Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531333a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346531333a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          ZIlrU9dUqLg0faOa96Hn7qQMcxQeqQYt+hKKy+j7eFM=
Subject key identifier:   3A:8A:12:BE:88:D8:E1:B7:02:B9:42:EA:BE:36:2E:51:7F:50:26:5B
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       0FC3F277BA59ECA4C4A9DA652F9D956EF721AA88
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531333a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:48 +0000
ROA not before:           Tue 04 Feb 2025 19:56:48 +0000
ROA not after:            Tue 03 Feb 2026 20:01:48 +0000
asID:                     267848
IP address blocks:        2800:be0:4e13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c3:f2:77:ba:59:ec:a4:c4:a9:da:65:2f:9d:95:6e:f7:21:aa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:48 2025 GMT
            Not After : Feb  3 20:01:48 2026 GMT
        Subject: CN=3A8A12BE88D8E1B702B942EABE362E517F50265B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:8e:65:d5:ca:6e:69:a5:e5:14:07:bd:9d:
                    d0:ea:15:33:56:c2:24:b0:71:79:97:42:68:31:f2:
                    a2:dd:fb:05:c1:5e:ac:54:16:3d:d1:4b:29:ef:39:
                    0a:ff:29:f7:81:96:51:49:18:b8:e7:91:60:a8:fe:
                    3c:2f:b1:56:7c:d0:58:67:2a:d0:fe:41:e4:01:df:
                    8d:0d:1a:f4:4b:ca:bd:65:ce:69:1b:ad:a3:40:4e:
                    02:95:f9:16:25:c5:84:de:21:12:ed:6a:df:92:fa:
                    62:6f:cf:8c:5e:b4:ee:2f:9b:9c:71:1c:8f:ec:43:
                    fd:65:cf:d4:d5:35:58:96:ee:b2:a9:74:b6:9c:dd:
                    9e:4e:37:49:b9:15:3e:7f:e0:d5:68:00:f0:7a:46:
                    aa:c0:41:6d:51:64:8a:5a:61:08:8f:12:4a:96:c6:
                    6e:f5:47:9b:5b:9a:07:76:b2:36:f0:3b:78:c4:47:
                    f2:98:ba:b0:4b:25:c2:32:cb:06:67:72:67:b1:8f:
                    c5:21:01:19:75:9b:e8:8b:4b:c3:e0:01:69:cb:4c:
                    b1:3a:26:21:fb:89:2e:a4:d8:ba:53:c7:44:ec:44:
                    06:2d:2f:b5:a7:4b:c2:54:99:ce:c7:e5:d2:65:db:
                    56:2d:12:7a:ab:6d:b8:65:9a:db:02:f8:9d:4f:f9:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8A:12:BE:88:D8:E1:B7:02:B9:42:EA:BE:36:2E:51:7F:50:26:5B
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531333a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e13::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:40:e5:fd:bf:87:7e:b0:e5:d5:b7:b8:b4:f7:1b:20:65:d7:
         95:b3:bb:9d:d9:26:d0:ad:2c:45:5b:34:5e:3b:fd:bb:42:e9:
         2f:45:7d:35:9f:af:f4:4c:63:67:a4:e0:c3:7c:b5:b0:27:fd:
         6a:20:d0:6e:45:a2:f7:6d:ec:e9:b1:1b:cd:85:05:49:f2:9b:
         56:c6:a0:60:f4:b3:64:ec:64:4b:28:15:6f:b2:fa:7e:03:67:
         3a:98:c5:83:65:75:79:08:a9:a0:53:9f:29:34:87:cb:dc:b2:
         8d:33:7e:3e:40:69:4c:e3:2b:72:f7:aa:a8:12:fa:ff:57:a4:
         b0:38:f2:62:49:6f:c5:5a:bc:81:3e:d3:0d:68:2e:5c:71:23:
         61:b0:f4:3e:a3:6b:27:38:51:06:cd:75:63:53:98:0b:98:5f:
         08:82:3c:27:f3:dd:5e:cb:62:d6:ef:52:fe:a2:e9:1e:e9:28:
         9b:39:1a:97:35:f1:7d:4e:82:1d:69:f0:91:8f:91:48:09:88:
         2f:49:a0:a5:d9:db:ea:68:44:50:16:f4:48:18:24:8a:db:b4:
         d5:34:b0:9e:36:11:e1:05:84:65:59:de:f2:c8:a3:63:d5:c5:
         08:b7:ef:28:de:be:a9:7d:a3:1f:ab:c9:7e:3a:4e:93:ca:fd:
         95:12:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:36 2025 by rpki-client