Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a38303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3161643a38303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          F5NFByLL9Jc3Y8Rut/NWnZrLRcQDb+t82ZiIvPPrF2U=
Subject key identifier:   21:8B:EA:C7:42:33:72:51:48:FC:EB:0F:DF:29:54:37:0B:00:C1:BA
Certificate issuer:       /CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
Certificate serial:       68B24C681FD2B99467AC99E64795460784F41513
Authority key identifier: 08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a38303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Wed 17 Sep 2025 01:30:00 +0000
ROA not before:           Wed 17 Sep 2025 01:25:00 +0000
ROA not after:            Wed 16 Sep 2026 01:30:00 +0000
asID:                     19429
IP address blocks:        2801:1ad:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b2:4c:68:1f:d2:b9:94:67:ac:99:e6:47:95:46:07:84:f4:15:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
        Validity
            Not Before: Sep 17 01:25:00 2025 GMT
            Not After : Sep 16 01:30:00 2026 GMT
        Subject: CN=218BEAC74233725148FCEB0FDF2954370B00C1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:2d:35:6f:7a:24:6a:01:50:e8:f4:cf:c6:
                    d0:c8:3f:6a:dd:3b:77:d6:09:46:b2:69:a1:7b:3c:
                    1c:95:9a:b2:e2:0e:44:02:30:ce:43:f3:ad:b3:7d:
                    5d:78:7b:f4:56:37:9e:0e:f8:f6:3b:aa:d7:56:9b:
                    41:7c:15:7b:f7:e4:50:d8:ff:0e:37:77:ee:f9:2d:
                    73:10:5b:7d:e8:83:e0:3b:7b:1b:cf:95:2f:36:4e:
                    fd:6b:fc:ab:c0:a9:69:6a:3a:04:e4:ca:04:b8:eb:
                    9c:30:05:95:29:5f:18:54:58:4f:5e:73:ef:57:10:
                    f8:01:d9:08:7e:27:28:e3:32:1f:44:cd:7e:ef:cf:
                    2c:76:ad:79:f9:3b:5e:97:01:42:4c:71:01:ef:30:
                    df:68:71:51:5e:fd:00:c0:fe:25:95:17:47:d9:0c:
                    3b:f5:5c:a7:b9:d4:fc:9e:69:fd:36:9a:1c:b4:f3:
                    91:49:af:7f:6f:56:eb:ac:66:f9:8e:b1:ab:09:e5:
                    2f:d7:e2:f7:0c:a1:dc:e1:6d:02:0d:33:bc:44:e9:
                    55:06:07:f2:75:c8:36:4f:de:6e:44:2b:ab:a6:15:
                    ab:46:30:0f:17:c5:8b:3e:6c:3f:46:6e:b5:cd:fa:
                    95:c4:04:dd:f7:ce:1a:22:56:a4:53:4d:04:af:96:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8B:EA:C7:42:33:72:51:48:FC:EB:0F:DF:29:54:37:0B:00:C1:BA
            X509v3 Authority Key Identifier:
                keyid:08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a38303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ad:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:cb:66:c7:a5:4e:ba:0d:72:e3:ff:aa:e4:4d:15:29:4e:
         76:20:1c:ac:3f:7b:95:75:ec:f0:01:41:41:48:ef:5b:e1:09:
         8c:bd:c8:ba:ae:5d:62:23:13:a7:c6:ef:47:54:82:ba:aa:d2:
         4e:30:5e:de:68:a1:e4:3b:5e:12:eb:75:8f:30:3b:11:1b:58:
         27:b3:d1:98:a2:55:4b:1f:27:c8:be:6d:1d:cc:9e:56:be:d1:
         38:7c:17:c8:14:67:9e:80:cb:7b:07:96:09:be:2a:05:a9:f9:
         87:a4:88:18:01:c4:26:c8:0d:4c:53:79:48:55:37:86:a3:1b:
         67:a1:6a:c9:37:92:e3:06:74:f1:03:28:75:a8:5b:bf:88:bc:
         35:90:69:d1:0c:ea:67:21:df:53:20:be:d2:ed:c3:5e:20:fb:
         12:ce:27:e2:c8:03:06:91:f5:a2:84:fe:ae:5a:c2:79:3c:e2:
         8a:4d:1e:24:c6:f0:ac:16:72:1f:76:55:38:62:5b:9c:98:26:
         91:71:be:06:3e:f2:f9:4e:e2:8d:a5:db:33:77:ab:57:a9:88:
         75:a5:8e:72:fe:d3:d1:b2:8e:cb:70:0f:e3:3e:c9:7a:aa:3a:
         4d:54:85:80:e2:9b:4e:68:26:d7:d7:22:99:34:64:61:ab:79:
         53:8a:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:21 2025 by rpki-client