Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365383a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3365383a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          fsJOAGKK60svrrODcxu4Ad4JbLd7+bD4k9E83AG27tk=
Subject key identifier:   5F:04:50:33:7B:5B:43:06:3D:2D:FA:B4:6F:95:84:D8:C5:FC:3E:F8
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       45CB2B950881E2BB7B2319B4095CE8D5A08902A7
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365383a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:43 +0000
ROA not before:           Tue 04 Feb 2025 19:56:43 +0000
ROA not after:            Tue 03 Feb 2026 20:01:43 +0000
asID:                     267848
IP address blocks:        2800:be0:3e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cb:2b:95:08:81:e2:bb:7b:23:19:b4:09:5c:e8:d5:a0:89:02:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:43 2025 GMT
            Not After : Feb  3 20:01:43 2026 GMT
        Subject: CN=5F0450337B5B43063D2DFAB46F9584D8C5FC3EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:b3:5e:0f:ce:af:30:d4:ba:7c:73:36:1b:
                    8a:78:b3:d8:8e:a5:64:1e:32:0a:5d:db:ae:3d:fb:
                    ff:32:f9:17:3d:b2:d9:2c:7a:96:71:c5:34:59:fa:
                    13:73:05:86:61:b8:ea:df:0f:be:f2:0c:75:57:9c:
                    dd:50:73:8f:a4:a7:63:70:8f:af:45:26:68:a8:5a:
                    1f:c4:ad:aa:9e:b9:10:43:77:a3:b9:5a:1c:82:df:
                    4d:e8:6e:db:ff:cc:69:ec:43:86:82:ac:25:81:dc:
                    dc:76:d7:c0:45:02:ba:fa:17:15:d6:ba:f9:0a:35:
                    44:2d:66:80:ed:76:dd:8d:63:6e:47:3f:da:34:63:
                    e8:13:6f:72:6b:29:fb:93:a6:01:b4:2e:a5:3b:51:
                    3a:e5:89:e2:f8:90:ce:2d:36:bd:ca:b6:ba:76:19:
                    0b:b1:b6:34:e7:06:d1:3a:96:01:22:14:37:3d:49:
                    a8:14:2c:dc:6f:2d:c2:5c:5f:02:f2:a4:d8:54:90:
                    61:b8:ee:d6:31:93:83:71:e2:b1:92:df:01:cc:95:
                    20:7e:4a:76:88:e1:68:54:cf:4a:45:12:28:36:d4:
                    92:7f:3f:29:e7:58:6e:00:c6:e0:fb:2c:ab:a1:61:
                    6c:e3:b7:ec:d3:f5:e8:7e:2c:0b:ad:c0:af:a9:f8:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:50:33:7B:5B:43:06:3D:2D:FA:B4:6F:95:84:D8:C5:FC:3E:F8
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365383a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:3e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:02:16:6a:d1:c1:81:c1:a0:26:5c:20:35:dd:98:87:5b:27:
         4a:2d:27:87:5a:ea:1a:b6:ed:7a:d3:e0:1c:f2:57:02:c8:34:
         9f:ae:89:5b:33:62:ca:4b:85:3b:a6:e7:0f:c6:63:98:bf:4e:
         b4:f9:1a:af:b6:bc:2c:7d:22:c2:e1:29:59:02:a2:31:2d:2c:
         e6:0c:44:b5:29:60:11:5f:94:00:9c:03:94:45:ae:1d:00:c9:
         9d:1c:ec:3c:02:2e:e6:df:2f:a7:2e:59:81:d2:05:22:3e:6c:
         be:c8:df:3a:4a:26:c6:c1:9e:41:b2:22:6a:5d:50:86:db:cc:
         ca:2e:b4:13:40:eb:52:3d:4e:80:7e:c7:77:27:7d:ed:01:df:
         8a:c1:97:8d:65:0f:c1:9b:9a:33:52:08:50:fe:eb:c4:97:ea:
         49:fc:dd:26:49:38:59:fa:f0:08:6b:a3:37:16:85:55:31:d0:
         9d:90:f5:20:52:db:21:07:ef:12:32:6e:f7:de:fe:65:97:15:
         21:1a:e5:40:69:ba:6f:2a:dd:9a:0e:e6:31:17:22:a0:6d:f8:
         5d:89:09:e7:5e:c9:40:e1:54:64:bd:21:c3:bd:c9:49:43:0f:
         fa:94:b8:6e:f9:47:25:ae:68:78:a6:3b:9c:0f:46:da:5b:85:
         e4:7c:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:15 2025 by rpki-client