Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e2031383030.roa
File:                     323830313a3135343a3a2f34322d3432203d3e2031383030.roa (raw, json)
Hash identifier:          UpWBj9ONTa/+9aOYO02DwEhbYSFaq2S3swV8AVaaaDo=
Subject key identifier:   49:9B:0A:1A:27:EC:5D:F8:2B:2A:34:16:E9:B8:6E:7F:02:FE:C7:EE
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       36F92EB5AC7E0EE1F8500FD325975906E5188685
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e2031383030.roa
Signing time:             Fri 16 May 2025 01:30:00 +0000
ROA not before:           Fri 16 May 2025 01:25:00 +0000
ROA not after:            Fri 15 May 2026 01:30:00 +0000
asID:                     1800
IP address blocks:        2801:154::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f9:2e:b5:ac:7e:0e:e1:f8:50:0f:d3:25:97:59:06:e5:18:86:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: May 16 01:25:00 2025 GMT
            Not After : May 15 01:30:00 2026 GMT
        Subject: CN=499B0A1A27EC5DF82B2A3416E9B86E7F02FEC7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:bb:ee:07:0c:59:9b:b0:e4:08:b2:3c:a9:
                    17:c4:eb:a0:13:02:2a:64:ec:95:ee:57:51:87:07:
                    be:3e:33:e1:1a:bf:9a:d9:48:9e:4f:75:d9:dd:bb:
                    65:89:d5:fc:93:e4:57:d3:76:2e:0a:17:75:8f:70:
                    da:41:7f:8a:ba:3e:7a:78:07:7e:5b:09:a2:f1:8a:
                    be:30:f9:ba:cd:25:0d:c9:e5:48:ab:c0:2c:b6:6d:
                    6d:9b:b1:c5:3a:8c:06:09:d8:84:a3:8a:21:9d:95:
                    81:5a:fe:29:3d:f8:38:dd:2f:97:59:6a:96:3c:6c:
                    ad:3d:a1:d4:db:ac:11:7a:ff:89:5f:2d:2b:b1:2f:
                    61:80:e7:6b:c5:e3:6b:28:96:da:aa:e2:2d:d8:a2:
                    18:f2:4c:33:ed:58:ba:d8:53:ef:4b:99:5c:26:0b:
                    b9:f7:b8:93:19:30:d0:c4:c5:70:99:5f:a2:bc:c3:
                    10:c9:a7:cf:14:06:00:74:91:d3:1e:f1:47:5f:56:
                    83:eb:30:4d:01:2e:f7:af:3a:3f:fe:c9:61:3f:4e:
                    de:34:16:f9:51:f2:19:0b:c6:14:7a:9e:cb:04:73:
                    46:e6:9d:fb:2c:1a:52:a1:ee:eb:09:e9:2e:67:fd:
                    d6:8b:bb:60:3b:1b:b3:cb:ae:8b:f7:62:a7:ad:65:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9B:0A:1A:27:EC:5D:F8:2B:2A:34:16:E9:B8:6E:7F:02:FE:C7:EE
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e2031383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:154::/42

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:7c:a1:1e:d2:d8:3e:50:c4:92:91:d2:29:a6:c5:f9:ff:
         8c:ea:4e:fb:37:30:a8:81:61:ec:bd:f1:3c:be:e4:77:7a:f8:
         0f:6f:3b:7d:9a:23:4c:de:c1:3e:52:2b:e2:62:db:54:ab:cd:
         68:2b:7b:b7:ff:df:ca:ec:83:b0:4e:6d:4c:21:9f:f8:f8:06:
         fe:9e:56:f5:20:27:eb:ca:b0:78:d0:0e:b9:3a:34:50:bb:71:
         1d:9a:35:77:67:3f:1c:e8:7d:63:20:a3:41:17:38:8b:7c:f3:
         e2:1b:b3:29:df:2a:d6:83:2a:01:83:e8:c2:fd:62:fa:20:55:
         64:db:e9:7e:ff:48:68:46:55:63:0c:6d:16:f2:0d:d1:ce:d3:
         cb:fa:b7:ac:20:1e:33:f0:45:68:60:26:cc:f3:9d:a9:fb:2e:
         5d:c4:cb:d3:84:39:d7:13:62:a9:d3:3a:a2:13:4d:22:24:b0:
         fd:fc:60:b8:95:d8:ea:4a:15:f2:98:42:73:7a:71:fb:80:66:
         cb:26:6c:58:86:6a:87:78:74:19:78:f5:c3:7e:14:62:ff:52:
         66:54:e1:6a:0a:cc:83:17:20:f1:49:d5:01:93:1e:ab:6d:f7:
         2b:ff:c3:18:34:b7:3f:53:39:ee:9f:d7:ed:09:d9:25:35:6d:
         1d:16:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:40:13 2025 by rpki-client