Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36313a3a2f34382d3438203d3e203532323734.roa
File:                     323830313a303a36313a3a2f34382d3438203d3e203532323734.roa (raw, json)
Hash identifier:          kC9dGDBTBp/FCGR4FIziwiwa9RqayahmTG1nxdWgB/c=
Subject key identifier:   68:FB:A7:D0:2C:47:CB:0F:C2:E4:EA:DC:59:AA:0F:3B:0F:18:76:82
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       6CBEF3A0F8C1B4C17AAA6C82ADE4CC2CF1C36CC2
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36313a3a2f34382d3438203d3e203532323734.roa
Signing time:             Tue 04 Feb 2025 18:05:35 +0000
ROA not before:           Tue 04 Feb 2025 18:00:35 +0000
ROA not after:            Tue 03 Feb 2026 18:05:35 +0000
asID:                     52274
IP address blocks:        2801:0:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:be:f3:a0:f8:c1:b4:c1:7a:aa:6c:82:ad:e4:cc:2c:f1:c3:6c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Feb  4 18:00:35 2025 GMT
            Not After : Feb  3 18:05:35 2026 GMT
        Subject: CN=68FBA7D02C47CB0FC2E4EADC59AA0F3B0F187682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:55:65:94:81:44:0e:37:f5:53:d8:fd:95:
                    f3:08:10:c0:e2:d7:f6:e6:7f:1c:d8:6f:14:59:38:
                    42:aa:36:f7:e5:ac:19:23:46:3f:ab:51:95:e1:06:
                    f6:df:0c:f9:37:38:10:57:f6:d2:21:d5:56:aa:b7:
                    62:ec:71:ba:5b:51:75:3f:64:7b:9c:09:83:87:59:
                    62:da:2a:f7:07:bf:88:28:83:e3:97:ae:af:af:a2:
                    4e:8e:ec:1c:38:bd:62:fd:fa:05:3b:8a:ef:0e:87:
                    9d:00:50:e3:49:d3:3c:a6:34:ad:be:60:1b:06:13:
                    47:b4:09:b4:4a:f1:b5:0a:24:7a:23:18:1c:79:ed:
                    77:e0:28:26:c6:88:f2:99:4d:0e:70:61:75:31:92:
                    75:1a:97:ec:cc:15:31:e1:87:b2:eb:4b:d6:49:3a:
                    18:ed:7d:a5:d3:b4:53:00:24:06:97:70:55:66:f6:
                    9e:95:84:13:67:1c:4a:64:95:df:d7:79:a0:73:c2:
                    b6:75:86:10:eb:68:af:bb:8e:e2:21:bf:c6:b5:05:
                    88:50:3f:d1:b8:2c:1c:fb:25:04:ee:94:49:e5:bb:
                    75:90:9c:81:dd:e3:25:5a:33:d0:32:6e:31:c3:d3:
                    b4:26:1a:7c:95:46:03:51:f2:90:30:6d:09:48:5a:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FB:A7:D0:2C:47:CB:0F:C2:E4:EA:DC:59:AA:0F:3B:0F:18:76:82
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36313a3a2f34382d3438203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:61::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:8f:59:57:73:16:74:dc:d0:59:fc:af:db:b2:f0:e8:4c:
         b6:bf:fc:9e:d7:23:42:aa:ef:11:0b:7c:36:99:a6:2b:d9:f6:
         9e:0d:ca:30:f5:c8:80:1f:0c:c6:0e:0a:1f:25:74:cd:ef:88:
         b8:58:7d:0e:ad:88:92:d6:c4:39:8d:a4:1c:67:fa:94:f4:64:
         33:98:44:78:a4:5b:bc:88:0f:45:30:de:10:ac:8b:da:6d:3d:
         f4:3b:34:d5:3c:1a:8d:73:44:bc:fd:75:50:02:3d:1e:c7:b4:
         f3:cf:96:11:67:9f:39:d5:5b:ec:8c:a8:c7:8e:57:22:2a:51:
         c5:96:2d:17:71:85:10:82:42:dc:6f:5b:be:4b:5d:0a:41:2a:
         30:b3:ac:22:a8:3f:a9:ba:a5:67:b0:0c:a2:23:b1:93:fa:83:
         9c:3f:cc:68:11:03:5f:81:8a:dd:01:09:22:76:66:07:1a:39:
         53:1e:f0:13:3d:33:3c:ea:0d:d8:29:96:ce:35:0c:7f:da:47:
         3a:ae:b5:58:4b:59:80:54:bb:dd:5b:ab:3d:e4:f7:72:19:3d:
         e4:67:42:b1:1c:98:68:1f:73:32:a5:a2:a5:b6:a0:dc:a4:14:
         0f:d2:ec:bd:8e:18:19:19:65:d6:c9:6c:69:52:1b:ae:6d:98:
         67:16:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:52 2025 by rpki-client