Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/323830313a3165343a3a2f34322d3432203d3e203237393531.roa
File:                     323830313a3165343a3a2f34322d3432203d3e203237393531.roa (raw, json)
Hash identifier:          5R7Zl559JVSn42X5Vl/PMuBwQQRCwke4WiTVcbg2cCg=
Subject key identifier:   D0:DB:2A:48:66:BE:BF:B9:AC:93:0F:7E:AF:C6:BA:B2:9E:8D:A6:0B
Certificate issuer:       /CN=5506D181AACC9E9E3171B16979FFCAE289CE6507
Certificate serial:       5E0D17C27FE7CC6C99F480667033F467C556B155
Authority key identifier: 55:06:D1:81:AA:CC:9E:9E:31:71:B1:69:79:FF:CA:E2:89:CE:65:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/323830313a3165343a3a2f34322d3432203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:03:18 +0000
ROA not before:           Tue 04 Feb 2025 17:58:18 +0000
ROA not after:            Tue 03 Feb 2026 18:03:18 +0000
asID:                     27951
IP address blocks:        2801:1e4::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0d:17:c2:7f:e7:cc:6c:99:f4:80:66:70:33:f4:67:c5:56:b1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5506D181AACC9E9E3171B16979FFCAE289CE6507
        Validity
            Not Before: Feb  4 17:58:18 2025 GMT
            Not After : Feb  3 18:03:18 2026 GMT
        Subject: CN=D0DB2A4866BEBFB9AC930F7EAFC6BAB29E8DA60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:0a:c3:b6:24:d0:ce:db:84:2b:df:f7:f6:
                    df:e7:d4:a2:65:e1:83:6c:6f:90:57:5f:34:30:33:
                    7a:bd:dd:a9:0e:d0:09:e3:d8:0a:99:ae:5b:9a:d6:
                    ed:4b:56:75:11:c4:b9:bd:c7:12:0a:35:c0:f6:b7:
                    c5:c0:e9:31:80:c8:16:99:0d:11:c2:e3:b7:05:55:
                    a2:9c:a9:46:1a:3f:41:95:88:95:b9:ef:4a:d6:f3:
                    25:89:7d:6f:28:0a:27:94:fe:2d:7e:c8:ea:a5:5c:
                    c6:da:d1:62:95:bf:b1:56:77:b8:a7:7c:20:61:13:
                    dc:cf:2d:06:d6:f6:8a:59:ec:4a:c5:f8:31:bb:2d:
                    db:5e:f4:40:6f:e4:90:6f:e8:c9:26:16:9e:4f:01:
                    53:40:3f:61:d1:ad:14:df:5d:e5:38:eb:1e:48:22:
                    c0:59:f0:34:9c:9a:8a:b5:d9:b0:71:f0:e8:76:50:
                    34:aa:4f:dc:e7:17:4d:8b:61:db:55:90:6c:3f:65:
                    a8:37:74:de:ef:aa:07:09:24:5c:8d:b7:11:53:f9:
                    9a:f7:7e:76:2c:0d:e1:b1:b6:5f:84:8c:45:bd:05:
                    79:ec:58:05:46:5d:98:55:99:e3:5d:ac:95:bf:c9:
                    39:fb:ab:8a:fd:0f:f1:25:e5:5f:ff:43:1c:45:83:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:2A:48:66:BE:BF:B9:AC:93:0F:7E:AF:C6:BA:B2:9E:8D:A6:0B
            X509v3 Authority Key Identifier:
                keyid:55:06:D1:81:AA:CC:9E:9E:31:71:B1:69:79:FF:CA:E2:89:CE:65:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/323830313a3165343a3a2f34322d3432203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e4::/42

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:91:29:30:36:11:9d:c3:c6:8c:2c:17:14:c4:e1:ea:ae:
         05:f5:f5:20:84:c5:22:cf:08:99:13:58:86:1e:57:db:44:b7:
         1a:47:39:b0:05:cc:13:1c:3e:93:2c:16:aa:fd:b7:f0:e2:cd:
         04:78:4d:65:ed:f9:35:cc:3b:f1:f2:40:e7:5d:7d:7f:b7:3c:
         a0:2b:73:2a:35:bf:d3:b8:6a:36:53:a7:73:b7:3c:39:6d:41:
         76:a9:12:9e:7e:b6:19:73:fb:7c:2c:7b:e8:4d:94:4f:8f:1a:
         13:51:67:ff:ab:b6:ef:c4:55:68:30:27:8f:fa:90:06:cd:18:
         27:fd:27:73:e2:28:8b:cc:41:7e:c8:1e:ff:48:db:d4:b8:f6:
         b9:88:c6:a8:35:36:e5:8e:f9:68:c3:3f:37:28:cc:a7:40:33:
         8c:f0:10:aa:b0:a6:dc:81:4b:a5:b1:46:99:68:eb:21:61:1e:
         a0:43:12:5f:7a:a8:bd:97:e6:71:16:4d:41:67:cb:37:ac:d6:
         14:94:c2:6f:f1:e8:b6:f3:98:25:39:2f:d2:67:dc:59:39:e4:
         55:24:5c:7d:d0:63:c6:f1:5b:94:42:9d:76:8a:55:a6:31:45:
         6f:c9:6e:44:37:67:11:69:3b:3f:32:e5:21:fe:20:03:3c:32:
         36:68:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:41 2025 by rpki-client