a4:d3:d8:c2:b8:27:ef:3f:5e:72:10:38:7e:
         cd:1f:e5:31:b4:45:88:62:65:d1:b8:e9:f1:fe:d1:ab:c5:f2:
         d8:1b:a0:08:fb:50:af:a6:f2:48:d6:71:1a:9c:30:d7:9e:d9:
         26:9c:34:5a:2c:5b:bd:47:e3:5f:b6:90:35:7f:bc:62:ab:10:
         04:df:11:79:5f:08:cc:a7:93:70:15:e2:51:3e:3d:38:c7:e4:
         e6:de:9b:6c:3a:46:c5:8e:9d:eb:7c:a1:55:ba:91:9b:58:fe:
         ec:91:b7:e8:d1:63:87:af:48:93:93:37:ac:17:e3:17:88:56:
         d1:6b:8c:a5:bd:47:14:ed:f5:91:eb:c0:46:9f:d2:8b:d9:9c:
         0f:e5:b6:da:fc:24:9e:5f:81:a3:b8:46:28:2d:d5:5c:31:d1:
         ad:7a:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:53:04 2025 by rpki-client