Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3161613a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          tX4mvVZy0R2pO/ziWgduaayp4clcLAxhSiVt7ntTF+0=
Subject key identifier:   1F:D2:F3:25:CA:BC:F9:07:DF:B9:86:F4:CD:74:9F:B8:D2:7D:8B:C3
Certificate issuer:       /CN=E001D620B6E014F51D5A8A878F416307AA8F761D
Certificate serial:       48F0F1B65CA1DD73AE6FFD328529C6A3BB700C2C
Authority key identifier: E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 06 May 2025 03:55:00 +0000
ROA not before:           Tue 06 May 2025 03:50:00 +0000
ROA not after:            Tue 05 May 2026 03:55:00 +0000
asID:                     27951
IP address blocks:        2801:1aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 10:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f0:f1:b6:5c:a1:dd:73:ae:6f:fd:32:85:29:c6:a3:bb:70:0c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E001D620B6E014F51D5A8A878F416307AA8F761D
        Validity
            Not Before: May  6 03:50:00 2025 GMT
            Not After : May  5 03:55:00 2026 GMT
        Subject: CN=1FD2F325CABCF907DFB986F4CD749FB8D27D8BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:74:66:c1:84:51:8f:52:9b:96:24:27:6d:
                    6c:0f:50:d2:ca:10:a7:46:2b:36:79:4f:62:2c:b6:
                    a6:4f:85:75:97:cd:d8:9d:6f:de:4a:4e:c9:0a:85:
                    95:f9:28:c8:8b:22:42:8c:c6:b6:85:ed:ef:2f:09:
                    82:11:b2:3c:8d:3b:01:2e:7d:6a:18:08:91:c9:d9:
                    63:5a:3e:0e:73:73:1c:bd:a0:7c:09:f8:27:1f:17:
                    98:9d:4d:52:39:cd:e1:7a:3d:ba:a0:d0:92:42:77:
                    e3:e5:f1:19:08:85:44:22:da:ea:1a:7e:d4:ce:64:
                    89:3b:e0:7c:30:7c:30:47:71:18:8a:d3:6b:aa:90:
                    24:08:75:44:fc:90:f7:5b:79:4c:a5:73:f8:c4:5e:
                    50:54:12:f4:03:6f:d2:9c:a3:2e:f6:8d:56:2a:d0:
                    67:94:95:38:e8:a2:c5:5a:e6:c3:4c:7c:ce:9e:83:
                    ff:37:c2:ce:93:d2:4b:0e:44:bc:d1:1b:58:78:4c:
                    d0:2b:fe:86:15:90:08:15:54:9b:6a:cc:c2:3c:de:
                    ce:88:f5:9c:8b:d9:e8:a7:6c:7a:34:2d:2b:bc:b9:
                    30:ac:1f:aa:e9:f7:cd:69:1e:c0:37:d0:09:43:04:
                    e1:21:54:e7:27:a5:41:a7:52:c7:78:c3:50:ec:65:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:F3:25:CA:BC:F9:07:DF:B9:86:F4:CD:74:9F:B8:D2:7D:8B:C3
            X509v3 Authority Key Identifier:
                keyid:E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:37:a8:c1:ff:2b:8f:ae:b8:3b:ca:f5:85:5a:07:2e:df:
         fa:61:0c:29:17:60:e6:56:88:25:63:c3:c3:93:4a:f2:d8:c7:
         45:19:3f:fb:dd:de:e2:be:0f:00:d6:90:77:24:20:09:96:36:
         c0:d8:6a:95:21:7f:be:fe:70:4f:a9:0d:b2:52:36:06:1a:a3:
         ad:a1:81:59:62:48:c2:fc:7d:1c:25:6c:4e:49:31:ae:61:e7:
         7c:13:eb:48:8a:68:6c:b1:60:93:4a:bf:da:75:de:53:d0:54:
         5e:1d:e2:6e:bd:38:9a:e3:8a:06:e6:71:cd:89:c3:d9:4f:cb:
         a4:52:c7:a3:79:cf:4a:65:c2:ed:47:b2:bf:01:d9:a3:31:b9:
         b4:96:c5:a0:7e:04:38:40:41:16:ed:d2:8d:ea:b8:ef:4d:04:
         50:95:af:75:53:08:9d:7f:25:ec:d2:11:2d:e2:45:3e:6d:ef:
         d9:50:57:47:b5:e0:4a:fc:ec:6b:ee:df:31:17:2d:c9:4d:a0:
         7c:08:a7:84:b9:78:16:68:07:00:93:58:5d:f7:71:30:ea:78:
         7f:90:bb:32:86:8b:12:92:ac:92:ce:ba:95:2f:00:cc:5a:f2:
         f0:cf:3f:a3:64:82:01:19:cc:28:da:a0:01:6c:f6:97:5b:9b:
         e6:77:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:27:28 2025 by rpki-client