Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a3a2f36342d3634203d3e203631353232.roa
File:                     323830313a31343a393030303a3a2f36342d3634203d3e203631353232.roa (raw, json)
Hash identifier:          DGynblmGgEx8J4faZC5U6xE/uXY27Kmf7RfKrKWTrVM=
Subject key identifier:   22:01:C2:31:73:63:73:5A:CA:01:84:8D:DB:E4:41:9B:EE:F5:C1:C0
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       17EBE1EE97C1380C14DF0CAB792D18B63F227EBD
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a3a2f36342d3634203d3e203631353232.roa
Signing time:             Tue 04 Feb 2025 20:07:11 +0000
ROA not before:           Tue 04 Feb 2025 20:02:11 +0000
ROA not after:            Tue 03 Feb 2026 20:07:11 +0000
asID:                     61522
IP address blocks:        2801:14:9000::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:eb:e1:ee:97:c1:38:0c:14:df:0c:ab:79:2d:18:b6:3f:22:7e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Feb  4 20:02:11 2025 GMT
            Not After : Feb  3 20:07:11 2026 GMT
        Subject: CN=2201C2317363735ACA01848DDBE4419BEEF5C1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ef:07:35:8c:9d:59:9c:6b:31:34:07:c1:4e:
                    71:be:d6:03:b1:48:87:6e:a0:11:5f:48:56:9c:38:
                    7d:fe:12:01:01:bf:03:95:a2:1b:69:8f:33:63:9a:
                    b3:b9:f0:7b:e6:2d:f1:4a:55:62:dd:22:c1:13:e5:
                    be:f6:d7:91:37:60:4a:cb:6a:5d:55:18:e8:df:70:
                    b2:81:83:37:08:5e:03:b0:cc:b9:d0:21:77:86:c6:
                    ee:8a:7c:05:fa:74:16:c5:aa:a4:0f:d9:07:ab:51:
                    39:10:1b:0f:77:0f:d7:6f:62:06:52:fd:46:44:90:
                    b7:71:14:8d:f4:96:fa:3e:e6:15:1b:be:7c:30:80:
                    c9:65:d8:1f:a4:bf:66:7a:e1:18:4a:52:3d:ce:88:
                    d0:85:08:5e:e8:2a:88:b6:ab:19:0e:12:62:2b:38:
                    5a:96:3e:29:80:0f:c7:ea:76:ae:81:4f:d8:3b:96:
                    ee:59:25:a4:0b:a7:9e:f7:27:66:99:28:9a:de:ec:
                    50:6c:69:87:64:56:5f:69:e3:df:83:63:e4:d5:a6:
                    03:0f:af:e6:f0:d9:38:8a:f2:7c:d1:a0:86:35:75:
                    7d:1e:ad:e6:f8:28:e8:4d:87:3a:a8:70:e3:f1:63:
                    dc:14:29:67:81:5e:30:98:78:96:31:7c:e0:ca:eb:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:01:C2:31:73:63:73:5A:CA:01:84:8D:DB:E4:41:9B:EE:F5:C1:C0
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a3a2f36342d3634203d3e203631353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:9000::/64

    Signature Algorithm: sha256WithRSAEncryption
         d3:71:1d:06:93:42:a7:27:30:47:f0:66:8c:4d:b7:c3:7a:4e:
         1e:63:40:ef:36:c5:02:4b:e8:8c:5c:43:34:34:c9:e7:c4:bf:
         d6:e8:32:ee:c5:dd:21:76:8f:fb:22:cc:4b:b7:67:4d:b8:25:
         a7:5e:f5:02:ad:d1:66:b8:6a:07:dc:23:cb:e5:1b:ad:d0:9b:
         99:be:f2:9e:fb:1b:ac:00:6e:a7:c2:4a:d4:a8:23:22:ad:d3:
         21:e3:90:22:37:71:04:6a:62:8c:7e:9b:85:db:49:fd:e4:00:
         3b:8f:ff:3e:96:90:e4:35:c1:a2:13:ed:4c:37:04:f3:8d:77:
         96:c7:ea:c6:97:fb:d9:39:05:a8:a9:c7:df:58:e5:24:a2:a3:
         2b:e4:ab:f2:a8:13:dc:10:5a:69:73:e0:e5:da:44:ef:a3:71:
         9c:17:02:f6:3f:17:90:54:0e:fb:6e:01:88:82:e9:d7:9d:20:
         04:cf:b8:1b:5f:a4:8c:4c:b1:0e:7b:72:2c:31:bc:ba:9d:09:
         9f:57:14:9e:14:92:5e:99:13:1c:70:c7:ac:02:75:6e:1e:74:
         24:87:d4:dc:4a:47:61:77:fd:1a:c6:e0:63:cb:6d:98:89:b1:
         b0:bd:18:34:40:eb:44:d5:4d:3d:be:80:15:22:6f:70:0b:de:
         1c:6d:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:47:35 2025 by rpki-client