Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          6w2LGvPNxvqdFTB9FkMPE+fJTw2ERuDEbG5jPaSYY30=
Subject key identifier:   9A:40:33:F5:D9:E8:48:5D:C9:3F:47:36:41:1D:9C:7F:7B:15:F5:02
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       3556A080F14E4362D1BD6A802209EBFAFDF1F5DE
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:42 +0000
ROA not before:           Tue 04 Feb 2025 19:56:42 +0000
ROA not after:            Tue 03 Feb 2026 20:01:42 +0000
asID:                     267848
IP address blocks:        2800:be0:4e21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:56:a0:80:f1:4e:43:62:d1:bd:6a:80:22:09:eb:fa:fd:f1:f5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:42 2025 GMT
            Not After : Feb  3 20:01:42 2026 GMT
        Subject: CN=9A4033F5D9E8485DC93F4736411D9C7F7B15F502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:7f:d8:b5:9d:95:6c:ed:db:3a:4f:ef:d3:
                    4e:4d:a0:c3:b5:68:e2:31:b3:06:71:df:27:70:16:
                    a4:79:6d:8a:d4:49:7a:0e:80:7b:6a:fd:31:ca:db:
                    c1:ee:34:b2:9f:20:5a:7d:27:07:d3:f9:c7:06:fe:
                    fa:07:86:a7:f4:31:39:ce:84:21:6d:3b:7e:7d:3d:
                    fb:32:d6:c6:0f:7f:27:7c:6b:ba:55:2f:6b:52:35:
                    8a:9f:bc:a8:01:a0:44:52:24:40:69:45:99:34:b3:
                    fa:4e:07:f7:a0:b0:22:6e:a3:62:20:81:33:a5:02:
                    51:e6:e9:f3:a0:22:1c:cb:a1:bd:75:3a:b8:80:3c:
                    07:8f:96:57:6a:e0:8c:f6:35:2c:28:bd:8c:fd:76:
                    bb:f4:18:2f:ae:e1:1c:56:bc:fb:1a:74:7f:4a:21:
                    19:0e:06:c2:45:79:b1:d0:78:02:80:8b:17:05:54:
                    95:0a:9b:bb:b7:60:d3:4c:b3:32:e6:3a:f3:19:d7:
                    3d:16:12:25:0c:6f:b0:2d:79:56:4a:98:cc:12:d3:
                    d8:5d:53:f3:7a:7e:23:f9:84:23:86:e4:c9:e7:df:
                    2f:d7:bc:7f:92:54:dc:a3:82:2a:7b:e4:8b:de:2e:
                    3a:62:27:82:58:2b:84:bb:d0:68:21:7f:f6:1e:cd:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:40:33:F5:D9:E8:48:5D:C9:3F:47:36:41:1D:9C:7F:7B:15:F5:02
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e21::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:bc:4a:a0:f8:8a:6a:57:1d:7e:2e:83:e6:5b:5c:5f:3d:
         9a:c0:2c:a9:ca:91:50:07:04:2f:69:8f:f7:49:a1:cd:6e:41:
         dc:8e:c0:ca:51:07:6c:6d:05:75:8c:a2:d1:aa:f8:cb:5d:bd:
         f1:72:3f:27:c5:97:8c:44:09:28:9b:46:7f:42:b6:fe:49:c5:
         10:78:74:e5:b9:33:77:99:13:e8:69:5a:85:b7:cd:c9:75:78:
         4a:da:6a:b7:59:50:01:80:f1:f2:0a:c1:a3:c4:84:43:b6:e2:
         c3:d0:18:fd:62:85:77:f2:ca:b5:2b:a5:da:72:76:e7:72:ba:
         29:e1:72:c9:ae:dc:e1:0f:73:a9:3c:99:d1:c5:ec:1c:c8:bc:
         b3:36:77:15:e9:00:12:3e:ce:40:70:30:9f:86:36:66:1e:33:
         4a:40:a3:3c:ba:f4:08:7f:d1:2d:f7:1c:e5:ea:d2:91:41:ad:
         78:01:a7:dc:eb:e6:96:ed:8f:13:96:0e:08:40:45:84:9e:92:
         3c:f2:e0:5a:4a:54:50:60:5e:70:70:a1:03:d1:7d:be:85:a9:
         44:14:52:34:bc:f5:6a:f5:7c:2e:f4:cc:5f:5d:78:53:4f:bb:
         e0:74:25:09:33:ce:14:91:67:fe:d4:9a:64:4f:f9:b2:8b:df:
         31:c3:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:23 2025 by rpki-client