Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465383a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465383a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          b2WX5aqYELrd5sORkkYx8z+K5F1N1cgJHzxaLaxdKLs=
Subject key identifier:   04:6D:62:33:4C:5A:7C:3F:99:8B:4F:CF:1B:3A:21:7B:B8:0A:DF:D5
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       0C2002B9745D4D4FAF6FFA3E08BBBB8F489EF988
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465383a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:44 +0000
ROA not before:           Tue 04 Feb 2025 19:56:44 +0000
ROA not after:            Tue 03 Feb 2026 20:01:44 +0000
asID:                     267848
IP address blocks:        2800:be0:4e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:20:02:b9:74:5d:4d:4f:af:6f:fa:3e:08:bb:bb:8f:48:9e:f9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:44 2025 GMT
            Not After : Feb  3 20:01:44 2026 GMT
        Subject: CN=046D62334C5A7C3F998B4FCF1B3A217BB80ADFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:83:31:49:6f:4b:43:d4:80:7c:5a:4d:d8:
                    e7:3e:35:95:d1:96:02:2c:b0:e8:39:9f:7f:2e:53:
                    ed:0f:28:5f:d5:4b:cf:57:9f:1e:2d:c6:f3:ac:e8:
                    6c:07:c4:2e:e1:ff:3e:58:00:b7:41:6a:c0:4f:63:
                    01:1c:a5:e0:c8:73:f7:fc:81:d8:bb:78:f3:ce:b2:
                    7a:69:fb:0e:12:0a:f3:cc:35:62:8c:a8:7e:b4:25:
                    48:d2:12:c7:9c:c3:ca:a4:aa:5e:de:85:35:ec:5b:
                    92:af:4e:de:04:96:76:3e:62:c7:a6:22:c3:50:c5:
                    bf:9a:8c:17:92:d8:96:02:fb:ac:30:ab:e0:4d:65:
                    38:16:09:f3:75:d1:4f:e0:5d:b1:28:c8:dd:bf:1c:
                    4a:c3:50:4e:79:9f:46:e4:ed:bc:d0:20:ed:fa:76:
                    79:d9:25:a2:b5:cb:7c:ba:b3:0e:ed:13:cc:67:46:
                    5f:8e:fc:c1:f5:e4:d0:39:69:f8:ca:84:91:a7:75:
                    fa:e3:57:aa:27:6b:c9:4b:82:c8:53:b5:90:86:a6:
                    21:e4:54:28:e9:4b:d7:91:8f:aa:7b:64:49:d9:82:
                    83:96:77:c9:7d:f5:f0:a2:72:86:47:5c:20:e9:dd:
                    14:7b:7b:ef:f4:c2:84:6a:9a:3f:32:b2:6d:75:ec:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6D:62:33:4C:5A:7C:3F:99:8B:4F:CF:1B:3A:21:7B:B8:0A:DF:D5
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465383a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:5d:ac:21:c2:26:10:67:76:32:4c:60:07:fd:f2:4c:0f:24:
         fe:cb:83:44:1f:e9:16:f5:01:71:fb:93:58:0e:16:d8:53:9f:
         4e:21:a7:6d:76:b6:67:33:a1:91:ea:a3:f0:f2:2a:51:8c:df:
         76:f1:21:22:ba:f8:aa:73:3b:e0:24:f9:73:77:67:ca:f9:31:
         62:e0:31:63:7f:52:d7:f3:b3:ed:b5:94:ff:61:92:e2:12:99:
         9f:75:a4:f4:a2:e4:86:af:89:b7:96:91:09:57:57:f0:a5:05:
         3e:94:fb:41:3a:d0:53:da:21:a5:90:2d:83:28:ae:21:1a:b4:
         44:ca:9e:24:e3:96:e3:44:57:b6:4a:06:ce:21:81:18:fc:5a:
         42:a3:ed:e9:1a:86:a9:7a:34:45:9d:e9:3b:45:b6:d6:09:70:
         57:b3:b9:53:1d:9e:8c:8c:e9:ec:f5:3a:93:87:f1:8c:15:63:
         dc:0f:82:d9:d7:df:f7:4e:0f:0c:cd:d7:cf:c8:e0:9e:2f:74:
         b6:ec:9c:07:77:76:55:24:09:01:cf:a4:11:17:63:9c:27:d1:
         8b:dc:45:57:ad:83:cd:cc:1c:bf:6f:ec:a4:e4:df:75:66:ce:
         de:b9:ac:00:09:1d:9d:bb:5e:b4:ab:b9:08:7a:e6:f5:56:dc:
         22:aa:77:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:08 2025 by rpki-client