Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/323830313a3134343a3a2f34322d3432203d3e20323634383335.roa
File:                     323830313a3134343a3a2f34322d3432203d3e20323634383335.roa (raw, json)
Hash identifier:          9PtUNz7ObPIQI53JgwVg1GUSiwSW+73wNvb2q42j9RQ=
Subject key identifier:   ED:7A:0A:E9:16:D3:07:47:55:0E:6F:07:FA:43:70:4D:C5:CD:F5:4B
Certificate issuer:       /CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3
Certificate serial:       5FDC147FF9009E79B8E658F9574128E53F1BEB35
Authority key identifier: 10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/323830313a3134343a3a2f34322d3432203d3e20323634383335.roa
Signing time:             Tue 04 Feb 2025 20:04:18 +0000
ROA not before:           Tue 04 Feb 2025 19:59:18 +0000
ROA not after:            Tue 03 Feb 2026 20:04:18 +0000
asID:                     264835
IP address blocks:        2801:144::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:14:7f:f9:00:9e:79:b8:e6:58:f9:57:41:28:e5:3f:1b:eb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3
        Validity
            Not Before: Feb  4 19:59:18 2025 GMT
            Not After : Feb  3 20:04:18 2026 GMT
        Subject: CN=ED7A0AE916D30747550E6F07FA43704DC5CDF54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:3f:e1:35:3a:77:a8:bd:7f:98:1b:8f:e9:
                    72:0c:61:48:9f:94:77:b3:68:70:c3:49:0e:ce:db:
                    87:c1:11:37:f2:af:f4:c9:b4:c3:f3:3e:5b:da:38:
                    24:bb:0b:4f:92:c0:1d:85:af:cd:06:97:e4:1d:63:
                    8b:a1:5d:72:98:cf:71:c3:66:27:ef:4b:e5:44:c4:
                    45:d1:0a:55:cc:c2:5b:1d:68:fe:47:b8:5d:b2:f4:
                    c4:43:e2:18:6f:b6:e9:3c:14:bd:78:f8:93:24:e4:
                    77:2f:71:e0:ac:5e:3b:3d:39:0e:58:18:af:73:5c:
                    9e:a6:be:76:25:88:79:e8:31:52:3e:c3:d2:13:6b:
                    14:2f:fd:a3:61:10:a2:44:43:7b:32:0c:de:79:2d:
                    3b:bd:01:22:e5:03:04:d5:f6:96:18:01:ce:48:be:
                    ef:4e:7a:3f:4c:3e:71:5c:61:a8:b0:13:d4:f0:80:
                    d6:fc:09:76:64:3b:73:b6:dc:e3:55:f9:22:82:84:
                    da:b9:a5:ee:52:97:93:7c:f0:2e:13:ce:0a:16:93:
                    15:42:86:8b:58:41:73:6a:f2:2d:ee:d0:cc:76:22:
                    66:4a:23:b4:0a:a3:d8:c0:e6:ce:3d:7b:b0:69:7d:
                    04:66:72:37:9e:c4:bd:a7:ad:fc:93:61:1e:a8:37:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7A:0A:E9:16:D3:07:47:55:0E:6F:07:FA:43:70:4D:C5:CD:F5:4B
            X509v3 Authority Key Identifier:
                keyid:10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/323830313a3134343a3a2f34322d3432203d3e20323634383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:144::/42

    Signature Algorithm: sha256WithRSAEncryption
         ab:62:37:8d:cd:93:a2:d3:07:e1:bb:d5:dc:32:11:b9:6b:9f:
         1e:ad:50:54:2a:82:d3:1e:ab:a3:8e:f1:ef:d5:0f:72:e5:a8:
         94:08:54:e2:8a:5d:4e:11:58:60:c5:af:44:c3:cb:f0:cd:74:
         f8:08:3a:93:6d:0e:1f:7a:ad:e2:c0:af:9c:41:f7:95:d8:01:
         d6:25:27:0c:3d:1a:3f:80:9e:f5:f3:8b:32:c2:c4:51:2f:53:
         4f:a3:4b:8d:fd:88:c0:f3:df:34:9b:27:21:73:35:bb:ec:ca:
         de:13:fd:4f:6a:d1:d6:d6:70:6b:f3:03:dc:57:dc:be:27:e2:
         41:94:50:4a:32:7b:1c:71:6a:66:14:f6:a7:94:9d:c0:d4:9c:
         3a:2f:bb:dd:de:18:52:47:fe:bd:f1:e4:b5:14:73:57:c1:47:
         a3:2c:e9:54:2d:3c:76:56:42:31:02:39:4e:f9:09:d3:b8:a2:
         82:d3:70:4e:d8:fc:38:75:f7:9f:48:19:9f:21:62:51:00:f8:
         22:6b:ea:c1:a9:a1:9a:c2:00:8c:50:8a:15:1b:e4:de:65:1d:
         92:88:39:2b:33:97:f9:10:26:f8:88:4b:0f:fd:c9:f5:f2:74:
         74:8b:c9:ec:7b:dc:61:c7:4d:28:7e:15:8e:a2:2d:48:d7:c5:
         51:ee:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:49 2025 by rpki-client