Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a363a3a2f36342d3634203d3e203634313132.roa
File:                     323830313a31343a393030303a363a3a2f36342d3634203d3e203634313132.roa (raw, json)
Hash identifier:          Bh3m54eGLindXneo2n6OKvIt1X5qOmIzCRkqMce/TY4=
Subject key identifier:   2B:C4:EB:A3:53:44:1B:B4:86:BC:F0:91:AB:9E:D8:0A:87:BA:39:68
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       47937A7D86BD94FB1759DA52A44F961176A38722
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a363a3a2f36342d3634203d3e203634313132.roa
Signing time:             Tue 04 Feb 2025 20:07:11 +0000
ROA not before:           Tue 04 Feb 2025 20:02:11 +0000
ROA not after:            Tue 03 Feb 2026 20:07:11 +0000
asID:                     64112
IP address blocks:        2801:14:9000:6::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:93:7a:7d:86:bd:94:fb:17:59:da:52:a4:4f:96:11:76:a3:87:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Feb  4 20:02:11 2025 GMT
            Not After : Feb  3 20:07:11 2026 GMT
        Subject: CN=2BC4EBA353441BB486BCF091AB9ED80A87BA3968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:c1:1f:e5:52:c1:64:e2:68:35:bc:c9:39:
                    c7:e8:cc:99:a2:6e:5c:f1:f2:68:8e:66:1e:04:af:
                    a7:b5:d7:3d:77:30:9c:c1:06:c7:a4:a2:b6:39:59:
                    70:2f:4d:7d:ca:1c:ac:9d:ee:bb:5f:c1:16:96:0d:
                    63:fa:37:de:74:ca:e0:c5:e2:0d:ab:3f:64:81:ce:
                    74:43:dd:b6:1c:e8:e2:a2:fe:90:6d:b4:cc:76:8c:
                    68:4d:82:cb:c8:ce:b4:f2:1a:ca:4e:9e:56:26:12:
                    8d:95:07:c0:79:4b:b3:9c:c1:e6:1c:cb:11:e7:d4:
                    2f:fd:a7:3b:be:31:b1:57:f7:65:90:77:47:e0:5f:
                    e4:2e:08:a9:ab:0a:b9:6c:e9:04:74:22:74:8e:fa:
                    a4:50:8b:75:23:2d:e6:75:bb:a9:58:a0:ce:86:dc:
                    f6:1a:ce:45:4a:b6:2c:fb:09:50:52:7a:d7:74:34:
                    55:1a:a2:83:70:c0:dc:81:c5:f5:a1:50:62:c9:8d:
                    92:2c:35:96:c8:b7:26:41:83:fc:56:ec:47:c7:b3:
                    df:cd:c6:15:c2:2c:96:89:e7:1c:a1:ca:a2:8b:44:
                    43:3f:ca:a2:31:c0:80:6c:dd:36:6b:a6:e9:f8:a6:
                    27:5a:a8:9b:f7:a5:8c:8d:dd:55:9c:11:3c:d4:ce:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C4:EB:A3:53:44:1B:B4:86:BC:F0:91:AB:9E:D8:0A:87:BA:39:68
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a363a3a2f36342d3634203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:9000:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:79:36:e4:fc:bf:6c:11:2a:10:96:1d:2e:80:b9:a0:4f:
         b2:e7:61:0d:72:6a:e2:b6:af:8e:c5:b0:cc:fa:80:14:bf:18:
         28:e3:31:ae:01:c6:59:f3:6d:1c:b2:15:61:1a:41:d7:78:22:
         f2:9f:3d:fd:1f:ff:61:bf:61:e6:b2:f9:a6:9d:d2:d2:5c:73:
         da:2c:d9:38:47:b2:0f:fd:f7:23:3f:2c:77:98:a7:7e:54:33:
         e2:58:20:dc:9b:2b:99:8e:33:54:34:07:ad:9d:35:36:2f:67:
         77:19:3a:3d:d0:e4:56:50:a9:c3:16:8d:11:e5:5a:90:f9:f7:
         03:52:86:80:6a:96:58:bf:c6:a6:bd:f3:81:60:97:9c:76:a1:
         47:bb:af:6d:85:5c:e6:d6:b3:ff:f7:76:3f:c9:d5:22:56:5b:
         7a:4a:54:3c:d7:49:8c:3f:37:28:64:1e:57:15:22:c5:80:26:
         cf:5c:e1:26:ce:7e:d2:5b:8d:b4:2a:12:7d:17:4f:b3:f5:25:
         e2:ed:c2:cc:8b:57:33:1a:f7:51:25:17:64:4b:a6:2b:98:c2:
         be:99:e6:d5:3c:c4:8f:7c:6a:db:00:47:8a:90:5a:db:47:da:
         e9:84:f1:3b:9d:e6:46:65:81:89:7d:12:33:50:d9:fd:27:78:
         16:75:5d:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:48:01 2025 by rpki-client