Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a34303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3161643a34303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          bOgvA/OmacQrw/Zbz+FHRvoeWIxiDf/vwkjD4QgG/n8=
Subject key identifier:   A4:BC:AF:9C:5C:A2:4A:B7:F7:B5:36:12:7A:48:AC:88:BE:35:F3:7C
Certificate issuer:       /CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
Certificate serial:       65275E2674EFD9D82C44D895EA6F157C212503A1
Authority key identifier: 08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a34303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 22 Jul 2025 19:50:00 +0000
ROA not before:           Tue 22 Jul 2025 19:45:00 +0000
ROA not after:            Tue 21 Jul 2026 19:50:00 +0000
asID:                     14080
IP address blocks:        2801:1ad:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:27:5e:26:74:ef:d9:d8:2c:44:d8:95:ea:6f:15:7c:21:25:03:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
        Validity
            Not Before: Jul 22 19:45:00 2025 GMT
            Not After : Jul 21 19:50:00 2026 GMT
        Subject: CN=A4BCAF9C5CA24AB7F7B536127A48AC88BE35F37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:4e:18:80:40:84:7f:51:b7:c0:2e:27:53:
                    2f:a8:fc:00:78:df:9e:c9:97:b6:d3:11:05:06:8b:
                    78:b8:95:69:e9:6a:39:9f:be:15:be:b1:c1:3f:7c:
                    c6:79:29:80:b7:04:70:d2:d4:7e:fb:43:a6:23:c8:
                    71:6e:10:42:11:10:be:4e:05:70:19:f6:39:39:3a:
                    6f:5e:59:9a:f3:ba:a8:ee:7f:a9:2e:63:91:d0:56:
                    54:a7:9c:91:bd:3e:e1:2e:e4:b2:c5:5c:78:93:57:
                    5f:a9:82:e7:ee:30:21:61:d9:f6:bf:f6:02:26:37:
                    58:95:28:0b:e8:69:9c:c2:35:c9:80:71:1a:10:63:
                    02:9e:fa:aa:4e:74:6d:8e:2a:19:92:2f:17:86:a7:
                    ad:c0:6f:d6:37:37:2a:24:4a:bd:b8:85:1e:60:f5:
                    2b:18:3d:4e:2f:7a:42:a5:0c:e4:64:f8:87:1d:be:
                    5a:32:25:9a:0d:18:75:c6:c6:34:da:ea:7a:79:a8:
                    5a:77:b8:44:75:fa:0a:50:d8:45:ef:b1:9a:95:9b:
                    1d:d5:23:05:cc:41:a9:8d:a6:d3:87:0d:e3:cf:90:
                    85:4c:08:7f:60:58:fe:a8:50:78:31:6f:15:a1:2c:
                    86:d7:84:f3:ca:1e:33:7b:88:01:ba:4e:72:45:d5:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BC:AF:9C:5C:A2:4A:B7:F7:B5:36:12:7A:48:AC:88:BE:35:F3:7C
            X509v3 Authority Key Identifier:
                keyid:08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a34303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ad:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:c0:9c:3c:fd:d5:52:d2:0a:c9:c5:1f:e8:0b:f8:70:08:
         e8:75:1c:a6:ae:5e:81:d9:37:7a:d8:b4:99:58:90:a0:dc:13:
         07:69:55:59:ef:51:45:16:f1:29:c6:6d:b3:0f:f2:0d:ee:3f:
         be:b8:9f:d1:7a:c3:35:d3:93:74:31:1f:28:27:8c:66:52:73:
         93:9e:1f:a9:59:72:8d:b6:24:af:5e:a5:75:6a:e4:0b:63:d3:
         7b:bf:a7:b6:14:75:ae:5c:ff:8e:28:06:04:15:51:3f:a9:20:
         9c:40:a5:af:30:63:a1:37:35:21:33:34:0e:96:3e:44:43:37:
         7f:29:9e:3d:f2:d0:2f:46:f2:4b:1e:94:42:36:94:99:fe:6b:
         52:18:42:0d:44:35:0d:33:32:73:6f:c6:8b:f4:bf:76:ce:02:
         c1:12:ed:63:d9:3e:f2:58:ac:f9:c5:df:b2:28:19:04:6b:26:
         53:d4:e3:2d:f0:3a:d3:a8:07:1e:2a:05:c8:82:3b:c0:86:24:
         b3:ad:79:46:40:28:21:63:7a:2c:35:ef:47:d5:34:18:50:05:
         cf:f0:3e:5c:a9:4f:ed:67:99:b8:4f:54:32:0e:a9:83:8b:74:
         8e:a3:e9:4f:c7:1a:5d:7b:7c:9d:72:48:5b:32:d2:6b:a0:b1:
         9f:a9:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:23:54 2025 by rpki-client