Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa
File:                     323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa (raw, json)
Hash identifier:          1hePGGPgoiV8lx4DP38r/VYPRaYHUuXiSbJvY9EJwQo=
Subject key identifier:   62:47:BB:9D:F8:EE:C4:0C:69:C1:AB:52:5D:95:A6:87:7B:61:BB:B6
Certificate issuer:       /CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
Certificate serial:       1C0646CA18A8682A9073DAAB6D0F9B7725ECD41C
Authority key identifier: BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa
Signing time:             Mon 21 Apr 2025 19:45:00 +0000
ROA not before:           Mon 21 Apr 2025 19:40:00 +0000
ROA not after:            Mon 20 Apr 2026 19:45:00 +0000
asID:                     262186
IP address blocks:        2801:159:2::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:06:46:ca:18:a8:68:2a:90:73:da:ab:6d:0f:9b:77:25:ec:d4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
        Validity
            Not Before: Apr 21 19:40:00 2025 GMT
            Not After : Apr 20 19:45:00 2026 GMT
        Subject: CN=6247BB9DF8EEC40C69C1AB525D95A6877B61BBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:91:ea:b6:27:a2:ae:e0:bc:ab:86:8a:0c:
                    38:ee:3d:ed:22:3c:c0:f3:18:28:db:b9:26:1e:fe:
                    89:d8:54:be:ac:0c:74:d2:16:28:05:e4:a3:f8:97:
                    0a:b2:74:80:1a:2c:4e:af:f7:8d:db:ce:f8:a1:d3:
                    f9:a4:5b:5e:de:46:d7:f3:3e:d2:39:a6:25:32:13:
                    cd:e9:54:dd:41:22:d2:37:c3:53:15:0c:b4:7e:bb:
                    85:17:13:95:0e:62:f0:d0:b2:30:35:99:a6:fe:06:
                    d4:74:15:e2:55:3e:73:e5:2b:0a:31:ee:33:e1:f0:
                    ef:90:5f:87:d5:92:8f:03:1a:62:35:18:6d:ba:63:
                    36:b1:5e:3b:ed:1d:d1:a1:fd:ba:cb:48:79:1e:f5:
                    76:20:75:7d:5a:71:94:62:94:4e:49:58:46:c7:05:
                    d4:79:de:12:2b:6b:94:e3:80:ce:84:36:ef:62:06:
                    19:5b:74:a1:ba:62:8b:5f:a8:46:82:1d:97:3b:e7:
                    0c:67:19:88:1a:d8:36:ee:ac:a4:ea:61:f9:20:84:
                    59:d8:02:b5:fc:ff:87:54:18:c5:24:b1:59:fa:1a:
                    9c:5e:d6:0d:74:17:35:35:20:36:d5:00:a9:14:67:
                    95:e3:5a:ec:4f:2b:88:4c:db:be:8a:8a:d5:db:03:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:47:BB:9D:F8:EE:C4:0C:69:C1:AB:52:5D:95:A6:87:7B:61:BB:B6
            X509v3 Authority Key Identifier:
                keyid:BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         b3:df:f6:32:8d:d4:a4:41:e7:0d:9c:4f:d0:76:54:7a:1e:c0:
         cc:6b:9a:52:e9:ad:e5:88:da:0c:2b:31:26:cf:d3:bf:1b:8b:
         86:27:6e:3a:54:df:7e:ed:09:69:74:15:89:8a:84:7c:2d:c7:
         00:f9:35:35:0d:0e:ba:c2:a1:5a:f1:b9:06:d6:b5:07:9a:b2:
         ee:e4:45:fc:f0:5e:3f:ee:f4:19:3c:5e:9b:96:ad:6f:ea:6e:
         b6:a0:00:1e:0d:31:23:f0:60:58:5c:c8:38:21:00:50:cc:8e:
         fe:85:31:29:23:95:9d:4d:33:9d:ef:44:8f:7c:ec:11:58:ba:
         96:ac:04:86:72:22:3c:92:ea:ef:6a:62:5b:ba:46:d4:2e:b4:
         10:50:67:ee:e4:60:58:63:79:f9:4b:6b:1e:6d:bf:cc:67:d5:
         f8:0d:7d:f1:5a:ba:32:2c:b1:d7:da:85:57:78:32:7f:a9:f9:
         42:72:bd:35:d8:dc:c6:d4:d7:68:85:b7:2c:a8:dc:be:6a:9d:
         b6:41:73:e7:7b:16:f4:8e:6a:fb:75:05:e5:5b:4c:3c:8e:f5:
         c0:8a:47:c8:a7:48:f5:c3:f8:97:91:4d:50:0f:15:cd:e1:10:
         85:93:3f:12:4f:fe:31:de:80:87:57:3b:2e:ee:e2:ce:a8:eb:
         82:c5:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:48 2025 by rpki-client on console.sobornost.net