Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1CA0ADC7CF1C61FC8BE451B94261AF2059492469C32B1F2D874DF3B73C64831/0/323830313a31333a343830303a3a2f34382d3438203d3e20323639383235.roa
File:                     323830313a31333a343830303a3a2f34382d3438203d3e20323639383235.roa (raw, json)
Hash identifier:          GoF1UI9w8eRIMgXzuu0eiINjaYL3s5AZFWXpGYJMadM=
Subject key identifier:   8D:5B:05:82:86:F3:8F:18:0D:ED:B7:CE:BD:42:56:EA:84:83:7D:6B
Certificate issuer:       /CN=9FBE6B6DA2154929F7BDFC4241FFF2546AE9910A
Certificate serial:       0FDBF8873C1065284E711C7BA6CA5038663D9844
Authority key identifier: 9F:BE:6B:6D:A2:15:49:29:F7:BD:FC:42:41:FF:F2:54:6A:E9:91:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FBE6B6DA2154929F7BDFC4241FFF2546AE9910A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1CA0ADC7CF1C61FC8BE451B94261AF2059492469C32B1F2D874DF3B73C64831/0/323830313a31333a343830303a3a2f34382d3438203d3e20323639383235.roa
Signing time:             Tue 04 Feb 2025 18:24:18 +0000
ROA not before:           Tue 04 Feb 2025 18:19:18 +0000
ROA not after:            Tue 03 Feb 2026 18:24:18 +0000
asID:                     269825
IP address blocks:        2801:13:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1CA0ADC7CF1C61FC8BE451B94261AF2059492469C32B1F2D874DF3B73C64831/0/9FBE6B6DA2154929F7BDFC4241FFF2546AE9910A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1CA0ADC7CF1C61FC8BE451B94261AF2059492469C32B1F2D874DF3B73C64831/0/9FBE6B6DA2154929F7BDFC4241FFF2546AE9910A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FBE6B6DA2154929F7BDFC4241FFF2546AE9910A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:db:f8:87:3c:10:65:28:4e:71:1c:7b:a6:ca:50:38:66:3d:98:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FBE6B6DA2154929F7BDFC4241FFF2546AE9910A
        Validity
            Not Before: Feb  4 18:19:18 2025 GMT
            Not After : Feb  3 18:24:18 2026 GMT
        Subject: CN=8D5B058286F38F180DEDB7CEBD4256EA84837D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:54:ba:69:e8:bc:ba:49:f8:9a:1a:88:8e:c1:
                    20:7f:68:d2:4e:06:d3:06:fd:30:ff:33:dc:b8:32:
                    09:5c:a8:24:0c:ac:de:74:83:47:74:70:ec:bb:1f:
                    d8:ec:ab:9c:37:36:3e:b1:a7:88:32:97:b3:08:d0:
                    25:48:b2:86:a9:99:ad:08:db:77:32:0e:33:a1:4b:
                    4d:5f:6f:3b:70:d4:65:f5:13:4f:fb:ed:f7:f8:3b:
                    97:94:eb:02:d3:88:d9:7c:69:23:4c:3f:b4:64:1a:
                    fd:58:ee:4d:fc:1e:6b:fb:eb:43:b1:84:31:36:94:
                    ab:a3:76:ed:76:d9:68:b7:3d:50:dc:dd:07:7e:d5:
                    37:2d:53:13:22:fe:6e:5b:a4:94:87:08:8d:53:13:
                    ff:fe:65:1b:f3:64:ec:6a:02:f0:3a:29:a0:d8:f8:
                    bc:82:96:45:89:0e:c6:2d:4e:aa:8c:65:d2:4f:b7:
                    cf:89:fa:1f:c9:47:bb:d3:92:c5:da:ba:5b:50:5f:
                    75:c0:c4:fe:7e:cb:31:00:3c:b1:b2:8b:a2:4d:cf:
                    e6:61:22:f0:f0:4a:a0:59:b3:5a:71:fc:1b:46:2a:
                    96:4d:9d:ca:d8:3b:7f:b1:b5:e2:a4:ef:3c:c4:ef:
                    4b:b5:70:5a:c9:69:dd:48:c7:26:24:90:58:d8:b4:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5B:05:82:86:F3:8F:18:0D:ED:B7:CE:BD:42:56:EA:84:83:7D:6B
            X509v3 Authority Key Identifier:
                keyid:9F:BE:6B:6D:A2:15:49:29:F7:BD:FC:42:41:FF:F2:54:6A:E9:91:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1CA0ADC7CF1C61FC8BE451B94261AF2059492469C32B1F2D874DF3B73C64831/0/9FBE6B6DA2154929F7BDFC4241FFF2546AE9910A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FBE6B6DA2154929F7BDFC4241FFF2546AE9910A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1CA0ADC7CF1C61FC8BE451B94261AF2059492469C32B1F2D874DF3B73C64831/0/323830313a31333a343830303a3a2f34382d3438203d3e20323639383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:6b:d3:84:19:4f:9d:97:60:92:0b:df:61:09:2f:ff:f4:
         44:ed:77:06:8c:61:a0:af:20:fc:e9:57:0f:a1:d1:a9:8f:e9:
         ec:32:64:aa:0f:27:a8:54:a2:2d:50:4d:80:39:8b:8a:32:7f:
         a1:8b:83:53:2f:b8:10:f9:bb:65:5b:b1:09:d6:6c:31:c5:f5:
         13:5b:49:3b:fd:be:03:6f:dd:e1:85:5f:11:9e:5b:56:59:89:
         5b:c3:b9:72:6d:bb:d1:e1:15:22:f4:26:b0:24:4b:49:9c:35:
         63:cc:bf:bb:15:2a:db:0d:12:fe:a8:aa:da:20:7d:b3:16:f2:
         d4:b9:36:0f:79:ca:b7:0b:d4:7e:cd:d8:13:29:f5:38:38:68:
         03:a9:1e:ef:08:51:e6:8a:ff:b6:81:b6:ca:ee:ee:80:d6:91:
         76:05:f6:75:fd:12:9a:31:2c:0c:6f:f1:14:71:fa:9a:f8:e5:
         ab:14:c1:45:c1:74:9e:f8:27:a0:30:ab:c2:d5:25:95:c0:4f:
         8a:3e:3e:90:8d:b2:8b:b4:c0:34:28:e3:3a:5c:7b:76:39:5a:
         7f:45:56:6a:8a:e3:c5:7a:6d:47:ab:22:e7:80:89:1f:22:8a:
         df:43:bc:f4:99:00:71:2f:ba:f5:33:00:08:7e:59:8f:f9:c0:
         f2:41:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:45 2025 by rpki-client