Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          XS3E2BufgnD6Fjm/qpLk0e7s4CqHvKctoLtBS5jua5c=
Subject key identifier:   61:5C:2B:E4:9E:03:B5:AF:57:49:04:CC:5C:BD:B7:97:76:AB:46:AB
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       2A5BABAA760F7D5FB008CBEB781FB81B998E187F
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa
Signing time:             Fri 02 May 2025 15:17:32 +0000
ROA not before:           Fri 02 May 2025 15:12:32 +0000
ROA not after:            Fri 01 May 2026 15:17:32 +0000
asID:                     3573
IP address blocks:        2801:1f0:406b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 08:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5b:ab:aa:76:0f:7d:5f:b0:08:cb:eb:78:1f:b8:1b:99:8e:18:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: May  2 15:12:32 2025 GMT
            Not After : May  1 15:17:32 2026 GMT
        Subject: CN=615C2BE49E03B5AF574904CC5CBDB79776AB46AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:a5:cb:7d:82:71:bf:ec:5d:95:67:62:28:
                    77:53:bf:c6:11:97:4c:45:ae:58:72:74:eb:3f:b1:
                    26:fb:b4:9f:38:b0:da:9a:74:9c:6d:3a:ee:0a:c2:
                    1c:5b:27:da:25:66:f6:98:f9:17:d1:c2:a8:de:dc:
                    8c:9c:4e:10:f0:85:03:cf:5e:5c:83:e3:1d:7c:71:
                    2a:40:a2:a2:0c:20:29:ba:05:19:7a:75:03:36:9a:
                    46:04:2c:c4:b9:cd:d6:9f:81:f8:d1:79:94:04:b3:
                    83:57:d0:bf:fd:24:8e:93:93:64:a6:44:2b:23:c7:
                    cd:15:63:7d:c4:37:a7:35:b9:7d:27:e7:d3:2a:42:
                    79:5c:21:c3:e0:9f:ae:eb:18:65:6f:bd:e6:4e:52:
                    f5:d4:bf:e1:2a:c4:dc:67:9f:97:11:38:8b:84:bd:
                    65:f3:c9:94:b6:1e:c3:7e:16:67:fa:a5:61:a4:de:
                    84:a8:ea:40:aa:88:f2:51:3c:33:30:62:71:fb:54:
                    f9:ed:ae:71:22:0e:88:eb:43:2b:73:df:3a:c3:68:
                    33:f7:60:0c:8f:15:e8:73:24:2e:10:ad:15:21:40:
                    5e:ef:88:28:45:bc:9b:06:5e:74:1d:f7:6a:e2:b1:
                    20:88:bf:d1:df:e2:10:c3:99:b6:80:e6:2e:af:b9:
                    4c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5C:2B:E4:9E:03:B5:AF:57:49:04:CC:5C:BD:B7:97:76:AB:46:AB
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406b::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:97:1e:50:d0:37:83:7d:53:28:55:01:f4:9e:c1:b0:32:6b:
         14:76:55:0c:c5:09:f1:fc:e3:a8:0d:31:9f:49:50:74:95:9f:
         d3:57:8a:92:9c:9e:af:f6:27:64:e2:2c:e4:3a:16:6c:f4:0f:
         5d:6b:8b:d9:bc:cb:2a:e1:ba:95:6d:2a:8b:ad:cc:32:be:c0:
         59:a4:b6:1b:2a:ee:4f:f7:b0:4f:c2:e6:95:66:c2:ed:e3:f7:
         e5:14:7c:2f:d1:be:9f:d3:98:28:ed:d5:8c:88:27:46:ab:7a:
         94:52:b6:ae:5d:f2:ef:ba:53:eb:32:5c:92:9d:6e:ab:7e:38:
         89:6b:e7:e1:b5:9c:80:0b:d9:a6:5f:cf:d3:32:65:fa:44:dc:
         04:56:ee:98:42:27:0f:d2:9c:40:87:85:19:fc:e4:68:ef:0e:
         ed:1f:6c:d7:18:81:fb:fd:ef:f2:44:e1:ca:26:79:f4:e9:d2:
         b3:0b:c7:26:e6:ce:e0:31:94:60:e3:25:c9:c7:56:b8:1d:69:
         13:f1:ce:82:22:89:1d:bd:75:b3:30:2a:5f:92:35:a8:8f:48:
         06:0f:f0:5e:be:99:9e:a4:ef:27:9c:e6:12:1a:96:f4:44:9d:
         75:3b:4b:81:51:93:6e:1c:16:c3:07:54:5b:a6:0d:c2:89:5f:
         0d:b4:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:04:16 2025 by rpki-client