Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465313a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465313a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          mrrgcH+lOafoOpUg0aGHsPfcHWcpJvcacxPWL7mK1no=
Subject key identifier:   04:29:7C:D1:54:AA:C8:77:1C:4E:02:5E:72:44:F4:E5:7F:0B:24:85
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       39968918A7999FB3A04661A29E82D7B266EC8C73
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465313a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:44 +0000
ROA not before:           Tue 04 Feb 2025 19:56:44 +0000
ROA not after:            Tue 03 Feb 2026 20:01:44 +0000
asID:                     267848
IP address blocks:        2800:be0:4e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:96:89:18:a7:99:9f:b3:a0:46:61:a2:9e:82:d7:b2:66:ec:8c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:44 2025 GMT
            Not After : Feb  3 20:01:44 2026 GMT
        Subject: CN=04297CD154AAC8771C4E025E7244F4E57F0B2485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:77:33:b4:9d:46:b2:ed:95:a8:df:af:c8:
                    73:d6:2b:12:2b:52:6f:64:d4:1b:e3:21:a5:39:ba:
                    a4:e9:b8:93:92:40:c4:cd:16:1b:a5:43:13:3e:70:
                    82:d6:6f:d0:47:17:27:ab:df:7c:a5:04:78:40:53:
                    bc:da:a9:1c:6d:fe:2b:be:c5:72:23:f2:9c:f9:fe:
                    d8:67:26:1b:5c:7d:60:1b:02:35:0a:be:3d:02:3b:
                    86:b5:c3:f6:7e:fb:29:0a:07:d1:8e:44:24:b6:e4:
                    78:49:a8:7c:f2:04:9c:98:79:59:66:c0:76:4f:17:
                    59:29:ca:e6:6b:2b:64:a9:1b:fd:c3:20:fe:44:c4:
                    a1:36:c8:f1:4f:67:a0:dd:99:47:dd:db:e2:18:2a:
                    07:b2:c3:61:60:26:53:de:0d:3f:35:e4:22:11:39:
                    78:10:67:e7:5f:02:68:e6:b7:aa:d7:94:50:00:38:
                    40:f6:f3:7a:e4:73:24:a8:8c:cb:c0:86:a1:d5:b5:
                    a8:e6:17:36:23:c7:b2:62:3e:42:6e:80:a8:0d:1f:
                    bf:5b:f9:e3:10:36:a9:92:0b:22:6b:39:f0:eb:16:
                    87:36:be:92:10:3f:0f:5a:39:f1:12:fc:8b:bd:c0:
                    f3:65:f2:2f:e4:ca:2b:38:e3:53:0c:fe:ea:5a:ed:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:7C:D1:54:AA:C8:77:1C:4E:02:5E:72:44:F4:E5:7F:0B:24:85
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465313a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:fa:52:21:18:11:10:74:88:d6:3a:18:c1:46:8c:d8:7c:
         d7:f2:36:fe:f0:41:f9:c3:b2:6d:94:ae:48:90:94:8b:6a:da:
         0b:f8:4f:4f:4b:f7:8a:f1:b3:c9:3f:51:ab:f9:a1:81:4a:c9:
         83:48:83:88:d8:66:4e:aa:9e:4c:2a:1b:12:9b:7e:6d:58:e7:
         30:63:2e:cb:6e:57:cb:87:48:ae:c1:b0:40:0f:44:58:2d:90:
         62:c7:65:72:e4:8f:4f:61:18:ce:97:61:10:d1:d3:96:97:de:
         39:e7:3f:db:fa:fb:2e:e1:7e:c6:f9:f5:cc:5b:78:59:50:35:
         8f:c1:e7:72:64:89:8c:6d:04:8d:46:9e:e2:f3:68:1e:77:0c:
         22:6b:13:3d:23:94:ce:d4:10:43:eb:e4:63:58:5b:9e:81:4d:
         11:c7:09:d5:61:c9:8d:c4:11:7b:62:ef:b2:ae:f6:5c:78:fc:
         dd:47:e4:12:6b:a1:ae:6b:43:a8:4b:d5:a9:05:90:a5:5d:78:
         07:38:85:76:f7:5d:96:8d:41:dc:18:b9:c8:d9:42:6b:3a:e3:
         b1:45:3a:10:53:2a:86:21:c9:db:17:66:fb:46:4d:fd:6a:94:
         04:10:88:cc:a5:c1:8f:4b:9e:f3:8a:56:cd:9b:aa:8a:f5:1f:
         12:c5:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:30 2025 by rpki-client