Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/323830313a31623a663830303a3a2f34382d3438203d3e203532343638.roa
File:                     323830313a31623a663830303a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          oCOcRfdNKMVypfkSJgEEHs8kcevAcbEG351RMnC4VOI=
Subject key identifier:   DF:82:8B:A9:6D:5A:1D:C3:2E:1C:02:06:98:04:D9:B8:16:6E:B2:FB
Certificate issuer:       /CN=1FE06FF6B1883A9B111B67DE697E266A58B2646B
Certificate serial:       086945EF31F7470DC8B1B4267EEB5EB653A947F3
Authority key identifier: 1F:E0:6F:F6:B1:88:3A:9B:11:1B:67:DE:69:7E:26:6A:58:B2:64:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/323830313a31623a663830303a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 22 May 2025 01:10:00 +0000
ROA not before:           Thu 22 May 2025 01:05:00 +0000
ROA not after:            Thu 21 May 2026 01:10:00 +0000
asID:                     52468
IP address blocks:        2801:1b:f800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 15:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:69:45:ef:31:f7:47:0d:c8:b1:b4:26:7e:eb:5e:b6:53:a9:47:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FE06FF6B1883A9B111B67DE697E266A58B2646B
        Validity
            Not Before: May 22 01:05:00 2025 GMT
            Not After : May 21 01:10:00 2026 GMT
        Subject: CN=DF828BA96D5A1DC32E1C02069804D9B8166EB2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:b0:b2:ec:2c:12:4f:25:f4:aa:0f:71:2d:
                    79:ae:fc:01:9e:57:98:7b:e5:01:c4:45:b2:67:63:
                    90:54:82:c4:6a:bf:17:d7:d2:7f:a4:f7:49:bc:13:
                    28:13:8e:09:eb:48:bb:ec:fe:80:72:28:2d:69:0a:
                    68:8d:34:0a:a7:0c:44:b9:e5:da:86:43:c8:82:7c:
                    77:ad:a5:70:e0:9c:a9:f1:c6:1f:e9:ff:80:88:26:
                    03:5e:59:73:40:de:2f:23:18:23:dd:88:ee:3b:a7:
                    49:30:53:4e:c4:af:68:8e:4f:de:5a:7b:bb:76:89:
                    82:0d:a1:12:13:3a:f5:f5:70:45:55:d3:ec:07:24:
                    d6:34:f6:10:4a:9c:10:44:d2:e2:b9:c3:b2:d3:92:
                    04:fa:c4:df:66:4f:34:2d:bd:e2:3f:06:ad:2f:0b:
                    a0:fd:c8:0c:1c:a5:7f:5a:cd:d7:eb:37:95:f6:ea:
                    93:3e:c4:7b:c7:75:9c:49:05:d6:61:67:ba:b2:bf:
                    a0:9c:32:c3:20:a0:69:d4:9d:ad:05:0e:0f:2a:e1:
                    4d:6b:f6:20:fc:4b:e3:56:13:44:1b:d0:e6:1c:6c:
                    55:cf:56:18:da:ec:65:7d:07:25:fe:dc:ba:a3:ea:
                    31:02:f2:15:60:42:a9:2d:fb:b4:3e:5f:82:e1:07:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:82:8B:A9:6D:5A:1D:C3:2E:1C:02:06:98:04:D9:B8:16:6E:B2:FB
            X509v3 Authority Key Identifier:
