Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/323830313a31623a393830303a3a2f34382d3438203d3e20323732313037.roa
File:                     323830313a31623a393830303a3a2f34382d3438203d3e20323732313037.roa (raw, json)
Hash identifier:          zZ+TaY0y9O72fh9TXcSiP/7UZ1xoVPOtA2KYew70d6s=
Subject key identifier:   FF:7C:DF:E2:8F:4A:62:59:8B:85:C0:CB:79:41:26:CF:5A:E8:56:2D
Certificate issuer:       /CN=524C8468BBEEA468708713BB02C909C11A4A4F25
Certificate serial:       60576215804EBEF769B9641FBC9C41492E538451
Authority key identifier: 52:4C:84:68:BB:EE:A4:68:70:87:13:BB:02:C9:09:C1:1A:4A:4F:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/323830313a31623a393830303a3a2f34382d3438203d3e20323732313037.roa
Signing time:             Wed 14 May 2025 16:45:00 +0000
ROA not before:           Wed 14 May 2025 16:40:00 +0000
ROA not after:            Wed 13 May 2026 16:45:00 +0000
asID:                     272107
IP address blocks:        2801:1b:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:57:62:15:80:4e:be:f7:69:b9:64:1f:bc:9c:41:49:2e:53:84:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524C8468BBEEA468708713BB02C909C11A4A4F25
        Validity
            Not Before: May 14 16:40:00 2025 GMT
            Not After : May 13 16:45:00 2026 GMT
        Subject: CN=FF7CDFE28F4A62598B85C0CB794126CF5AE8562D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:f3:1d:d9:a4:5f:68:64:fd:a7:ba:af:53:
                    1c:71:fc:1c:09:0d:a3:af:15:a3:6b:6b:3e:16:c5:
                    20:88:62:2f:94:70:f5:b9:5c:1b:69:b6:ca:c7:9a:
                    33:3a:46:d8:67:69:a2:28:3c:88:6d:20:d0:b7:b3:
                    47:0d:ed:73:10:5d:72:b6:6f:46:64:23:47:3d:76:
                    0c:9d:fe:d2:7a:2c:4e:12:72:83:7b:76:b3:b6:09:
                    6d:7e:33:84:0f:d2:f3:79:53:a5:8d:91:7e:5d:8a:
                    de:45:be:6c:d7:49:6a:2f:aa:8e:04:de:cf:c1:d4:
                    9d:e2:19:14:ec:e7:d4:60:e8:b2:33:b2:fd:1d:91:
                    af:95:82:8e:6f:60:e4:42:26:2f:bb:2d:d5:62:8e:
                    b1:c4:43:91:a1:3c:8e:41:ab:b6:15:29:19:4f:4e:
                    19:86:b8:6e:ba:3d:b8:14:33:cb:92:77:ad:70:14:
                    f8:9e:17:fa:72:8f:9b:6d:27:19:8f:55:1c:67:bc:
                    46:06:33:52:dc:da:f0:f7:65:b4:e8:2c:f6:a2:7e:
                    f3:73:0a:85:25:21:14:ed:e2:b9:d7:f3:ad:6a:4c:
                    c6:25:59:df:fd:7d:11:c5:9e:19:d4:f5:18:2c:9d:
                    a4:48:d6:9e:6a:b7:80:52:55:a1:05:6c:86:18:c8:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7C:DF:E2:8F:4A:62:59:8B:85:C0:CB:79:41:26:CF:5A:E8:56:2D
            X509v3 Authority Key Identifier:
                keyid:52:4C:84:68:BB:EE:A4:68:70:87:13:BB:02:C9:09:C1:1A:4A:4F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/323830313a31623a393830303a3a2f34382d3438203d3e20323732313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:a0:c0:5e:f3:fe:64:22:cb:c2:96:ee:81:d6:13:03:cb:45:
         76:0e:87:a4:6d:ee:f2:53:be:96:eb:97:e4:d4:ac:d1:9e:18:
         67:92:14:35:81:c9:6f:2c:84:a1:e8:00:8d:f6:d7:e6:dc:35:
         78:a3:10:8f:d0:57:5d:d1:cb:e5:50:06:dc:c3:5e:91:3d:35:
         bd:f3:a3:6a:6c:df:93:c1:d6:5c:7f:4f:3e:9e:88:7f:e3:7f:
         c5:bb:94:e2:32:de:04:c4:e6:b1:40:35:74:1e:d6:58:73:8f:
         46:0d:67:aa:4b:8f:20:38:32:7b:c8:40:22:d9:59:3e:90:c5:
         0a:a4:0e:0b:48:5b:6b:fe:c2:e5:e4:b6:15:13:e4:95:f8:89:
         74:e8:a0:b7:23:26:da:e0:55:8c:69:b6:d2:a7:83:04:68:40:
         14:8c:60:e7:91:85:e8:4b:94:4e:14:85:3d:e7:7c:d5:db:f6:
         a6:c0:aa:81:d1:10:3c:98:c6:bf:2f:8a:9a:89:78:8b:f6:c1:
         34:42:ca:5f:6c:97:31:fb:ae:ea:9f:4a:d3:4f:88:6b:54:a6:
         5e:92:33:d1:2b:3d:f3:f9:1c:1e:ef:87:46:d3:c1:d7:b9:2a:
         83:43:a2:fc:2e:b4:f5:13:0c:6d:4b:75:a4:fa:d4:c8:c5:2c:
         1a:57:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 01:11:50 2025 by rpki-client