Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532323a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346532323a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          BdPJI3vqbucWXOSfpJbH88+74lOHJfmGYv3Ms2IdclI=
Subject key identifier:   8F:2E:6B:B6:78:74:8F:4C:12:B1:2E:FF:B1:ED:8F:80:D9:ED:70:BD
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       500E93297DD9F22386A83549944363C037BEB3AC
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532323a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:44 +0000
ROA not before:           Tue 04 Feb 2025 19:56:44 +0000
ROA not after:            Tue 03 Feb 2026 20:01:44 +0000
asID:                     267848
IP address blocks:        2800:be0:4e22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0e:93:29:7d:d9:f2:23:86:a8:35:49:94:43:63:c0:37:be:b3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:44 2025 GMT
            Not After : Feb  3 20:01:44 2026 GMT
        Subject: CN=8F2E6BB678748F4C12B12EFFB1ED8F80D9ED70BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:c7:68:1a:c4:e0:54:a5:f5:ab:b6:b1:d5:
                    68:a0:4f:95:e8:d9:f4:1c:f0:4d:45:f5:5d:f2:1c:
                    50:33:79:cb:c9:ad:d6:70:6e:66:e3:10:dd:dd:a3:
                    89:06:36:0b:2f:d2:2e:23:77:46:91:b0:c1:d6:77:
                    0d:02:7f:75:08:9b:6c:ee:1e:e8:a6:59:a6:0b:9d:
                    73:af:52:ad:6b:c1:93:25:43:fc:c4:9a:68:b5:0e:
                    ed:c0:26:f7:c5:31:22:61:fa:8c:7e:34:c0:ff:6d:
                    00:ae:17:92:6b:30:8e:be:2a:5c:1a:a4:80:4c:8b:
                    a7:8a:b5:34:7f:c4:16:3b:0b:df:db:8f:f3:ad:6f:
                    93:1a:ea:9f:3c:83:b1:d7:af:26:52:13:6b:7a:34:
                    f2:a6:10:f2:37:d5:14:e0:2c:3b:51:dc:bf:3f:45:
                    66:ae:8f:c7:84:86:0f:8f:42:be:74:f1:78:52:3d:
                    fe:de:27:bd:87:31:e7:20:f3:ed:f7:57:8a:b2:52:
                    30:8e:f2:65:88:8c:1b:04:15:64:3a:5e:a4:30:55:
                    9c:a4:cf:e7:77:40:0a:7e:8c:06:fc:b8:5c:e5:a6:
                    45:56:8f:7e:b6:49:c1:fb:9e:5d:5a:c2:b9:37:c9:
                    b7:3f:71:9a:42:0d:c2:8f:4c:d5:37:74:e9:28:6f:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2E:6B:B6:78:74:8F:4C:12:B1:2E:FF:B1:ED:8F:80:D9:ED:70:BD
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532323a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e22::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:13:33:13:4c:b1:da:c5:57:11:0c:15:fe:11:9b:26:5d:
         b5:01:cf:10:40:52:63:6b:49:94:da:45:30:a1:c1:06:47:12:
         a3:20:6b:0c:b6:44:bc:b4:aa:f6:53:76:12:fa:7a:41:24:80:
         cd:c6:79:3c:d8:07:77:07:99:7b:12:41:44:d3:a2:5d:09:94:
         49:15:10:49:b1:08:d3:b2:42:9c:21:93:33:a9:75:b8:1f:f5:
         65:11:27:a5:ea:7f:9a:62:7c:e0:c3:a3:13:3e:97:5d:0f:b6:
         a5:0f:8c:2e:67:8c:35:fa:12:be:08:da:a6:2e:ed:1b:29:9f:
         f8:51:04:62:39:5e:99:28:53:ec:a6:ed:0b:ff:92:db:55:e5:
         38:4f:a9:a4:3d:b8:01:55:ba:81:47:44:2f:30:d3:e9:02:ed:
         5f:b7:88:dd:7f:bb:9b:b6:54:6a:17:80:ab:21:bf:3b:13:82:
         63:d5:b9:35:33:7d:f1:4c:69:72:8f:ae:38:9f:eb:af:a1:af:
         1b:0e:f1:5c:bc:d5:b5:12:77:38:58:54:b9:2c:d7:09:ad:3a:
         5f:f6:9e:71:b4:0c:af:dd:6a:55:87:db:5c:d6:38:13:f5:a3:
         b6:38:a1:40:5a:38:be:70:84:55:ee:86:5d:ec:a1:a5:3a:8b:
         c7:fd:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:18 2025 by rpki-client