                keyid:1F:E0:6F:F6:B1:88:3A:9B:11:1B:67:DE:69:7E:26:6A:58:B2:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/323830313a31623a663830303a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:cf:99:3e:2c:13:7f:b7:f3:b7:dd:6f:08:36:01:f1:9b:
         d5:4c:5c:f0:8e:30:0d:96:ea:7f:84:57:2d:8c:d2:80:a1:78:
         1c:22:8a:52:e1:7f:3b:df:56:70:88:5e:2b:78:42:75:fd:5f:
         39:d0:61:bc:6a:fa:7f:ef:67:01:f2:4a:fb:3f:23:89:ed:28:
         81:e1:1d:9b:a0:d3:36:97:d4:a1:84:0f:20:84:cf:52:3a:51:
         42:a1:1b:00:10:54:e1:60:4d:0e:14:4f:d0:43:82:f0:70:34:
         14:3f:00:37:f4:18:7f:6d:d0:6e:f8:d2:17:67:f0:45:a5:6e:
         fe:8f:13:26:04:68:4e:7c:06:c4:66:eb:6e:a1:ca:5b:c9:13:
         f7:dc:5b:6f:a5:8a:f3:f6:79:a6:fb:61:48:6e:cd:d2:76:e1:
         ad:06:2b:e4:6c:f3:b3:72:36:a1:ba:b4:ea:95:db:8f:6d:c9:
         4e:f4:83:9d:99:84:89:9c:53:5a:cf:1b:45:83:1c:21:02:d2:
         3e:72:aa:a6:c5:9d:cd:41:16:ad:45:81:a2:92:ee:df:40:d2:
         46:38:0e:bc:c6:5c:f4:3e:46:2f:8a:42:aa:14:d5:11:ab:38:
         12:aa:f7:bf:4a:19:b9:14:fe:fb:a1:f0:bf:a3:fb:7a:6a:a3:
         4f:13:73:af
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUCGlF7zH3Rw3IsbQmfutetlOpR/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZFMDZGRjZCMTg4M0E5QjExMUI2N0RFNjk3RTI2NkE1
OEIyNjQ2QjAeFw0yNTA1MjIwMTA1MDBaFw0yNjA1MjEwMTEwMDBaMDMxMTAvBgNV
BAMTKERGODI4QkE5NkQ1QTFEQzMyRTFDMDIwNjk4MDREOUI4MTY2RUIyRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVirCy7CwSTyX0qg9xLXmu/AGe
V5h75QHERbJnY5BUgsRqvxfX0n+k90m8EygTjgnrSLvs/oByKC1pCmiNNAqnDES5
5dqGQ8iCfHetpXDgnKnxxh/p/4CIJgNeWXNA3i8jGCPdiO47p0kwU07Er2iOT95a
e7t2iYINoRITOvX1cEVV0+wHJNY09hBKnBBE0uK5w7LTkgT6xN9mTzQtveI/Bq0v
C6D9yAwcpX9azdfrN5X26pM+xHvHdZxJBdZhZ7qyv6CcMsMgoGnUna0FDg8q4U1r
9iD8S+NWE0Qb0OYcbFXPVhja7GV9ByX+3Lqj6jEC8hVgQqkt+7Q+X4LhBxOXAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU34KLqW1aHcMuHAIGmATZuBZusvswHwYDVR0j
BBgwFoAUH+Bv9rGIOpsRG2feaX4maliyZGswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTFCOEE4QjEwQzMwQTQ2QUQzMkJBMkUyQTExQkUyODgz
NTZFMDJENTVFRTU3QzczMTQ1NjAwNEFENTk3QjVFLzAvMUZFMDZGRjZCMTg4M0E5
QjExMUI2N0RFNjk3RTI2NkE1OEIyNjQ2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRkUwNkZGNkIxODgzQTlCMTEx
QjY3REU2OTdFMjY2QTU4QjI2NDZCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTkxQjhBOEIxMEMzMEE0NkFEMzJCQTJFMkExMUJFMjg4MzU2RTAyRDU1
RUU1N0M3MzE0NTYwMDRBRDU5N0I1RS8wLzMyMzgzMDMxM2EzMTYyM2E2NjM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAb+AAwDQYJKoZIhvcNAQELBQADggEBABpaz5k+LBN/t/O33W8INgHxm9VMXPCO
MA2W6n+EVy2M0oCheBwiilLhfzvfVnCIXit4QnX9XznQYbxq+n/vZwHySvs/I4nt
KIHhHZug0zaX1KGEDyCEz1I6UUKhGwAQVOFgTQ4UT9BDgvBwNBQ/ADf0GH9t0G74
0hdn8EWlbv6PEyYEaE58BsRm626hylvJE/fcW2+livP2eab7YUhuzdJ24a0GK+Rs
87NyNqG6tOqV249tyU70g52ZhImcU1rPG0WDHCEC0j5yqqbFnc1BFq1FgaKS7t9A
0kY4DrzGXPQ+Ri+KQqoU1RGrOBKq979KGbkU/vuh8L+j+3pqo08Tc68=
-----END CERTIFICATE-----
Generated at Sun Jun 22 17:25:10 2025 by rpki-client