Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a39303a3a2f34382d3438203d3e20323637363939.roa
File:                     323830333a353161303a39303a3a2f34382d3438203d3e20323637363939.roa (raw, json)
Hash identifier:          z6PiJLj79fKovJ4QYmcx8qNDJtK4HhpfFE1m8HqIg9s=
Subject key identifier:   1F:95:F1:D8:52:AA:9D:1A:C5:8C:50:83:D6:AB:BD:8E:FB:85:11:25
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       1A3FF868D82C9C872E32C3782493161454620607
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a39303a3a2f34382d3438203d3e20323637363939.roa
Signing time:             Tue 04 Feb 2025 18:04:52 +0000
ROA not before:           Tue 04 Feb 2025 17:59:52 +0000
ROA not after:            Tue 03 Feb 2026 18:04:52 +0000
asID:                     267699
IP address blocks:        2803:51a0:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3f:f8:68:d8:2c:9c:87:2e:32:c3:78:24:93:16:14:54:62:06:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Feb  4 17:59:52 2025 GMT
            Not After : Feb  3 18:04:52 2026 GMT
        Subject: CN=1F95F1D852AA9D1AC58C5083D6ABBD8EFB851125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:12:05:92:63:d1:88:ae:c6:20:1e:55:2c:
                    bb:d4:92:8c:44:96:3a:76:59:82:a5:48:79:74:2f:
                    11:1c:42:6a:52:de:f9:41:43:73:af:3c:e8:7a:b6:
                    20:a1:04:71:3e:9b:01:04:01:92:14:b1:d6:82:7b:
                    d8:c8:6e:ba:0b:a4:c3:ed:52:40:43:26:f7:e4:43:
                    58:0e:0c:c5:d6:04:88:9b:cb:9a:6e:c3:bc:2d:51:
                    aa:ea:a9:c4:7c:79:bf:2e:01:82:06:53:ab:1b:8d:
                    37:dd:7d:b9:60:e1:01:2a:9c:1c:17:4e:50:35:b5:
                    4e:aa:3c:32:c9:e5:13:6b:1b:16:58:4d:1f:ee:75:
                    39:79:b5:2e:bb:3b:92:74:0b:be:fa:53:f5:b2:b4:
                    66:7a:01:79:b7:49:37:ae:13:96:9a:e1:64:17:99:
                    71:0c:1e:bb:de:9d:7c:7c:8d:87:08:03:44:46:73:
                    82:7a:2c:a5:8c:95:6e:95:e1:29:68:ff:f6:81:0e:
                    cc:5e:0f:d2:bc:b3:f1:da:02:38:dc:ef:9a:9a:80:
                    f5:f7:1e:ec:cb:08:6e:88:81:bb:7f:16:c4:19:46:
                    d7:5b:cc:ef:4f:12:b3:56:8f:d8:17:15:3c:e0:ab:
                    82:3b:c2:9b:54:1d:a1:0a:b7:0b:44:19:99:ae:ce:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:95:F1:D8:52:AA:9D:1A:C5:8C:50:83:D6:AB:BD:8E:FB:85:11:25
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a39303a3a2f34382d3438203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51a0:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:3d:18:f8:b6:d1:12:cf:61:27:f4:35:cd:66:b2:a2:7b:
         5a:d7:bd:75:de:66:da:cb:7b:82:15:b5:47:95:a5:ce:92:ac:
         e4:3f:33:9d:8c:57:23:3e:67:a7:82:6d:bd:f9:40:bb:d8:9b:
         b0:2a:62:b8:87:c3:39:4a:9b:b5:7e:b0:ff:03:4b:83:45:41:
         e6:5d:00:d1:fb:ad:07:1b:8f:8f:77:1b:b1:e7:6e:3d:fa:c4:
         14:48:d1:3a:bc:f8:78:c2:e5:e9:87:e0:59:7e:0f:1a:9b:3d:
         d3:2b:c0:33:2b:b5:be:93:f9:fd:5c:6a:b6:e7:a1:1e:13:3b:
         31:77:c4:d4:4c:ce:66:95:b1:ff:09:7c:4f:ad:1a:bb:0b:ba:
         0a:b3:b3:1d:ad:4d:6c:0f:82:42:71:98:4c:0e:e5:ae:0c:79:
         e8:38:00:d8:be:81:e0:f2:f3:88:41:6c:c6:e6:3f:01:f5:19:
         18:07:a1:b7:ce:8d:fe:d1:09:8e:0b:78:e3:8d:28:b5:d0:16:
         52:61:49:33:3b:70:dc:c8:13:20:e4:d4:ba:b5:81:18:8a:35:
         5a:3e:94:6a:7d:6a:14:75:16:c4:fd:c2:6c:3d:cd:f8:5e:71:
         e0:31:a0:c0:1f:bd:a8:7a:2c:a8:73:ed:7e:d1:66:88:97:30:
         ca:b4:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:38:30 2025 by rpki-client