Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e20323733323131.roa
File:                     323830313a3162353a3a2f34342d3634203d3e20323733323131.roa (raw, json)
Hash identifier:          pvzTyf/XC+OufJUwXbWeoKlCBHOhMQnGiQn1ZFjd54c=
Subject key identifier:   AB:D0:DC:BB:75:23:02:B3:2F:F9:67:C4:E7:80:19:73:4B:27:CF:47
Certificate issuer:       /CN=00081CCF51F05A88CFEA13F66D62E8E6494B66AA
Certificate serial:       6A4B40FFE32542ACB4515ECF2F127F1992EBF50B
Authority key identifier: 00:08:1C:CF:51:F0:5A:88:CF:EA:13:F6:6D:62:E8:E6:49:4B:66:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e20323733323131.roa
Signing time:             Fri 25 Jul 2025 22:05:02 +0000
ROA not before:           Fri 25 Jul 2025 22:00:02 +0000
ROA not after:            Fri 24 Jul 2026 22:05:02 +0000
asID:                     273211
IP address blocks:        2801:1b5::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4b:40:ff:e3:25:42:ac:b4:51:5e:cf:2f:12:7f:19:92:eb:f5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00081CCF51F05A88CFEA13F66D62E8E6494B66AA
        Validity
            Not Before: Jul 25 22:00:02 2025 GMT
            Not After : Jul 24 22:05:02 2026 GMT
        Subject: CN=ABD0DCBB752302B32FF967C4E78019734B27CF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:88:0a:fd:a2:10:49:9c:d9:cd:22:50:f7:
                    33:5d:3a:d2:a0:29:76:36:70:fe:ce:f6:05:71:28:
                    00:04:a8:2b:5c:34:56:ee:f5:e1:10:10:e7:a4:95:
                    5c:7c:ce:d0:b9:c9:2e:38:1a:ab:a0:e6:f6:d6:6d:
                    f8:30:f4:fe:77:ce:20:3c:dd:eb:1f:9f:9d:94:c6:
                    84:39:f9:9c:53:3f:4e:4c:b6:27:ab:27:22:4f:b6:
                    b0:a7:ab:45:ec:65:7e:f0:84:ca:ca:85:1c:5b:98:
                    bc:70:dc:ae:ce:76:d1:34:99:a6:8a:1f:ee:67:1c:
                    f5:8b:fd:b5:34:4c:a9:b3:01:e4:d4:97:7a:d1:97:
                    85:6f:38:90:05:05:f6:84:a5:66:27:1b:59:82:99:
                    7e:dd:0d:dc:a2:b9:34:64:81:28:07:5b:0a:c0:5d:
                    0d:aa:b9:a2:9c:f7:97:54:a2:d8:22:20:aa:8f:10:
                    ef:04:53:39:9a:d1:f4:a9:6a:84:97:b9:d2:98:5e:
                    19:0e:b5:9a:2e:c8:55:7f:3f:0f:b2:da:ce:d3:9f:
                    3c:ed:b9:80:26:90:18:88:cd:a3:b9:c0:d4:46:46:
                    ce:d7:75:d2:60:fe:06:86:e0:16:03:91:06:19:ae:
                    53:0e:cb:9f:4d:60:7f:4a:0c:d5:11:8b:de:a7:4a:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D0:DC:BB:75:23:02:B3:2F:F9:67:C4:E7:80:19:73:4B:27:CF:47
            X509v3 Authority Key Identifier:
                keyid:00:08:1C:CF:51:F0:5A:88:CF:EA:13:F6:6D:62:E8:E6:49:4B:66:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00081CCF51F05A88CFEA13F66D62E8E6494B66AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7B31FC13D62A62B3BAACF4E514B2BE9B6BA1C4FFA5DC12BBFDDD1707E89D16/0/323830313a3162353a3a2f34342d3634203d3e20323733323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b5::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:77:f3:2a:d2:b5:11:55:2a:fb:b9:72:1c:e4:a9:82:00:
         d2:23:26:9b:41:c6:b0:47:74:fc:76:89:85:34:dc:ca:dd:b1:
         a3:bf:cf:f7:85:58:76:f4:2c:1a:85:73:c8:ec:51:f9:84:f2:
         65:09:4f:1d:fb:6b:53:0e:e8:95:9b:8e:95:dd:7e:09:e0:bc:
         94:66:fc:56:b7:19:11:e3:26:d0:c6:cc:3a:00:ce:3d:b8:f9:
         92:6f:4c:d2:52:b5:70:3d:37:a1:2c:4f:af:74:1a:c7:51:b7:
         70:82:3c:c9:76:aa:eb:d1:0d:c5:a6:37:01:f2:2d:51:38:76:
         1f:14:6b:3a:a3:7f:78:6d:55:5a:09:b5:90:2d:b1:31:c3:60:
         13:1c:af:da:8c:b0:63:b0:8c:53:b4:d4:e4:aa:ca:3f:f7:e7:
         44:9f:ca:53:a1:51:de:47:a0:18:3a:7d:87:a3:6d:b9:cc:fc:
         c8:22:37:0f:b5:b1:74:d3:65:62:ea:85:9c:23:55:e9:6c:f4:
         f4:54:aa:c2:ad:cb:ca:c5:77:f0:c0:05:36:2f:23:a6:19:23:
         b4:45:30:67:08:22:cb:72:92:65:00:70:96:92:56:f0:5f:8a:
         49:41:b4:60:0e:dc:af:48:2e:24:0f:02:ed:da:cc:af:73:3b:
         c6:ac:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:07:03 2025 by rpki-client