Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa
File:                     323830313a303a36303a3a2f34382d3438203d3e203532323734.roa (raw, json)
Hash identifier:          9oOZAEv4+2ulbpn/YhVdEFSFxkKdbkVqrYKeaZRSBSo=
Subject key identifier:   04:68:58:12:56:E4:C6:3E:65:F7:B4:D0:B0:E2:F0:C1:99:96:A2:36
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       3BB7338DCE7F5934B76D38D0C3E9F3054576BA1E
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa
Signing time:             Tue 04 Feb 2025 18:05:34 +0000
ROA not before:           Tue 04 Feb 2025 18:00:34 +0000
ROA not after:            Tue 03 Feb 2026 18:05:34 +0000
asID:                     52274
IP address blocks:        2801:0:60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b7:33:8d:ce:7f:59:34:b7:6d:38:d0:c3:e9:f3:05:45:76:ba:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Feb  4 18:00:34 2025 GMT
            Not After : Feb  3 18:05:34 2026 GMT
        Subject: CN=0468581256E4C63E65F7B4D0B0E2F0C19996A236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:e3:a3:0e:79:9f:10:00:cb:3e:ff:c9:bc:
                    3f:fa:df:f7:43:4b:53:de:22:bb:4a:84:9f:99:0d:
                    38:6f:7c:9c:6a:7f:61:b8:94:b9:67:c2:12:18:b1:
                    78:f4:9f:34:fd:82:12:cf:5f:85:17:bc:8f:62:e0:
                    b5:83:3d:cf:64:e1:84:2c:26:56:d1:4a:3e:d5:c8:
                    e6:b9:f4:08:02:27:96:5f:ee:42:eb:b7:e4:2b:b9:
                    74:82:e6:e9:15:56:c6:74:ea:33:12:71:f9:83:be:
                    15:73:24:13:21:b2:12:3a:35:8f:3f:27:49:2a:77:
                    8b:0f:40:35:ea:94:3a:23:a0:d3:79:96:3d:d0:4e:
                    d0:79:fb:d4:27:f4:dd:36:b0:95:5f:77:dc:ba:08:
                    85:94:2b:84:72:d5:63:51:39:37:37:00:77:86:84:
                    4d:ec:4f:f7:c7:4a:22:df:60:df:6f:5d:fa:eb:de:
                    e4:99:b6:98:eb:b2:e5:a0:b8:83:f4:6b:b8:00:f0:
                    b6:65:df:26:5a:eb:2f:c0:12:69:e7:1c:4e:c6:77:
                    07:85:53:37:aa:82:6f:62:d3:fa:5b:ac:18:cf:96:
                    92:4a:e9:97:4f:77:58:d8:b7:d3:63:53:a5:10:18:
                    ad:02:59:2f:c5:83:9b:18:38:f6:90:12:08:9f:47:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:68:58:12:56:E4:C6:3E:65:F7:B4:D0:B0:E2:F0:C1:99:96:A2:36
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:60::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:c6:07:e9:36:5a:b8:25:fd:ee:5c:1d:d2:19:31:4e:5e:21:
         37:e4:8c:09:15:93:63:69:a9:9f:26:83:63:bc:f9:a8:e3:25:
         26:90:23:d5:7f:73:1c:b6:c4:20:89:9c:99:43:83:ed:5f:85:
         0f:6c:0b:29:05:66:da:92:8b:10:41:c7:a6:b7:aa:c1:91:d9:
         3f:e3:6c:df:50:f3:53:19:95:d1:81:8e:0e:a8:33:15:24:bc:
         b5:2f:0c:6d:24:66:96:92:41:e8:8e:bd:d1:22:8a:56:1d:ad:
         79:1e:be:05:c7:e3:73:7d:66:a5:c4:56:79:59:96:02:3c:fb:
         f8:6e:ac:f5:58:5e:2b:5b:c2:f5:8e:cf:7e:8d:68:29:8b:e5:
         04:e0:61:b4:15:f7:33:3e:66:86:93:4a:7f:78:59:81:a9:e8:
         49:44:c4:67:7f:32:34:cb:34:95:c3:3c:9a:e3:94:ba:b8:cd:
         62:b9:e0:51:cb:7a:0f:f1:00:c2:a1:fe:dd:99:c4:45:35:46:
         b5:8f:ae:a4:90:14:93:a9:3d:a1:93:14:13:ed:71:68:5d:56:
         cd:19:6a:0d:e2:cc:de:60:24:09:d8:d9:0f:d5:96:2a:f0:35:
         e7:be:81:f8:50:d9:a9:f9:32:82:ba:27:07:49:15:79:12:17:
         20:90:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:21 2025 by rpki-client