Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/323830313a303a3432303a3a2f34382d3438203d3e20323632313537.roa
File:                     323830313a303a3432303a3a2f34382d3438203d3e20323632313537.roa (raw, json)
Hash identifier:          n8c3zvawBURWRHNoq/ubimYQmZ3lto2aUr4r9SOJ0pQ=
Subject key identifier:   9D:A9:66:20:E9:0C:17:2F:59:1F:F2:13:79:22:3C:05:AF:05:30:79
Certificate issuer:       /CN=ABCA5BFE80371D74C85885F36AA97BA698DFAE02
Certificate serial:       078B81A4845EB58D6C18C6A4F3EA1E889BEA108F
Authority key identifier: AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/323830313a303a3432303a3a2f34382d3438203d3e20323632313537.roa
Signing time:             Tue 04 Feb 2025 20:07:22 +0000
ROA not before:           Tue 04 Feb 2025 20:02:22 +0000
ROA not after:            Tue 03 Feb 2026 20:07:22 +0000
asID:                     262157
IP address blocks:        2801:0:420::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8b:81:a4:84:5e:b5:8d:6c:18:c6:a4:f3:ea:1e:88:9b:ea:10:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABCA5BFE80371D74C85885F36AA97BA698DFAE02
        Validity
            Not Before: Feb  4 20:02:22 2025 GMT
            Not After : Feb  3 20:07:22 2026 GMT
        Subject: CN=9DA96620E90C172F591FF21379223C05AF053079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:86:99:70:56:f9:eb:d4:a5:6d:d0:76:41:
                    d8:ef:76:dd:82:c6:14:66:36:9d:c9:1d:c3:b7:df:
                    ae:4f:a4:88:50:a3:21:57:df:25:60:da:62:2a:73:
                    8d:72:c7:cd:78:6a:ac:43:22:6a:c2:08:32:a4:64:
                    07:be:45:c9:8a:c7:4c:d7:21:23:1d:5f:0b:86:c3:
                    c5:0d:b5:41:5f:28:d5:4e:5d:c1:51:2a:cf:26:7e:
                    a9:f0:a5:e8:89:9b:79:a2:d5:5a:79:1f:9e:44:54:
                    2e:9f:21:a2:15:7f:dd:87:33:af:dd:cb:70:6f:2c:
                    c2:b5:37:c4:d5:b3:55:1a:92:51:b8:99:d8:18:29:
                    53:71:11:e8:18:59:79:49:b0:b1:66:6e:92:ba:89:
                    2f:0d:c7:a3:7d:a1:b8:dc:3e:db:f3:01:d2:61:dc:
                    29:8d:57:77:1c:54:20:94:a1:b8:8d:c9:0d:2c:54:
                    0a:b4:85:4c:9a:ab:72:27:a6:e3:4c:8f:74:6c:88:
                    14:99:2d:bc:c7:b6:be:f7:ce:ef:5b:9e:5b:07:e4:
                    8f:15:f1:35:5b:e7:03:69:fb:48:de:f4:08:2a:a7:
                    32:fb:e7:27:c3:cb:d5:a6:83:fc:40:3e:f6:71:8c:
                    f0:b0:e0:74:c2:bf:ef:76:ef:ef:79:7c:cd:04:3c:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A9:66:20:E9:0C:17:2F:59:1F:F2:13:79:22:3C:05:AF:05:30:79
            X509v3 Authority Key Identifier:
                keyid:AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/323830313a303a3432303a3a2f34382d3438203d3e20323632313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:420::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:75:e9:5f:8c:e5:19:36:ed:61:0a:4f:ac:f6:81:66:35:b4:
         c4:93:34:9a:0f:5b:0d:14:9b:7b:00:51:0f:bc:ec:21:b2:32:
         7c:d9:46:70:21:40:8e:48:6a:9e:62:99:32:82:35:be:62:4e:
         da:98:f8:d4:d8:0c:95:a2:5a:43:60:c1:4d:ab:4b:a6:b7:5f:
         c6:6e:81:b4:e5:ff:a1:f2:a1:b0:ff:41:48:30:6d:34:16:a8:
         bc:af:64:7e:90:d2:cd:25:4a:d0:a7:cd:bd:1b:5d:59:05:ad:
         0a:cf:79:47:af:ec:8d:f4:14:e6:c2:1a:fd:7e:6c:c6:0c:b1:
         ad:16:2d:fd:63:ba:56:95:4c:aa:bb:ab:83:38:e8:fd:7c:12:
         1f:fe:f3:45:dc:42:6a:b1:9c:f2:cc:a6:cf:61:94:24:9e:48:
         d9:b5:1c:25:02:b8:39:fa:80:3b:b5:34:9a:46:76:26:66:15:
         73:7c:00:0f:63:27:50:f3:c7:81:5f:6a:f5:a0:9f:75:1c:b0:
         98:96:2d:bf:04:3c:c5:68:c0:a5:2f:c5:f3:a2:49:0b:71:d3:
         db:7a:c2:29:02:7d:3a:c8:69:92:94:c8:86:34:4d:33:ae:cc:
         bd:52:c2:ec:cb:01:d9:72:2a:9e:8a:17:ea:f4:c4:d4:43:58:
         0f:41:9e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:03:40 2025 by rpki-client