Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465323a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465323a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          X3mriM6IzlGbIEQd3OdWYXmu4tveM8k73RLnlRbLeVg=
Subject key identifier:   1E:71:B4:E8:98:30:2A:1B:D2:D3:14:A4:0A:7E:60:24:1D:1C:41:FA
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       21F4B8712B47B113C649EA4CDCF72A10D0B86CFD
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465323a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:42 +0000
ROA not before:           Tue 04 Feb 2025 19:56:42 +0000
ROA not after:            Tue 03 Feb 2026 20:01:42 +0000
asID:                     267848
IP address blocks:        2800:be0:4e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f4:b8:71:2b:47:b1:13:c6:49:ea:4c:dc:f7:2a:10:d0:b8:6c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:42 2025 GMT
            Not After : Feb  3 20:01:42 2026 GMT
        Subject: CN=1E71B4E898302A1BD2D314A40A7E60241D1C41FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:93:40:d9:0b:e0:60:4e:9b:9f:aa:1f:25:
                    84:eb:2a:7f:32:d9:89:38:bd:33:4c:d6:50:75:ba:
                    b8:ec:1e:a7:55:c3:37:77:cb:de:b6:41:a9:db:36:
                    a1:ac:f2:07:ac:9b:e9:34:f6:74:3e:70:ca:f6:73:
                    36:22:80:4c:85:67:11:bb:2b:3e:66:c4:4e:8b:2a:
                    ab:10:0b:d6:23:e5:49:8b:1d:4f:02:c6:87:1a:09:
                    95:fd:20:06:b9:e8:62:70:96:b8:39:c8:f7:96:c5:
                    20:2e:60:4b:79:8e:f9:9c:ac:fa:eb:25:91:d6:26:
                    c6:c7:da:1a:c5:2a:8d:9b:98:32:10:a3:13:05:24:
                    c6:36:76:05:93:1f:a4:96:72:aa:58:77:5e:df:49:
                    82:49:a1:43:c6:4d:bd:19:a2:31:f8:3a:61:03:1c:
                    b1:62:27:bd:a2:5f:24:23:11:ef:c4:d0:46:3b:db:
                    87:bd:89:5b:9f:18:76:9d:e1:36:7f:23:83:33:b4:
                    c7:8d:12:b2:01:c6:0b:e7:f6:0d:ed:63:49:0b:f1:
                    ed:f5:17:8e:0c:1b:bc:32:27:06:04:0a:3d:5d:02:
                    32:f9:03:ae:6c:32:80:ee:be:22:8e:14:d3:78:51:
                    58:24:64:3b:b7:df:0c:ac:e2:94:15:7a:a8:63:97:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:71:B4:E8:98:30:2A:1B:D2:D3:14:A4:0A:7E:60:24:1D:1C:41:FA
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465323a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:e2:12:d2:0c:13:88:33:12:d2:f7:2f:b5:df:8e:c0:9d:
         b5:f2:2d:c1:df:e6:3a:5c:c8:61:22:c8:39:99:1e:ec:58:b6:
         dc:96:42:eb:76:6d:fe:a0:44:d3:54:37:5e:7f:66:65:e1:be:
         1d:58:d5:e7:45:b3:8c:c4:96:be:95:67:07:3a:1d:f4:8e:39:
         4f:f7:41:fd:c9:8d:7c:db:0c:a1:b1:a4:43:d3:2a:16:3b:74:
         91:13:a9:c0:b2:71:f4:e9:63:6c:5e:f1:fe:88:6c:d7:f8:60:
         53:8f:39:c0:34:31:da:c8:42:b1:1f:6b:6b:55:8c:86:b8:b6:
         4c:39:17:1a:67:e7:a7:49:3d:eb:fe:b1:65:01:ba:b6:f9:4b:
         9f:8d:b2:35:9e:5a:41:bd:7d:bf:e4:e1:92:0f:13:67:cf:05:
         a8:dc:88:7e:b0:16:d4:15:7f:fe:8d:c3:d7:78:c2:3b:f9:21:
         98:e1:eb:d2:de:93:12:ca:8e:83:bd:55:a1:90:92:25:aa:1a:
         19:35:30:c4:ed:68:a6:af:93:59:08:f4:25:3a:35:a5:e8:4e:
         cf:84:a0:59:c8:7e:8b:26:e9:52:e4:31:3b:60:30:d7:cb:ce:
         8f:5b:d9:6f:94:29:b7:7d:1f:d5:fa:2f:26:bc:16:d1:a8:a8:
         cb:44:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:45 2025 by rpki-client