Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3a2f33322d3332203d3e20323637383438.roa
File:                     323830303a6265303a3a2f33322d3332203d3e20323637383438.roa (raw, json)
Hash identifier:          oi2fAjz1OGDReMuNx8+B3zMpFSWpzruprvoCLqpt0Qk=
Subject key identifier:   1F:64:41:3E:A9:90:46:BC:C8:32:19:59:62:05:79:F7:C2:AE:94:7C
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       5355B2CD2C230EE4A5949596113F4804A9112C17
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3a2f33322d3332203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:42 +0000
ROA not before:           Tue 04 Feb 2025 19:56:42 +0000
ROA not after:            Tue 03 Feb 2026 20:01:42 +0000
asID:                     267848
IP address blocks:        2800:be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:55:b2:cd:2c:23:0e:e4:a5:94:95:96:11:3f:48:04:a9:11:2c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:42 2025 GMT
            Not After : Feb  3 20:01:42 2026 GMT
        Subject: CN=1F64413EA99046BCC8321959620579F7C2AE947C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:f7:3a:7e:ac:66:b8:c2:d4:ce:03:31:08:
                    2b:30:db:b1:bc:f8:fd:2f:25:bf:5b:fa:7a:15:c0:
                    16:42:cb:4f:85:41:f0:b8:3e:dc:c5:b8:9a:84:9c:
                    34:b5:3b:f4:7f:8e:9f:ed:58:03:ad:79:af:20:54:
                    ed:35:9c:d7:44:7a:56:32:3f:f8:1f:93:45:d5:f5:
                    be:62:58:4f:82:aa:a9:cd:f9:ea:d4:2d:16:e8:b7:
                    f5:36:08:3f:73:3a:11:40:89:4b:78:95:bf:32:51:
                    c3:e3:e9:8a:4c:cb:4c:80:b7:4e:41:bd:f0:2c:b3:
                    d7:59:a0:64:71:2c:8d:51:aa:42:fc:50:1a:f0:e4:
                    19:8d:7d:1b:07:59:9c:ac:5a:84:70:cf:95:83:40:
                    ec:67:8e:1f:fb:e4:1a:e2:5f:c9:e4:de:bf:85:3a:
                    98:75:37:1b:3a:c9:72:d4:d9:90:57:78:0f:d9:ce:
                    13:02:29:76:88:a9:8a:e4:39:ec:ea:77:c0:28:74:
                    e4:cf:53:b7:3c:54:bd:41:cd:ed:dc:cd:a9:58:ee:
                    00:58:2c:c2:50:c2:67:c3:74:00:53:85:43:c3:26:
                    36:96:52:ff:29:59:8c:c2:57:4e:a6:f8:b1:84:98:
                    70:69:76:de:9c:bf:e5:02:94:54:e2:10:80:88:33:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:64:41:3E:A9:90:46:BC:C8:32:19:59:62:05:79:F7:C2:AE:94:7C
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3a2f33322d3332203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:fc:c9:4b:b6:a3:9b:26:70:5c:97:bd:9f:21:11:00:63:
         c8:0f:c5:28:bd:2f:83:9d:6c:3e:8c:87:7b:52:83:d7:7f:02:
         2c:11:bb:1a:c0:23:c1:0f:1a:12:7f:a2:ed:9e:f1:25:a6:32:
         c0:ee:64:37:1d:b3:f4:2d:c6:aa:6a:f8:9f:b3:ab:83:fa:1c:
         ec:9c:6d:71:2a:9a:98:70:82:2c:71:77:68:35:64:cd:36:82:
         34:10:a4:7f:0a:a8:74:46:eb:78:75:6b:70:cc:1d:40:4c:97:
         66:0c:77:b4:d1:96:30:9e:03:d2:9e:9e:7d:0d:4d:ec:3f:9f:
         78:de:e2:c0:39:e7:10:cc:bb:e1:67:9e:00:a2:c5:ad:a1:ea:
         16:2e:34:ec:82:33:04:3a:b9:ed:91:43:87:26:8f:2b:1d:d7:
         ab:b6:8d:85:70:21:17:c5:a9:b5:d1:2c:9c:61:8c:ad:bf:28:
         94:60:05:21:21:2c:ae:ec:cf:2c:b2:7a:b5:4e:19:f5:63:ab:
         87:1f:5f:06:ab:fd:5b:2e:68:7c:89:54:75:a5:8d:06:3c:71:
         42:25:b2:2c:b1:6b:dd:9c:27:5f:a7:07:74:a6:7a:ea:9d:c2:
         b9:ef:7e:92:22:00:da:6a:d8:14:6e:2c:33:1b:46:02:f5:e2:
         90:06:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:14 2025 by rpki-client