Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e203238303030.roa
File:                     323830313a31373a373830303a3a2f34382d3438203d3e203238303030.roa (raw, json)
Hash identifier:          PTlCLLoIJAEhz/2JTA8erBi7rJg2nthB+KoEq3vxf3U=
Subject key identifier:   DA:16:9B:75:76:96:8A:2C:51:76:A6:67:E2:AC:47:33:11:E4:8E:88
Certificate issuer:       /CN=DD284B15EC8E065D133B2F9315470527232784D4
Certificate serial:       7B5334D5362085567142C8A7652CC1CA869F6D2B
Authority key identifier: DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e203238303030.roa
Signing time:             Mon 31 Mar 2025 05:40:00 +0000
ROA not before:           Mon 31 Mar 2025 05:35:00 +0000
ROA not after:            Mon 30 Mar 2026 05:40:00 +0000
asID:                     28000
IP address blocks:        2801:17:7800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:53:34:d5:36:20:85:56:71:42:c8:a7:65:2c:c1:ca:86:9f:6d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD284B15EC8E065D133B2F9315470527232784D4
        Validity
            Not Before: Mar 31 05:35:00 2025 GMT
            Not After : Mar 30 05:40:00 2026 GMT
        Subject: CN=DA169B7576968A2C5176A667E2AC473311E48E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:27:4e:69:4e:2e:eb:be:20:bd:48:df:8b:
                    d7:b7:60:7f:1c:eb:71:5e:35:0a:02:b1:2c:f9:ac:
                    fd:e8:4e:01:b6:f4:b8:db:d7:f2:9f:ae:7c:cc:3f:
                    ec:84:2e:1e:0d:a2:97:0b:c3:cd:1e:4c:17:05:0c:
                    c0:5a:c7:66:16:11:8a:48:5e:7e:a0:f2:a8:be:62:
                    47:72:90:0f:0c:3c:97:20:ba:87:be:12:85:bf:8b:
                    18:94:aa:cb:9c:cc:20:d6:aa:7a:97:67:74:e4:b9:
                    4d:ec:a5:90:51:e9:2b:6d:a4:eb:81:10:62:fb:2c:
                    e2:6b:90:b5:8f:4f:61:92:d4:89:b1:9e:52:a5:eb:
                    30:f1:bf:34:1d:ab:5e:92:9d:aa:87:aa:72:64:86:
                    17:2f:53:2f:af:f3:8f:9c:b7:07:76:51:48:90:23:
                    c3:f2:28:ce:1a:5b:80:28:c5:b8:f4:75:2d:1a:15:
                    60:54:36:c0:7a:8e:a0:06:5e:f7:16:46:28:ee:f2:
                    43:83:d5:57:ff:11:fa:e6:3f:2e:f4:53:9e:0e:74:
                    e1:8d:fe:0c:57:d8:aa:97:2f:41:ee:d9:e3:9c:d5:
                    5a:e4:ce:fe:28:c3:e9:3c:6a:49:8c:70:32:9b:0b:
                    ad:bf:ef:7b:5e:61:43:c2:93:28:dd:49:b8:cd:52:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:16:9B:75:76:96:8A:2C:51:76:A6:67:E2:AC:47:33:11:E4:8E:88
            X509v3 Authority Key Identifier:
                keyid:DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:a9:5c:83:f9:0a:81:95:47:29:7b:1a:21:32:20:38:af:
         4f:61:6e:e7:cb:db:a1:95:42:52:f4:da:43:aa:62:35:92:46:
         ed:4b:2b:9c:7c:53:5d:90:aa:2d:82:11:64:8d:b0:13:1d:ed:
         15:9f:7c:2b:05:b2:19:a0:1b:56:99:14:b6:00:79:27:65:88:
         88:e9:dd:ae:f4:03:95:7b:c4:a1:65:14:ce:4a:ec:1b:84:6e:
         36:84:7c:47:26:7b:63:8c:82:68:33:4f:3c:46:84:08:54:5f:
         ec:34:03:08:75:06:83:37:86:13:b0:fc:5d:17:39:85:ad:4a:
         59:3e:92:80:a4:60:ee:f0:aa:f9:27:a8:30:48:92:f9:b6:ff:
         c7:10:32:39:ba:e0:9d:fb:c3:e8:15:e0:3c:dd:51:ba:95:b2:
         a8:45:77:64:f1:f2:4e:e5:3b:72:fc:12:35:0d:96:c4:cc:f9:
         88:04:87:2d:b6:49:1e:aa:a5:eb:67:77:7d:21:f4:3f:91:56:
         8e:58:06:70:7f:ed:72:78:09:95:14:94:46:29:f4:43:83:f3:
         4d:e6:33:2a:49:01:46:84:ac:e4:84:f7:0f:38:61:4a:d1:03:
         ee:a5:95:85:4f:45:b1:09:f9:db:29:3e:cd:a1:cf:dc:8d:d5:
         78:a6:8b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:03 2025 by rpki-client