Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531343a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346531343a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          FhiXYIO2f+ha/vJrJ7r6JvHAOsUu9L1I9tycTs5+8fs=
Subject key identifier:   85:77:28:58:73:6D:A0:65:55:E4:7C:9D:DD:AF:44:79:11:7D:57:F8
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       0660993BE35A81FBF98D4193724DE728E9E3F8AA
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531343a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:40 +0000
ROA not before:           Tue 04 Feb 2025 19:56:40 +0000
ROA not after:            Tue 03 Feb 2026 20:01:40 +0000
asID:                     267848
IP address blocks:        2800:be0:4e14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:60:99:3b:e3:5a:81:fb:f9:8d:41:93:72:4d:e7:28:e9:e3:f8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:40 2025 GMT
            Not After : Feb  3 20:01:40 2026 GMT
        Subject: CN=85772858736DA06555E47C9DDDAF4479117D57F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:ce:9e:77:3c:04:7b:49:d2:9f:f0:5c:e0:
                    6b:dc:d0:3d:45:b7:33:17:1e:07:b3:35:87:73:98:
                    2f:d1:72:74:0b:ae:0f:de:35:fb:c0:62:d2:a4:fd:
                    3d:f5:6b:7c:4c:87:5f:01:f1:f5:26:b5:f7:44:55:
                    f3:fc:2e:22:43:c0:3e:71:98:bc:70:0f:b9:4c:8f:
                    e8:2c:65:76:37:2e:1b:dd:35:75:bd:32:8c:0e:6d:
                    e6:9d:73:f7:a7:f9:d3:6e:90:d0:bf:52:ba:42:8e:
                    ee:d7:71:18:2e:25:8b:cd:cb:0f:73:dd:22:19:b3:
                    0b:36:2a:8e:72:5d:c9:29:de:3f:0a:c8:57:fd:3f:
                    52:b4:73:c0:f2:45:74:13:4e:95:59:8b:fc:09:ee:
                    55:d9:09:50:8c:4f:19:49:38:b1:cf:f7:a6:51:82:
                    f8:61:80:ea:a9:a9:5d:45:68:a7:6e:60:47:7f:7e:
                    0c:5d:e5:08:89:eb:9b:5b:35:ab:41:15:dc:f6:8a:
                    19:55:21:2d:be:03:5f:57:26:90:86:e5:bb:4b:97:
                    cf:d5:9b:2b:65:f6:57:9f:93:bf:85:ab:93:e2:5e:
                    f0:40:c1:99:b1:17:a2:59:c6:fb:46:1f:61:2a:75:
                    bb:6c:cd:c4:2c:3c:bd:f3:0f:ad:cb:05:4a:a4:10:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:77:28:58:73:6D:A0:65:55:E4:7C:9D:DD:AF:44:79:11:7D:57:F8
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531343a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e14::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:62:3f:c8:92:f7:5b:10:bc:bf:1c:0f:21:98:11:f5:54:
         c3:3e:2c:ef:93:13:01:06:fd:ff:6d:f4:8f:8f:aa:70:d4:31:
         b3:44:51:48:85:99:89:33:31:e2:a8:ce:1e:7b:42:11:3e:49:
         7e:0f:b8:fc:e3:37:a9:a6:2c:63:f3:6d:7f:12:2e:a3:99:17:
         85:7d:91:99:12:a5:bc:ef:38:4a:88:fa:fd:fc:c5:95:cf:e3:
         4e:c4:cf:8a:f0:47:77:97:47:8d:19:29:14:e4:69:99:d9:63:
         9e:52:27:6f:d0:3c:50:ea:8e:04:bf:8f:86:27:5c:12:30:89:
         46:2d:c0:76:ce:a6:d6:5b:05:e6:ea:bc:8e:ea:96:a0:27:81:
         dd:40:a1:c3:9d:02:4a:72:dd:d1:20:82:0b:de:f0:5e:88:94:
         14:08:37:1c:d5:bc:f8:90:87:8e:82:d3:6b:9c:b7:26:05:44:
         28:7b:c4:30:7d:0c:68:42:0a:00:a9:58:24:3b:56:85:44:aa:
         f3:08:b9:a4:09:e0:38:dc:c1:9a:79:a9:62:d9:ac:c1:b1:2e:
         f8:ab:75:a3:7c:24:82:74:be:22:c1:35:4a:85:7e:88:c9:fd:
         10:67:89:b9:a5:41:d3:f4:c6:45:c2:0d:a8:c3:ef:f6:dc:c3:
         31:50:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:34 2025 by rpki-client