Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/323830313a303a3162303a3a2f34382d3438203d3e203136373031.roa
File:                     323830313a303a3162303a3a2f34382d3438203d3e203136373031.roa (raw, json)
Hash identifier:          x/z0BTWsr5TPbXkdoHgQeXrlTmaZI6q62zHfk3k1OuA=
Subject key identifier:   8A:EB:6B:54:06:17:EF:33:CB:60:40:B5:E4:F2:86:98:36:8C:6F:40
Certificate issuer:       /CN=12072E6C1A48AEC19505180D145D1D56D72980F3
Certificate serial:       52BBB4A809BA6293353B1B88C22A98520697F51D
Authority key identifier: 12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/323830313a303a3162303a3a2f34382d3438203d3e203136373031.roa
Signing time:             Tue 06 May 2025 20:17:48 +0000
ROA not before:           Tue 06 May 2025 20:12:48 +0000
ROA not after:            Tue 05 May 2026 20:17:48 +0000
asID:                     16701
IP address blocks:        2801:0:1b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bb:b4:a8:09:ba:62:93:35:3b:1b:88:c2:2a:98:52:06:97:f5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12072E6C1A48AEC19505180D145D1D56D72980F3
        Validity
            Not Before: May  6 20:12:48 2025 GMT
            Not After : May  5 20:17:48 2026 GMT
        Subject: CN=8AEB6B540617EF33CB6040B5E4F28698368C6F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:5a:ee:02:9b:de:a2:de:1d:22:72:83:09:
                    a9:11:49:db:44:18:d3:5b:eb:ef:b9:9a:88:f1:cb:
                    50:cc:f2:0a:19:26:8a:c7:35:9f:09:99:7b:8a:e8:
                    a1:84:97:06:36:46:2b:08:c8:03:68:fe:2e:43:87:
                    3f:0e:0e:e4:33:8c:25:06:25:37:8b:19:e5:3f:df:
                    4f:a1:b7:da:15:5f:e2:4f:e8:7b:b8:d9:bf:e8:d4:
                    81:4a:bf:31:6e:f7:d1:b7:c5:88:49:d8:75:81:dc:
                    7a:bb:6e:3f:b2:6e:4b:1e:95:02:b0:cc:72:4d:1d:
                    72:16:ae:24:4a:97:c6:dd:a3:3a:98:08:e1:ce:90:
                    8a:17:5d:a6:d4:23:17:17:35:cd:13:70:37:f0:4c:
                    ac:d9:42:e7:54:10:df:30:53:53:6a:be:46:9d:2a:
                    6a:8b:ff:c6:db:fb:41:c5:06:0a:2c:a9:bd:c7:24:
                    33:88:67:4e:4d:e5:72:fa:3d:8b:2d:04:fe:0e:13:
                    54:c6:ff:fe:7f:b5:ee:f2:41:87:fa:6c:21:8e:c4:
                    ae:30:ea:95:d4:85:91:3b:5a:a2:92:12:3f:14:16:
                    36:c4:bd:9b:7b:cc:b1:61:30:93:98:fd:34:83:bb:
                    e4:e5:77:93:41:a2:b8:3b:25:1a:a0:d6:ae:14:b5:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:6B:54:06:17:EF:33:CB:60:40:B5:E4:F2:86:98:36:8C:6F:40
            X509v3 Authority Key Identifier:
                keyid:12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/323830313a303a3162303a3a2f34382d3438203d3e203136373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:1b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:3e:b0:17:94:29:1c:68:07:2e:f1:c4:7c:fd:7f:84:07:
         e4:af:d9:ce:9b:a6:23:05:83:e5:51:49:77:93:f1:37:e6:5c:
         2a:47:c1:1e:95:05:bd:94:b4:c6:46:00:78:5b:9e:e0:f1:03:
         a2:59:19:34:31:58:43:3c:c0:d7:02:12:bb:5d:aa:9e:1e:10:
         77:6b:a9:2f:05:2b:a1:e5:d2:a2:06:d8:2d:ca:cd:cd:fa:25:
         d9:bf:fe:aa:86:69:2e:e9:2c:1c:03:ef:5f:55:fb:e8:4d:4e:
         c8:72:a6:e4:96:d0:ea:c6:31:3c:6f:4a:72:be:e9:db:4d:6a:
         2e:c0:92:23:ab:6c:85:82:48:f3:bd:16:96:ba:d7:01:58:da:
         13:7d:a5:6a:42:63:5e:87:4d:9c:a0:c4:52:f5:f0:af:1d:e2:
         f1:dd:a6:2b:e6:6c:7c:aa:03:03:27:e8:28:7f:4e:d2:d1:a5:
         f2:5a:b0:04:0e:19:1c:0e:23:ec:74:79:6f:f2:13:c0:b3:81:
         5e:3d:4a:42:58:30:70:21:08:d5:16:0f:ea:bc:c3:fb:ed:fb:
         f8:fe:91:07:7d:cb:f4:2a:68:20:a0:51:a2:6a:d0:39:02:76:
         9d:c9:e9:d0:ee:92:f4:79:ec:18:6b:8e:41:e9:66:b0:e4:a6:
         73:d9:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:08:53 2025 by rpki-client