Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
File:                     323830313a3139353a3a2f34342d3434203d3e20323733313437.roa (raw, json)
Hash identifier:          ViGrRIzQq4H1WE5XshTWxDOkfU1QVuXT3ezy/ZNgXT0=
Subject key identifier:   0B:0D:97:E4:DD:63:DD:13:C2:F9:85:15:77:24:9B:1C:2C:1F:E5:C2
Certificate issuer:       /CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
Certificate serial:       65A2BE007395ADBFB384A63E9DAF88B59BBACDEC
Authority key identifier: 8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
Signing time:             Wed 07 May 2025 01:17:52 +0000
ROA not before:           Wed 07 May 2025 01:12:52 +0000
ROA not after:            Wed 06 May 2026 01:17:52 +0000
asID:                     273147
IP address blocks:        2801:195::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a2:be:00:73:95:ad:bf:b3:84:a6:3e:9d:af:88:b5:9b:ba:cd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
        Validity
            Not Before: May  7 01:12:52 2025 GMT
            Not After : May  6 01:17:52 2026 GMT
        Subject: CN=0B0D97E4DD63DD13C2F9851577249B1C2C1FE5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:fb:1b:c4:7d:b8:f0:92:1c:88:33:29:6b:
                    f0:9e:18:8e:97:da:2f:cb:dd:14:89:e2:cc:e1:1d:
                    50:5f:fa:63:29:d4:21:9e:ef:e9:58:1c:78:7e:7a:
                    86:3a:ac:77:17:c6:48:be:48:cc:9f:34:ea:9f:22:
                    3a:fa:20:89:0f:1f:e6:82:4c:39:4f:9e:b2:7f:20:
                    b5:96:65:d7:3f:20:9a:50:70:7f:2e:8a:52:83:95:
                    bb:1e:f9:43:16:ab:58:b8:dc:8f:20:45:0e:94:f0:
                    c5:4a:6f:45:46:7d:fe:41:09:b8:ab:74:80:ad:00:
                    8f:76:8d:42:24:7b:7d:a9:1b:e0:b2:c8:85:e9:8b:
                    9c:2b:5f:52:a0:47:db:cf:d7:92:db:b5:56:54:c6:
                    7f:a8:1c:8f:aa:da:f6:56:dc:3d:d3:91:5b:48:99:
                    cc:d7:29:89:6b:3f:6e:ad:2b:18:c1:4b:1b:ea:b8:
                    14:4d:34:50:16:c0:e5:11:26:52:8b:8c:6b:0f:4c:
                    d4:77:4d:ba:c9:1e:1d:ea:73:26:48:dc:19:e1:82:
                    09:40:e1:4d:d7:3c:a1:7b:d2:c1:d3:d9:ff:74:d5:
                    4f:47:9b:86:95:86:a0:1d:ac:ee:6d:e1:e1:b4:2b:
                    45:9c:45:fa:5e:75:1d:95:a0:80:03:00:94:3d:b5:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:97:E4:DD:63:DD:13:C2:F9:85:15:77:24:9B:1C:2C:1F:E5:C2
            X509v3 Authority Key Identifier:
                keyid:8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:195::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:96:4b:56:08:69:20:0f:3f:a2:5a:fb:28:b1:81:6a:a0:12:
         56:a6:c3:82:09:7f:5b:f4:fc:50:a9:49:aa:18:20:f0:90:f2:
         87:31:20:c3:66:af:ba:bd:d0:a4:a5:56:32:d2:06:17:4d:d2:
         78:20:3e:fc:c7:b7:69:01:0b:9c:0e:02:48:a1:0f:bd:21:70:
         78:49:33:72:b4:0b:30:de:ac:d0:8b:fc:d0:d8:37:50:2f:cf:
         74:9a:48:8c:16:af:ea:0e:6b:63:7c:21:a7:3b:48:73:0a:bd:
         d0:58:b7:1a:2b:3b:e5:4a:a1:9c:c3:ca:1a:aa:91:92:92:07:
         74:93:0d:57:ba:61:5f:d6:b7:b1:69:a4:86:61:ff:b2:5e:70:
         c8:b7:e9:b9:1f:eb:84:25:6e:06:6f:2a:84:fe:80:81:94:8b:
         e2:95:8a:7f:dc:99:d3:c0:50:71:d4:72:91:ae:84:b3:c5:3b:
         f6:48:7b:6c:28:2f:3f:4c:04:4f:a5:0b:8e:2d:67:77:25:9a:
         e5:3d:b2:e7:5d:62:58:f0:b0:79:35:3e:4c:93:32:0b:d3:c9:
         f1:64:03:53:da:90:be:52:29:7b:5a:cc:b7:2f:a2:28:06:9c:
         61:5c:51:d2:51:9b:68:13:32:a2:d0:dc:ef:5f:98:76:d6:6f:
         76:44:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:37:29 2025 by rpki-client