Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3566313a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a3163383a3566313a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          v81ZkBeas5ZLXNZZNfD+fRhstCuI/GZqm6vV4Rqkqs8=
Subject key identifier:   E0:68:6A:0C:D1:F3:3B:CB:8D:AC:03:D6:EF:B3:D6:AB:8E:97:B9:7B
Certificate issuer:       /CN=EE696F80F79D5A040A78AEE92CD99FF107BE3183
Certificate serial:       5524C015990D664FE241DD19ED5956F13521C93A
Authority key identifier: EE:69:6F:80:F7:9D:5A:04:0A:78:AE:E9:2C:D9:9F:F1:07:BE:31:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3566313a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:47:16 +0000
ROA not before:           Tue 04 Feb 2025 18:42:16 +0000
ROA not after:            Tue 03 Feb 2026 18:47:16 +0000
asID:                     262589
IP address blocks:        2801:1c8:5f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:24:c0:15:99:0d:66:4f:e2:41:dd:19:ed:59:56:f1:35:21:c9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE696F80F79D5A040A78AEE92CD99FF107BE3183
        Validity
            Not Before: Feb  4 18:42:16 2025 GMT
            Not After : Feb  3 18:47:16 2026 GMT
        Subject: CN=E0686A0CD1F33BCB8DAC03D6EFB3D6AB8E97B97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:62:e1:f7:a7:2b:0e:72:b4:51:a0:83:bb:
                    d0:a4:43:aa:95:96:1f:fc:33:c1:7c:7c:2a:83:63:
                    44:cd:e2:01:fc:5e:0e:18:bc:f6:80:42:3c:b0:df:
                    97:12:32:c0:9b:70:a8:cb:55:2e:9a:e0:c6:57:62:
                    04:84:a3:89:3e:a1:1c:94:51:e1:45:cf:75:34:52:
                    4b:af:36:33:61:41:77:09:c4:1c:0b:e9:57:fb:09:
                    59:f4:1c:76:0d:f1:c3:7f:c1:44:aa:7d:cd:36:d6:
                    fa:96:d4:3c:2d:77:f5:81:8d:f1:95:0b:af:54:21:
                    6f:90:da:88:3f:a9:6e:cf:16:c9:5b:64:86:47:92:
                    7f:9d:71:ff:3d:2c:e2:11:25:59:d2:c1:cd:b4:fc:
                    6e:62:45:eb:f4:67:39:12:8c:e2:27:e6:b0:9b:ed:
                    b6:e7:26:c3:53:41:0e:d6:2a:70:b6:4e:b3:cd:8e:
                    72:b2:3e:4b:9a:73:cb:ab:b7:f6:80:32:35:ab:fc:
                    c7:80:60:6c:b9:a0:3d:3e:48:64:cc:83:44:c8:00:
                    0e:38:0d:22:6b:97:1f:6b:96:73:53:50:cc:10:9c:
                    02:ae:bf:f2:8f:b4:b8:57:2a:82:73:5c:bf:b4:d5:
                    fb:9a:3d:d1:0f:0d:f8:86:c4:70:bc:d4:1e:ca:08:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:68:6A:0C:D1:F3:3B:CB:8D:AC:03:D6:EF:B3:D6:AB:8E:97:B9:7B
            X509v3 Authority Key Identifier:
                keyid:EE:69:6F:80:F7:9D:5A:04:0A:78:AE:E9:2C:D9:9F:F1:07:BE:31:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3566313a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8:5f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:68:db:54:4b:f0:50:a5:35:86:24:77:06:50:6d:c0:e1:ef:
         a3:f8:4a:21:8c:e0:dc:c9:16:03:22:f5:38:90:bd:da:1a:52:
         1e:cb:f7:36:68:2f:bf:2d:9e:15:31:0f:d1:c9:c9:85:f9:a2:
         5f:c1:fc:d0:99:d9:dc:5c:4b:a5:85:1c:d4:da:0b:c9:0c:17:
         2f:23:c8:90:44:88:7c:65:e9:1d:46:df:f3:5b:a1:d6:a3:5f:
         1e:44:40:2f:29:8a:26:8e:43:3f:d7:f2:78:dd:c7:6c:f7:03:
         cb:e3:8d:9e:d4:3a:b0:a2:12:70:49:dc:b5:fa:21:db:35:05:
         fe:73:46:ba:5c:86:b5:ea:3d:e3:db:79:b8:cd:55:0c:a5:32:
         75:84:00:e9:1d:c6:9f:51:bc:67:c9:1f:b8:ad:73:a6:3c:c9:
         64:90:c2:ae:f1:fc:0b:92:4c:9c:30:44:c0:ff:c9:12:43:92:
         e6:22:a9:f5:ac:20:87:27:1b:61:f0:b3:d8:ec:c8:bc:f7:b7:
         df:a5:c4:43:63:53:e4:f4:de:8c:55:6f:8e:79:dd:79:2b:75:
         e6:38:55:c3:4e:a0:9b:13:8e:f0:60:4f:8d:f6:4a:70:c0:25:
         57:cf:58:fb:15:26:03:8a:0e:fe:4c:35:39:8f:80:37:45:e1:
         72:fb:99:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:28 2025 by rpki-client