Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a3a2f34342d3438203d3e20323730313035.roa
File:                     323830313a3137613a3a2f34342d3438203d3e20323730313035.roa (raw, json)
Hash identifier:          XGWkFDRoAcj6v4YOlYoqGD8BfIAMsYEGgbwjIj5uUfU=
Subject key identifier:   D4:A3:9B:DD:65:B5:6C:50:F3:1C:BF:26:12:CA:5F:BF:E9:0F:DE:60
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       7D6DF03C24409790530940B3F569A34D02656D24
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a3a2f34342d3438203d3e20323730313035.roa
Signing time:             Tue 04 Feb 2025 18:51:07 +0000
ROA not before:           Tue 04 Feb 2025 18:46:07 +0000
ROA not after:            Tue 03 Feb 2026 18:51:07 +0000
asID:                     270105
IP address blocks:        2801:17a::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6d:f0:3c:24:40:97:90:53:09:40:b3:f5:69:a3:4d:02:65:6d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Feb  4 18:46:07 2025 GMT
            Not After : Feb  3 18:51:07 2026 GMT
        Subject: CN=D4A39BDD65B56C50F31CBF2612CA5FBFE90FDE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:1e:3e:83:35:ad:52:3b:c3:cc:a5:5e:33:
                    c8:d5:77:4b:e5:52:53:ff:40:a5:8f:3f:b6:ab:1d:
                    bb:19:a8:67:59:f3:d4:78:ae:e4:c8:5e:ca:82:f0:
                    b4:44:77:20:d6:ae:04:de:e1:eb:6b:dd:99:7e:ea:
                    5d:e3:c4:90:55:c4:12:99:97:86:da:05:d8:d5:6a:
                    89:e2:c0:97:30:89:0b:63:2d:5d:4c:69:89:21:0f:
                    22:29:81:67:84:26:f5:b0:46:86:3b:6c:e0:c1:fb:
                    7a:7d:18:a3:df:a7:d9:b3:cb:0b:12:eb:60:14:31:
                    c7:c8:15:19:8e:5e:2e:9a:6e:4e:a2:63:61:ec:16:
                    48:af:ae:62:4f:10:7a:e7:1f:ad:e3:22:08:9a:02:
                    64:3e:38:f9:31:c4:b3:c4:70:5a:49:43:93:3d:3b:
                    44:a5:b9:e9:f8:ad:8d:48:5c:52:38:f5:21:be:a8:
                    2f:c1:54:60:8d:f7:92:3a:f2:2f:ed:b3:3a:53:e1:
                    a3:d7:36:69:8e:6c:7a:dc:d8:0e:f6:21:70:27:32:
                    15:24:09:36:f9:28:fd:9a:f5:ff:66:42:fc:6b:e9:
                    24:3f:c7:87:57:56:57:7c:f8:e8:4f:3f:bd:03:73:
                    ce:a4:f9:96:a7:65:6b:79:27:5c:3f:a0:4c:ce:e8:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A3:9B:DD:65:B5:6C:50:F3:1C:BF:26:12:CA:5F:BF:E9:0F:DE:60
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a3a2f34342d3438203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17a::/44

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:34:c8:e5:0f:a7:44:63:26:82:9e:74:05:67:8f:9d:5e:
         d5:cb:a0:7c:e0:bc:1f:cb:c5:14:7d:e3:08:57:12:b4:38:07:
         da:5b:75:12:23:21:93:61:40:e9:a1:f3:63:67:d3:a5:cc:0b:
         64:c5:ea:90:ab:8c:6c:74:e4:24:da:29:0f:13:2b:3f:08:a0:
         e1:4b:e2:69:ee:38:73:5b:b3:95:4c:9e:9d:45:b5:ff:7c:ff:
         ab:a7:de:e1:19:af:7c:b1:f8:76:c2:19:54:d2:39:95:d7:0c:
         d5:3b:44:af:8c:f1:63:75:5d:3b:0b:89:41:f4:3f:9e:72:b6:
         4b:ae:99:65:6b:b1:b4:82:ea:89:0a:ac:19:2a:88:de:c2:a5:
         78:b3:2a:f4:eb:34:35:7f:f4:1c:16:f7:78:d3:43:72:71:3c:
         88:81:35:8e:53:f4:46:6e:c5:28:06:b9:d7:31:2b:5a:72:9e:
         a0:da:87:b1:bd:be:9e:5f:20:7a:44:be:3c:c8:77:79:4e:e8:
         07:85:7e:21:9e:3c:62:8c:f8:6a:26:c9:68:2e:d2:a5:09:69:
         c8:78:d6:1f:79:24:25:63:6c:06:fd:44:f9:b4:08:e9:9f:2a:
         a3:2c:62:da:b8:68:37:b4:b0:1f:b0:dc:9b:cf:18:6e:24:70:
         f5:99:27:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:40:49 2025 by rpki-client