Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a363030303a3a2f34382d3438203d3e20323632323130.roa
File:                     323830303a6363303a363030303a3a2f34382d3438203d3e20323632323130.roa (raw, json)
Hash identifier:          7nihEYUdd/gvCcWur+Qk3xD9Le9HKjjK7c8EZq21c74=
Subject key identifier:   D2:87:58:10:6B:2D:F5:A2:6E:B8:B5:71:E9:13:EC:45:EE:A3:3E:1C
Certificate issuer:       /CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Certificate serial:       110460C8DA0FDFA14A187D0DB966DA3C06970E5E
Authority key identifier: 2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a363030303a3a2f34382d3438203d3e20323632323130.roa
Signing time:             Wed 07 May 2025 20:50:00 +0000
ROA not before:           Wed 07 May 2025 20:45:00 +0000
ROA not after:            Wed 06 May 2026 20:50:00 +0000
asID:                     262210
IP address blocks:        2800:cc0:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:04:60:c8:da:0f:df:a1:4a:18:7d:0d:b9:66:da:3c:06:97:0e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
        Validity
            Not Before: May  7 20:45:00 2025 GMT
            Not After : May  6 20:50:00 2026 GMT
        Subject: CN=D28758106B2DF5A26EB8B571E913EC45EEA33E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:d3:fc:1c:7c:95:a4:c4:b5:08:7e:d4:40:
                    0c:9f:db:c0:13:82:c0:bf:a4:e6:9d:fc:67:28:37:
                    ac:48:18:39:80:32:6c:c2:ab:0b:2b:4c:49:d7:f9:
                    41:5a:38:15:ac:fe:aa:d3:95:55:ac:92:fa:5c:91:
                    6a:95:4e:37:24:be:56:35:83:04:b5:84:e6:7e:c7:
                    66:37:b4:79:5b:45:5d:09:53:13:e1:4d:03:ad:01:
                    56:6b:60:70:dc:83:65:3e:18:fb:8b:e2:4c:9c:68:
                    b1:5e:af:77:53:cc:9a:c5:d9:a7:58:60:15:6a:fb:
                    64:62:82:36:6f:33:fd:c5:3d:00:76:ed:69:ff:74:
                    98:1d:8f:79:14:4c:4f:e7:2d:b2:59:56:4c:0e:07:
                    d9:0d:9b:49:88:d1:05:81:b2:fa:97:5f:ae:56:0e:
                    ab:bb:40:2b:a3:6d:66:3b:08:ba:6c:0c:34:fd:37:
                    ee:5f:b7:cd:5d:e6:91:e2:ec:4a:26:1e:27:d8:75:
                    e1:9d:5b:54:02:4d:05:81:4b:35:98:03:e6:ad:cf:
                    c3:04:8e:07:bd:a5:8d:57:66:bc:e1:df:d0:1f:fd:
                    be:ee:5a:67:19:32:02:f8:49:e9:98:31:3b:9b:c6:
                    b6:85:f9:68:3f:34:27:22:92:54:12:64:69:32:8d:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:87:58:10:6B:2D:F5:A2:6E:B8:B5:71:E9:13:EC:45:EE:A3:3E:1C
            X509v3 Authority Key Identifier:
                keyid:2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a363030303a3a2f34382d3438203d3e20323632323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cc0:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:97:96:53:b0:f0:53:5f:62:44:a5:60:f1:48:f0:12:d2:
         a7:41:8d:e6:c3:ca:44:05:68:63:47:49:f9:16:27:13:03:56:
         81:fa:28:93:7e:35:19:77:a4:4c:16:e2:4e:bc:aa:66:fb:e7:
         74:20:74:9a:4d:87:f8:a8:15:91:3f:2b:11:b0:9f:a5:bf:b1:
         81:e5:88:6e:de:aa:37:fa:3e:d9:91:bc:af:63:18:be:db:13:
         d5:0c:66:70:e5:0d:08:e8:f1:c9:5b:19:58:9d:05:8d:a0:b9:
         fa:35:a2:2f:b8:4a:dd:53:72:3e:64:01:ac:b5:9e:86:b5:bc:
         aa:11:67:a6:59:2b:d4:d0:2b:35:b5:f3:7b:03:27:a8:67:0b:
         cd:c4:eb:39:53:5b:8f:25:d3:37:de:7f:3c:d0:f8:4e:f1:d1:
         17:fa:aa:72:1e:e8:de:da:8f:dc:64:98:5d:6a:2a:7b:55:10:
         e6:4f:35:73:59:f9:2c:f1:d3:e7:04:2e:94:78:b5:87:3f:ef:
         4c:52:8b:3d:57:95:9e:80:35:d1:6f:dc:27:4a:74:73:90:cd:
         1d:68:22:6c:b3:47:1a:3d:99:8c:e6:4d:68:c9:7f:0a:81:3d:
         90:94:0d:ac:1a:04:7f:67:9e:96:7b:2b:47:48:b5:c5:f1:21:
         08:5a:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:33:56 2025 by rpki-client