Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a313a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3133323a313a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          uFg9uRMZ6gZbNK+5dezuusxBQwRuZK7RPMAYtxbYjgA=
Subject key identifier:   AB:85:A6:62:C8:B4:FD:CA:E8:1B:93:A2:E1:1E:5F:DB:EE:68:E1:6A
Certificate issuer:       /CN=8418A0277DF0710EAC14EF1F1DB16B17D396B35C
Certificate serial:       1A9EEC031459D6027F52D0583C83D5D80B25D0EE
Authority key identifier: 84:18:A0:27:7D:F0:71:0E:AC:14:EF:1F:1D:B1:6B:17:D3:96:B3:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a313a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:53:34 +0000
ROA not before:           Tue 04 Feb 2025 18:48:34 +0000
ROA not after:            Tue 03 Feb 2026 18:53:34 +0000
asID:                     18747
IP address blocks:        2801:132:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9e:ec:03:14:59:d6:02:7f:52:d0:58:3c:83:d5:d8:0b:25:d0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8418A0277DF0710EAC14EF1F1DB16B17D396B35C
        Validity
            Not Before: Feb  4 18:48:34 2025 GMT
            Not After : Feb  3 18:53:34 2026 GMT
        Subject: CN=AB85A662C8B4FDCAE81B93A2E11E5FDBEE68E16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:29:06:8d:f6:3b:af:32:20:12:5e:9d:5c:
                    a2:cf:a4:54:8f:67:80:3e:80:ed:22:ae:62:f6:4c:
                    2a:ed:66:e8:36:61:95:97:57:36:d3:e0:2e:47:0e:
                    97:61:64:86:84:e8:54:25:06:25:39:b1:45:49:ca:
                    37:66:cf:bc:cc:64:dd:26:cc:76:e5:1e:22:6c:75:
                    89:e3:4f:97:59:ec:3f:05:d9:2e:a5:fa:80:b9:aa:
                    65:cd:a5:be:45:de:cd:40:6d:bd:24:f6:e7:7e:2b:
                    6c:fc:84:cd:04:4a:e1:c9:5f:2d:94:3d:e5:3a:2e:
                    7c:d3:71:d1:06:32:24:a0:ee:a8:87:5a:44:0d:3d:
                    eb:61:64:10:b6:38:58:b3:f0:16:ff:fe:19:e1:ed:
                    25:94:b2:36:e1:56:80:c8:81:23:1c:5b:56:4e:06:
                    14:61:02:d5:ca:66:3a:0a:69:9e:7c:af:f5:59:96:
                    7e:48:b3:d4:21:6f:8e:af:09:c7:88:1a:6d:1b:37:
                    8c:ce:b0:ee:63:63:3f:2c:a4:b1:09:a3:70:9e:63:
                    74:17:07:67:d4:f8:1e:d1:c6:88:81:71:83:d8:72:
                    95:a0:b9:fb:0d:08:2e:50:10:08:57:02:ba:9d:10:
                    3f:ea:49:79:a3:2a:85:31:30:73:dc:5e:0f:e7:66:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:A6:62:C8:B4:FD:CA:E8:1B:93:A2:E1:1E:5F:DB:EE:68:E1:6A
            X509v3 Authority Key Identifier:
                keyid:84:18:A0:27:7D:F0:71:0E:AC:14:EF:1F:1D:B1:6B:17:D3:96:B3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a313a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:132:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:a6:a5:43:a5:04:4f:26:b6:a1:7a:60:50:f1:ce:84:99:d1:
         00:08:8b:a6:53:c6:e3:2c:29:4f:0c:84:f2:45:d1:91:ee:0c:
         66:45:5d:42:a7:69:8b:c0:f4:93:29:97:1e:74:52:02:a6:a3:
         b7:53:a5:e8:2e:b5:b8:57:36:12:11:8f:56:dd:21:b6:d1:29:
         c7:1e:cc:b4:62:df:ea:33:f5:6f:96:ff:f3:ef:9a:db:de:65:
         ef:06:88:ae:e5:29:18:80:bd:3a:f5:c2:84:aa:d9:82:eb:74:
         78:3c:8c:24:82:22:72:b6:0c:4d:53:2c:d4:d1:08:39:26:d7:
         bd:21:1e:12:09:c3:1b:2b:88:f6:af:6f:25:0d:34:50:b9:df:
         c4:90:9d:13:48:4d:c6:a8:15:e4:b2:46:93:c9:78:e5:19:dc:
         a4:de:97:60:26:0b:0b:f5:f6:0e:13:52:40:12:13:2c:55:69:
         d2:e5:2e:1f:0f:77:7c:3a:10:73:24:3d:f5:35:50:b0:22:cf:
         5c:31:0d:bc:9c:60:f6:82:51:56:22:3c:4c:2a:a7:d7:76:5e:
         72:01:fb:8d:6f:27:4b:65:f2:ed:74:0a:65:49:77:b2:4e:d2:
         50:ca:c7:05:5d:c3:8e:22:bf:48:34:17:9e:e8:cc:13:b9:85:
         fc:dc:39:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:06 2025 by rpki-client