Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E94DB9B8855A5A2673D1B5E513E2946D40581F2C00D10344BBA326A6E1239E43/0/323830313a31343a333830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31343a333830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          TjAm88tC+q79nJK4ImGp+Xxsj3CklC0kiBxEFV8iX3o=
Subject key identifier:   8D:51:65:F5:DA:37:3D:33:38:70:C8:9F:29:4B:EC:23:F3:C1:FE:2D
Certificate issuer:       /CN=34B5C1A430652C196B89EBE7825101656C435270
Certificate serial:       703E22B966FEBCE0741B2C3F7023E297F0E9BD5B
Authority key identifier: 34:B5:C1:A4:30:65:2C:19:6B:89:EB:E7:82:51:01:65:6C:43:52:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B5C1A430652C196B89EBE7825101656C435270.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E94DB9B8855A5A2673D1B5E513E2946D40581F2C00D10344BBA326A6E1239E43/0/323830313a31343a333830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:26:19 +0000
ROA not before:           Tue 04 Feb 2025 18:21:19 +0000
ROA not after:            Tue 03 Feb 2026 18:26:19 +0000
asID:                     262589
IP address blocks:        2801:14:3800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E94DB9B8855A5A2673D1B5E513E2946D40581F2C00D10344BBA326A6E1239E43/0/34B5C1A430652C196B89EBE7825101656C435270.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E94DB9B8855A5A2673D1B5E513E2946D40581F2C00D10344BBA326A6E1239E43/0/34B5C1A430652C196B89EBE7825101656C435270.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B5C1A430652C196B89EBE7825101656C435270.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3e:22:b9:66:fe:bc:e0:74:1b:2c:3f:70:23:e2:97:f0:e9:bd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B5C1A430652C196B89EBE7825101656C435270
        Validity
            Not Before: Feb  4 18:21:19 2025 GMT
            Not After : Feb  3 18:26:19 2026 GMT
        Subject: CN=8D5165F5DA373D333870C89F294BEC23F3C1FE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:68:de:43:0a:6a:d6:b9:67:c8:75:9e:a9:
                    e0:bc:d1:2f:f0:cd:b3:49:a3:5c:33:9d:54:a7:ce:
                    b6:e6:81:42:04:56:50:e9:db:06:bf:26:13:14:a6:
                    ae:e8:80:bd:9d:90:36:c5:89:a2:3d:b1:85:bf:48:
                    27:15:05:0f:7a:31:4f:1a:82:0e:d3:38:74:91:8e:
                    dd:ba:db:24:7a:bf:76:7e:5e:0e:13:d8:58:3a:6a:
                    74:4e:fe:99:d4:91:59:bf:cd:b0:15:2a:d7:79:1b:
                    5e:06:61:06:2d:f4:52:e3:89:bb:c5:96:0f:34:23:
                    c5:b3:46:3d:e2:10:59:0c:cc:29:18:0a:ca:b2:d9:
                    5e:9f:c9:78:b6:bd:6d:66:0b:9e:bc:30:73:3c:c0:
                    96:2e:8b:a6:8e:24:56:23:b5:79:11:74:3d:ee:72:
                    92:9c:6f:12:b7:1a:46:46:fe:b8:0a:dc:c2:9d:34:
                    96:1c:71:28:03:10:08:0c:a3:97:a7:fb:cf:ef:41:
                    83:86:1b:fd:83:6b:07:91:1f:cc:07:f0:25:25:ad:
                    29:cf:92:e3:1e:9f:18:e4:37:3f:ab:74:6b:00:1e:
                    88:7a:72:7b:a2:67:ef:6d:78:95:19:50:0a:8d:99:
                    fb:1e:0d:24:cf:b7:c9:a3:bd:f9:de:a2:d1:af:61:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:65:F5:DA:37:3D:33:38:70:C8:9F:29:4B:EC:23:F3:C1:FE:2D
            X509v3 Authority Key Identifier:
                keyid:34:B5:C1:A4:30:65:2C:19:6B:89:EB:E7:82:51:01:65:6C:43:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E94DB9B8855A5A2673D1B5E513E2946D40581F2C00D10344BBA326A6E1239E43/0/34B5C1A430652C196B89EBE7825101656C435270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B5C1A430652C196B89EBE7825101656C435270.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E94DB9B8855A5A2673D1B5E513E2946D40581F2C00D10344BBA326A6E1239E43/0/323830313a31343a333830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:12:db:ba:98:57:82:b9:0e:d7:ac:0b:0c:84:d2:29:eb:
         39:3a:77:02:39:45:8b:93:63:bd:44:1d:82:7e:53:fb:a5:3c:
         ed:05:62:91:b2:5d:16:f2:9b:d8:32:b6:86:b3:41:be:ad:08:
         82:86:3a:31:d5:27:70:68:8a:41:66:05:70:76:89:3a:5d:8a:
         c8:34:3c:5c:70:65:e9:5d:fb:a9:f1:5e:69:cc:f6:d2:eb:2e:
         3c:f9:cc:eb:cb:e8:78:6a:e1:08:1a:72:79:95:4b:d8:e5:63:
         e3:1f:f9:6c:4a:0d:b7:3d:fd:df:bc:0a:cc:c3:12:9c:fd:57:
         8c:f5:11:be:77:33:6e:fe:07:f0:6a:71:84:16:57:97:65:8e:
         01:c3:d0:4b:86:5e:ef:e4:7c:dc:52:9b:c8:87:dd:71:d1:b4:
         9a:a9:2e:eb:e9:24:57:22:8f:7f:94:e4:c8:cb:fd:91:98:2b:
         dc:89:5f:64:7e:ad:d8:46:25:b5:e6:c4:b7:26:8d:9e:2a:59:
         2c:f6:13:66:cb:7e:f1:4b:24:52:8a:94:05:94:8e:82:f8:f2:
         40:ec:f3:dd:87:7b:13:02:28:f1:63:0a:b7:30:2b:b6:ed:6f:
         60:24:fd:b4:dc:1d:2a:1f:7e:81:f4:e7:09:4b:33:a6:f8:8e:
         4d:bc:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:56 2025 by rpki-client