Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D78AFE1B09AE2AB36AAE07117460CD4C5F850FCC26C8D06CDCFE8C65154C55DA/0/323830313a31343a333030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31343a333030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          0x9xmQ3yCbYbjsOQSbndOohd8aVTpvJRMxqo9B/Wg2Q=
Subject key identifier:   55:F7:73:BF:BA:E4:F9:C9:39:4F:61:12:82:D0:00:50:CD:AA:F1:B5
Certificate issuer:       /CN=7DF603CAE9C79067576DBC7F5C0720AC7A3AE66C
Certificate serial:       2AC4A54F96A656201E03672C86A1CEFA73CC234D
Authority key identifier: 7D:F6:03:CA:E9:C7:90:67:57:6D:BC:7F:5C:07:20:AC:7A:3A:E6:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DF603CAE9C79067576DBC7F5C0720AC7A3AE66C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D78AFE1B09AE2AB36AAE07117460CD4C5F850FCC26C8D06CDCFE8C65154C55DA/0/323830313a31343a333030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 18:20:26 +0000
ROA not before:           Tue 04 Feb 2025 18:15:26 +0000
ROA not after:            Tue 03 Feb 2026 18:20:26 +0000
asID:                     265696
IP address blocks:        2801:14:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D78AFE1B09AE2AB36AAE07117460CD4C5F850FCC26C8D06CDCFE8C65154C55DA/0/7DF603CAE9C79067576DBC7F5C0720AC7A3AE66C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D78AFE1B09AE2AB36AAE07117460CD4C5F850FCC26C8D06CDCFE8C65154C55DA/0/7DF603CAE9C79067576DBC7F5C0720AC7A3AE66C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DF603CAE9C79067576DBC7F5C0720AC7A3AE66C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:a5:4f:96:a6:56:20:1e:03:67:2c:86:a1:ce:fa:73:cc:23:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF603CAE9C79067576DBC7F5C0720AC7A3AE66C
        Validity
            Not Before: Feb  4 18:15:26 2025 GMT
            Not After : Feb  3 18:20:26 2026 GMT
        Subject: CN=55F773BFBAE4F9C9394F611282D00050CDAAF1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:42:35:61:8b:ae:10:e0:1f:6b:d8:1d:03:
                    56:ef:fc:49:a9:6d:34:9b:09:7f:2f:a9:6b:4f:a8:
                    7c:9b:60:a3:0b:78:2f:7e:f4:e6:a7:7f:c6:af:c3:
                    5e:44:7b:9b:71:da:fe:e7:8e:46:19:a3:bd:7b:7f:
                    ff:1a:86:09:94:90:ce:91:3c:63:be:ec:0c:da:43:
                    84:1b:ba:7b:ff:03:25:52:90:b6:17:c5:6c:e4:cc:
                    0c:40:e3:23:05:33:49:98:06:8c:e6:ca:4e:0d:fd:
                    4e:a6:15:8d:45:e4:a6:db:74:e8:15:a6:b4:72:1c:
                    74:5f:1a:88:0f:2c:6d:7f:f6:9f:71:a0:8f:a5:f5:
                    17:59:c4:d2:fa:43:f7:3c:69:42:81:11:7e:ec:16:
                    ba:6c:c8:e1:9f:9f:6b:8f:34:3d:86:f0:4b:27:40:
                    9f:09:f2:9b:2f:d0:ea:4a:89:5e:e3:d4:0f:45:67:
                    27:57:87:4a:17:ce:0c:e1:cb:e4:b6:6d:4c:ec:49:
                    77:15:5a:d1:47:47:c3:cd:6b:95:64:c8:fc:65:64:
                    68:15:26:19:fe:8c:09:43:f0:7f:6d:3a:73:b8:cd:
                    70:ce:d4:c2:89:82:89:7a:57:22:9a:33:70:6a:2c:
                    68:f2:cb:dc:1d:da:6a:f9:fd:6b:4f:10:b4:95:7e:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F7:73:BF:BA:E4:F9:C9:39:4F:61:12:82:D0:00:50:CD:AA:F1:B5
            X509v3 Authority Key Identifier:
                keyid:7D:F6:03:CA:E9:C7:90:67:57:6D:BC:7F:5C:07:20:AC:7A:3A:E6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D78AFE1B09AE2AB36AAE07117460CD4C5F850FCC26C8D06CDCFE8C65154C55DA/0/7DF603CAE9C79067576DBC7F5C0720AC7A3AE66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DF603CAE9C79067576DBC7F5C0720AC7A3AE66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D78AFE1B09AE2AB36AAE07117460CD4C5F850FCC26C8D06CDCFE8C65154C55DA/0/323830313a31343a333030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:36:21:7e:5f:b6:bc:85:da:b6:b5:56:48:ed:b2:dc:08:
         e9:07:75:f3:c9:df:93:d8:d3:32:7e:96:38:37:e9:45:02:9b:
         4a:80:18:83:8b:e9:72:64:c0:9c:69:00:65:39:fa:eb:f6:35:
         8f:0e:9c:c7:8c:a9:a4:7e:12:32:c3:71:f8:d9:18:bf:3e:3a:
         82:af:03:45:0e:58:90:36:d1:e2:3d:76:1b:fd:0d:34:94:c9:
         cf:4f:5e:40:4c:1b:07:07:0c:94:1f:f8:df:53:5c:15:29:72:
         54:3f:52:e2:6c:d0:66:7c:ab:10:36:d9:72:04:1d:87:b9:78:
         e5:15:7c:61:a1:da:a2:c1:b8:1f:c1:d0:fb:eb:c8:17:47:65:
         fa:a4:66:15:26:a0:ca:c3:cd:56:27:ee:8a:6d:57:cf:20:08:
         f4:63:85:dc:68:fd:5a:b8:38:2b:74:8b:3b:89:5e:3f:c5:8e:
         94:9d:56:d5:bb:25:3e:4b:c5:eb:50:53:1f:30:5b:e5:00:87:
         5e:08:8e:12:14:86:1e:7a:22:02:16:4c:47:aa:2b:34:b9:13:
         1f:97:6e:51:4c:b0:03:0c:26:3f:67:3f:c6:f5:06:87:f4:45:
         5b:ee:b5:12:7c:9c:02:3e:9d:c9:5f:97:32:ec:27:ca:da:d0:
         f5:18:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:19:33 2025 by rpki-client