Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531363a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346531363a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          lCB44/WMuN1OTnDD43gJhhGLD6BZNN8/xGkyCK17rIQ=
Subject key identifier:   4A:F2:C9:17:A1:4D:2C:65:07:2D:71:11:0A:5E:A1:21:9B:A0:0E:8B
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       1A2B05E1C2631D5F1FE86C662CA4CFA867B8F561
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531363a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:40 +0000
ROA not before:           Tue 04 Feb 2025 19:56:40 +0000
ROA not after:            Tue 03 Feb 2026 20:01:40 +0000
asID:                     267848
IP address blocks:        2800:be0:4e16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:05:e1:c2:63:1d:5f:1f:e8:6c:66:2c:a4:cf:a8:67:b8:f5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:40 2025 GMT
            Not After : Feb  3 20:01:40 2026 GMT
        Subject: CN=4AF2C917A14D2C65072D71110A5EA1219BA00E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:61:3d:46:12:1e:a6:54:89:00:1b:b6:4b:
                    67:a0:b1:a8:1b:18:88:3e:a2:54:5a:32:1a:7d:b0:
                    58:6d:1e:0a:e8:76:37:97:e2:aa:4f:e5:f2:fc:a1:
                    a6:d3:ae:f2:d8:83:eb:80:8b:92:8a:24:e7:50:d2:
                    15:b3:aa:c2:01:a8:9a:e2:a9:15:0d:44:19:2f:6b:
                    e9:2e:58:be:08:42:0e:ff:46:cf:e5:3d:88:f5:19:
                    b4:95:96:17:ca:7d:56:f5:0b:96:3c:87:23:ce:e8:
                    34:a7:c4:03:c6:c2:85:03:22:2b:e3:46:93:19:c4:
                    f5:cc:0f:32:09:36:16:92:da:c0:ab:b9:ce:b5:2b:
                    88:36:45:4c:a9:38:7c:32:51:fc:61:d5:0b:69:b1:
                    2f:ba:f0:6e:55:87:3b:46:ff:69:a5:1e:4e:ee:55:
                    5c:39:2a:d2:89:13:d0:b9:8b:fa:6b:54:df:d8:ba:
                    bb:69:ce:1c:a2:16:94:dc:ad:5c:3c:84:0e:e1:86:
                    0a:8d:f7:82:f9:48:b5:cb:1e:aa:fd:fc:94:ff:a8:
                    de:fd:a8:0a:ae:af:45:09:d5:91:c3:0f:83:9c:41:
                    ba:d3:bb:aa:e2:ee:b9:36:e1:21:52:b2:8c:dd:94:
                    3c:d1:ec:b1:6c:d4:1e:05:a1:66:ed:b4:3c:1c:93:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F2:C9:17:A1:4D:2C:65:07:2D:71:11:0A:5E:A1:21:9B:A0:0E:8B
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531363a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e16::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:0b:ed:40:cf:55:e1:84:5e:5c:82:c0:ab:dd:a0:bf:2c:
         bf:58:83:cb:a2:84:6c:08:e5:3c:cf:7d:cb:5c:26:5b:44:3c:
         a9:c3:47:50:8a:59:4f:d0:b6:f5:3c:7f:74:86:46:8c:ff:72:
         cd:21:aa:29:4a:07:b9:b7:89:32:d3:b8:f8:30:7b:f7:6d:d6:
         69:3c:22:03:2f:39:17:f1:97:08:94:20:38:fc:ee:48:be:06:
         f7:8e:1c:8f:cd:34:82:eb:c6:61:49:52:6e:79:f6:a6:3c:76:
         37:f3:2f:09:91:85:84:8b:c7:9f:eb:46:ac:22:33:28:cf:34:
         6c:f4:d6:7e:0c:7b:56:1e:6d:ab:5f:ac:d1:e3:94:1b:fe:a7:
         76:32:a0:a5:1d:f3:77:15:f9:01:50:cb:69:a9:5c:01:2f:10:
         6e:53:bf:12:a9:d2:53:66:e6:ee:ab:78:43:b9:b3:0f:ea:df:
         7d:72:b0:1c:ad:e6:9b:15:16:b8:81:4f:d8:6c:b4:46:bb:b2:
         4a:6e:ab:32:8c:16:bd:53:11:5b:f6:db:a5:47:67:14:d1:82:
         d2:aa:b7:d9:cc:a1:a2:8d:78:d8:d8:e7:b0:91:b9:38:9f:eb:
         a1:15:99:de:d6:bd:a0:16:bb:85:26:e3:fb:e9:84:bd:ba:a2:
         94:44:83:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:23 2025 by rpki-client