Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/323830313a31623a663830303a3a2f35322d3532203d3e203532343638.roa
File:                     323830313a31623a663830303a3a2f35322d3532203d3e203532343638.roa (raw, json)
Hash identifier:          u2hwmSNuleqs8GQVRV984FUgj3rifwMJ1zDOrjnr+rQ=
Subject key identifier:   C4:20:13:A4:4A:6A:44:E7:11:E6:6D:3E:3F:2E:DC:81:15:32:D8:06
Certificate issuer:       /CN=1FE06FF6B1883A9B111B67DE697E266A58B2646B
Certificate serial:       0C7C7A2AC4C47323107A3D4111E72D72D1F9AA92
Authority key identifier: 1F:E0:6F:F6:B1:88:3A:9B:11:1B:67:DE:69:7E:26:6A:58:B2:64:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/323830313a31623a663830303a3a2f35322d3532203d3e203532343638.roa
Signing time:             Thu 29 May 2025 15:45:00 +0000
ROA not before:           Thu 29 May 2025 15:40:00 +0000
ROA not after:            Thu 28 May 2026 15:45:00 +0000
asID:                     52468
IP address blocks:        2801:1b:f800::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 19:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7c:7a:2a:c4:c4:73:23:10:7a:3d:41:11:e7:2d:72:d1:f9:aa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FE06FF6B1883A9B111B67DE697E266A58B2646B
        Validity
            Not Before: May 29 15:40:00 2025 GMT
            Not After : May 28 15:45:00 2026 GMT
        Subject: CN=C42013A44A6A44E711E66D3E3F2EDC811532D806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:e8:aa:b5:14:39:d4:4d:18:88:17:58:e8:
                    5e:a3:76:c2:39:09:34:65:ee:c3:82:04:cf:bb:b2:
                    22:aa:b3:9a:66:1a:4e:54:a7:07:ad:1e:95:53:32:
                    ed:ba:b6:97:89:fc:b0:28:c8:e0:d5:dc:6f:b2:bf:
                    a2:30:51:c8:b6:09:b0:f5:c4:a5:8d:53:c5:55:95:
                    b9:83:88:5a:80:89:7d:62:1d:11:d5:53:1b:a7:e9:
                    20:75:b0:d9:ea:b8:0c:21:1d:94:3a:38:83:ae:a1:
                    7d:46:34:63:aa:bc:d2:02:ec:c4:70:40:e5:fc:7b:
                    78:62:7c:84:f8:2d:6a:fa:32:f3:e2:c6:88:40:8d:
                    19:96:98:43:2e:c8:a8:e4:4c:e4:d2:e0:90:ea:66:
                    01:46:35:33:e3:43:12:b5:fd:a6:d0:3c:9d:7d:59:
                    dd:1a:2d:d6:07:a4:2b:07:32:a0:6d:3e:33:1c:93:
                    f3:77:6d:fd:9d:0d:ad:b6:7f:75:fc:27:2e:64:2a:
                    57:55:dc:09:2e:ee:da:a9:b0:07:4d:d0:17:b4:63:
                    5e:dd:2c:3a:01:0f:52:dc:0b:45:ed:d6:e7:b9:2d:
                    cf:ff:ad:7b:0a:4a:b9:3c:4b:3c:78:88:50:c2:40:
                    58:46:2b:59:c8:40:42:ff:06:09:6b:e3:8c:7c:67:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:13:A4:4A:6A:44:E7:11:E6:6D:3E:3F:2E:DC:81:15:32:D8:06
            X509v3 Authority Key Identifier:
                keyid:1F:E0:6F:F6:B1:88:3A:9B:11:1B:67:DE:69:7E:26:6A:58:B2:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/323830313a31623a663830303a3a2f35322d3532203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:f800::/52

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:61:8e:e1:7e:22:9a:71:46:6a:7b:8b:31:c6:fb:1a:1f:
         10:55:61:7c:c8:a7:be:0f:86:5c:6a:72:dc:9d:27:60:df:04:
         b0:8d:bc:68:c7:30:09:fd:b5:d6:8c:ba:16:ee:df:dc:a2:bc:
         f7:22:cb:26:da:1f:33:30:dd:9a:3f:da:b8:67:72:cf:d8:6f:
         a1:be:45:6e:d0:d8:da:bb:13:b5:06:86:7c:38:b3:3b:88:73:
         d1:80:26:91:a0:a3:f2:84:49:b5:85:70:23:c9:1c:b9:6f:c9:
         5d:5f:48:d5:01:1c:fa:1c:26:59:c5:9f:54:4a:72:9d:bf:73:
         2e:23:f8:c8:91:d8:bb:bb:a8:49:6f:52:30:06:9b:55:d3:4e:
         6d:68:19:83:01:e6:28:d0:d0:2a:95:ff:03:dd:bf:69:8b:7d:
         4c:74:39:29:e3:8f:43:17:fa:02:20:31:b2:bc:26:3f:6f:3b:
         ea:d2:e9:ef:2d:61:0e:22:de:e1:c8:55:38:7a:89:35:de:25:
         af:1a:70:a8:e3:a4:f9:37:15:60:81:d8:d7:4a:0a:56:35:ec:
         40:88:a9:56:db:b5:6d:3d:76:82:97:a6:9f:55:d4:80:64:67:
         ce:5e:20:8a:0a:db:96:6e:13:90:01:93:6d:98:4b:3b:82:34:
         25:45:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:10:43 2025 by rpki-client