Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343036613a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          +OdD5z4APAptz21WTXzvZtPBkTnPLpgx6VkzY5676ZM=
Subject key identifier:   CF:84:CB:AD:70:7B:AA:2A:2D:57:3E:89:26:EB:6D:26:3D:5B:E8:FA
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       45BA9D2B35CF71A127933759A0D3A8F5A1698A8E
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34372d3437203d3e2033353733.roa
Signing time:             Fri 02 May 2025 15:17:33 +0000
ROA not before:           Fri 02 May 2025 15:12:33 +0000
ROA not after:            Fri 01 May 2026 15:17:33 +0000
asID:                     3573
IP address blocks:        2801:1f0:406a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 22:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ba:9d:2b:35:cf:71:a1:27:93:37:59:a0:d3:a8:f5:a1:69:8a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: May  2 15:12:33 2025 GMT
            Not After : May  1 15:17:33 2026 GMT
        Subject: CN=CF84CBAD707BAA2A2D573E8926EB6D263D5BE8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ac:21:cb:40:7a:a3:5a:2b:07:9c:2b:af:1e:
                    5e:79:f8:0b:de:db:cc:20:3c:80:a6:06:9b:ff:fc:
                    bc:18:d0:1d:f6:ca:8e:bc:63:43:cc:17:9c:1f:a7:
                    17:be:29:5e:7f:fa:73:ab:04:cc:84:23:25:4f:69:
                    0c:00:ee:79:a7:9b:16:23:48:56:d6:60:70:d2:ea:
                    ed:27:18:9f:0b:fd:b8:68:e9:b9:79:88:98:17:fa:
                    9b:14:32:00:6f:b3:c2:4e:4d:28:f1:7e:89:ed:1f:
                    f1:ec:dc:17:10:d6:82:d8:b8:da:70:ce:79:2b:43:
                    ac:19:f6:6d:19:0b:e2:66:0b:ee:b6:cd:8a:a1:f1:
                    ed:0c:2a:e4:7c:ef:7e:11:90:db:59:fb:13:1d:57:
                    3d:85:18:80:b1:1c:fb:e7:81:31:c0:61:8f:cf:c3:
                    8e:c6:85:52:e2:c0:6a:8f:e8:6d:0b:ab:8a:af:6a:
                    72:c5:0a:c5:35:6a:82:d7:7f:b6:04:90:16:e9:05:
                    a2:dc:92:88:21:90:fc:3d:f2:cb:d6:bf:97:f9:4e:
                    8b:da:23:92:72:a8:d0:ed:6d:c1:e3:57:6f:84:dc:
                    0c:97:cd:34:47:aa:ad:7f:22:4a:41:08:a4:01:49:
                    90:77:ff:8c:81:d3:5d:12:9b:d8:58:a5:dd:76:61:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:CB:AD:70:7B:AA:2A:2D:57:3E:89:26:EB:6D:26:3D:5B:E8:FA
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406a::/47

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:46:60:b1:9a:e1:a9:92:54:bb:4a:f8:90:6a:23:6e:5a:
         9e:b5:12:05:d2:74:a7:50:66:4d:20:50:16:08:d5:d9:09:5b:
         80:b5:11:2e:3c:c6:d9:a6:47:c6:02:c1:40:e0:75:6e:8e:5d:
         61:7e:ac:cc:72:80:44:59:c6:af:2b:d9:90:7e:7a:56:d4:cb:
         fd:aa:a6:1c:01:ce:7c:df:6b:09:66:28:0a:c4:30:fc:65:44:
         22:b9:a6:a3:26:a0:b4:17:76:a2:90:d5:2b:39:15:01:e7:80:
         79:bd:39:24:9e:e8:4a:06:2d:06:24:fc:d7:b2:82:62:ca:f6:
         90:c2:36:64:59:2b:9d:07:ce:a3:4e:f3:db:e9:e2:72:c6:e4:
         07:ff:ee:6b:a3:67:92:f8:d2:fe:3d:b4:f9:c6:d3:d8:7c:89:
         f4:6e:40:b1:cd:3a:c4:1b:7e:59:61:a0:be:d2:ad:9e:80:5f:
         cf:16:c3:4e:a9:25:65:c3:e8:2f:9d:2b:47:a4:57:db:0a:5b:
         97:04:30:4b:ed:b8:97:9d:28:16:5f:58:b0:0c:5a:c8:61:06:
         5a:88:93:2b:3a:4f:78:cf:f9:74:26:d6:3b:e2:3e:42:2d:15:
         9e:0f:58:cf:fd:df:5a:08:3b:c9:f6:9b:3e:0f:b2:cf:cc:d9:
         00:8b:c3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:08:14 2025 by rpki-client