Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/323830313a31373a353030303a3a2f34382d3438203d3e20323634383238.roa
File:                     323830313a31373a353030303a3a2f34382d3438203d3e20323634383238.roa (raw, json)
Hash identifier:          M2U8A3Wy3i3zIJrnsuMd6DWYtUNy1ilu7nuZSraMK0s=
Subject key identifier:   18:A1:73:55:92:D5:6D:1C:F2:12:A2:B8:15:E6:81:20:AD:FF:B1:4C
Certificate issuer:       /CN=5C052530EF2C6FD41906B3995027B8B0165F9CFB
Certificate serial:       6892429D7E8B55F1C45C6C23D7DB14B70D502925
Authority key identifier: 5C:05:25:30:EF:2C:6F:D4:19:06:B3:99:50:27:B8:B0:16:5F:9C:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/323830313a31373a353030303a3a2f34382d3438203d3e20323634383238.roa
Signing time:             Tue 04 Feb 2025 18:49:56 +0000
ROA not before:           Tue 04 Feb 2025 18:44:56 +0000
ROA not after:            Tue 03 Feb 2026 18:49:56 +0000
asID:                     264828
IP address blocks:        2801:17:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:92:42:9d:7e:8b:55:f1:c4:5c:6c:23:d7:db:14:b7:0d:50:29:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C052530EF2C6FD41906B3995027B8B0165F9CFB
        Validity
            Not Before: Feb  4 18:44:56 2025 GMT
            Not After : Feb  3 18:49:56 2026 GMT
        Subject: CN=18A1735592D56D1CF212A2B815E68120ADFFB14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:a1:71:3d:53:c4:ce:99:56:fe:a8:c1:a0:
                    82:2c:23:9d:2e:02:e6:74:48:8d:58:04:de:da:dc:
                    48:a2:17:fb:cb:a0:d9:5a:5a:a3:e1:6b:89:c7:d2:
                    aa:e2:7f:7c:d4:95:73:9a:d7:23:10:b5:69:1b:98:
                    91:d9:0c:6e:05:f0:9b:61:43:6c:7e:bd:79:d9:aa:
                    12:91:eb:da:a7:7b:56:1b:62:a7:a1:02:e3:0c:f1:
                    e3:d3:1e:e5:d6:4a:fe:bb:95:54:e1:dc:47:58:b5:
                    0b:91:25:e0:4e:1c:39:29:d8:77:a8:82:94:07:1a:
                    29:76:95:5d:0e:81:bc:80:ba:c1:d5:d6:8b:4f:28:
                    49:a2:11:4b:2b:97:fa:8b:16:54:d4:75:37:ee:1e:
                    68:b4:78:5d:a9:98:c0:73:67:0d:7a:67:bd:7a:5f:
                    9a:25:e3:48:71:07:ae:98:5e:1c:d0:1a:b0:c7:82:
                    aa:19:26:1f:3c:76:d6:20:c4:07:17:99:fa:1e:ee:
                    67:52:ba:99:c3:6a:72:c8:e8:60:80:c7:ae:26:5c:
                    57:33:75:3f:4f:0c:17:17:cb:90:d6:7c:ab:56:5d:
                    b9:5d:13:04:c2:a0:bb:48:ed:50:33:2b:8a:19:36:
                    a7:ff:f7:6d:41:41:16:c5:7d:96:ab:72:9a:32:43:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:73:55:92:D5:6D:1C:F2:12:A2:B8:15:E6:81:20:AD:FF:B1:4C
            X509v3 Authority Key Identifier:
                keyid:5C:05:25:30:EF:2C:6F:D4:19:06:B3:99:50:27:B8:B0:16:5F:9C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/323830313a31373a353030303a3a2f34382d3438203d3e20323634383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:50:62:52:d0:e5:ec:99:a0:23:a4:e7:5a:ab:b7:a3:0d:
         7b:1a:34:6a:39:b4:59:1c:1f:2b:30:23:9d:02:5a:3c:0e:b5:
         b3:87:8d:2d:d1:2f:99:39:bb:49:f5:9c:53:41:90:2c:a1:ce:
         58:50:e1:35:cf:eb:b4:c8:0a:bb:da:b5:5c:cd:12:ce:cb:81:
         fc:d6:db:e8:89:75:60:81:ce:d0:57:e7:f9:9b:1e:7f:4c:f0:
         fb:63:bc:4c:7e:bc:b6:f4:40:91:02:cc:03:68:87:fd:13:5e:
         ad:d0:f7:17:83:de:88:44:f6:24:45:39:42:90:d9:84:b4:e0:
         01:5f:62:58:c8:86:dc:dc:b2:c1:b2:c3:e7:04:6c:32:50:16:
         93:cb:79:fc:fb:2c:ff:d0:a9:e5:4a:40:e7:19:93:46:a1:e8:
         41:59:0b:77:39:e5:e6:01:69:dd:e8:6f:85:6e:44:a8:06:88:
         7d:1d:86:0d:1c:14:a8:8a:18:f5:21:5c:bd:63:a2:23:a1:fb:
         f5:2e:3e:6a:bf:e9:9d:b1:47:91:32:5d:0a:7c:2b:0c:5d:49:
         77:6a:fc:28:d8:81:28:20:6b:95:53:74:58:d7:44:7d:50:ee:
         73:02:d4:c9:77:64:66:48:c0:4d:6a:70:46:ad:cd:4f:98:4d:
         63:96:c5:1a
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUaJJCnX6LVfHEXGwj19sUtw1QKSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMwNTI1MzBFRjJDNkZENDE5MDZCMzk5NTAyN0I4QjAx
NjVGOUNGQjAeFw0yNTAyMDQxODQ0NTZaFw0yNjAyMDMxODQ5NTZaMDMxMTAvBgNV
BAMTKDE4QTE3MzU1OTJENTZEMUNGMjEyQTJCODE1RTY4MTIwQURGRkIxNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvH6FxPVPEzplW/qjBoIIsI50u
AuZ0SI1YBN7a3EiiF/vLoNlaWqPha4nH0qrif3zUlXOa1yMQtWkbmJHZDG4F8Jth
Q2x+vXnZqhKR69qne1YbYqehAuMM8ePTHuXWSv67lVTh3EdYtQuRJeBOHDkp2Heo
gpQHGil2lV0OgbyAusHV1otPKEmiEUsrl/qLFlTUdTfuHmi0eF2pmMBzZw16Z716
X5ol40hxB66YXhzQGrDHgqoZJh88dtYgxAcXmfoe7mdSupnDanLI6GCAx64mXFcz
dT9PDBcXy5DWfKtWXbldEwTCoLtI7VAzK4oZNqf/921BQRbFfZarcpoyQ2p9AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUGKFzVZLVbRzyEqK4FeaBIK3/sUwwHwYDVR0j
BBgwFoAUXAUlMO8sb9QZBrOZUCe4sBZfnPswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRUI1QzEwREZEQzZBQzY4RTk4NkQ5OTI5OEU5NDE3MjlD
QkJBMDVBMzJCRTg1NzgwOTI1MDBCMEQzQzZFMkI2LzAvNUMwNTI1MzBFRjJDNkZE
NDE5MDZCMzk5NTAyN0I4QjAxNjVGOUNGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzA1MjUzMEVGMkM2RkQ0MTkw
NkIzOTk1MDI3QjhCMDE2NUY5Q0ZCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUVCNUMxMERGREM2QUM2OEU5ODZEOTkyOThFOTQxNzI5Q0JCQTA1QTMy
QkU4NTc4MDkyNTAwQjBEM0M2RTJCNi8wLzMyMzgzMDMxM2EzMTM3M2EzNTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM4MzIzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABdQADANBgkqhkiG9w0BAQsFAAOCAQEAQ+JQYlLQ5eyZoCOk51qrt6MNexo0
ajm0WRwfKzAjnQJaPA61s4eNLdEvmTm7SfWcU0GQLKHOWFDhNc/rtMgKu9q1XM0S
zsuB/Nbb6Il1YIHO0Ffn+Zsef0zw+2O8TH68tvRAkQLMA2iH/RNerdD3F4PeiET2
JEU5QpDZhLTgAV9iWMiG3NyywbLD5wRsMlAWk8t5/Pss/9Cp5UpA5xmTRqHoQVkL
dznl5gFp3ehvhW5EqAaIfR2GDRwUqIoY9SFcvWOiI6H79S4+ar/pnbFHkTJdCnwr
DF1Jd2r8KNiBKCBrlVN0WNdEfVDucwLUyXdkZkjATWpwRq3NT5hNY5bFGg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:31 2025 by rpki-client