Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/323830313a31663a663830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31663a663830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          kLUS2/Zk4e5jjjcTx30A8+Z/jJnhdbBKhFyz9DyGQUA=
Subject key identifier:   54:25:19:AF:9F:A4:19:43:AC:66:38:26:8B:F6:F3:DD:4B:0E:AB:B0
Certificate issuer:       /CN=BD81A89E733FE559256F66E37ABBC0B30E73E2D2
Certificate serial:       4DA5FC663837E1BE651C317B582A61BDC619BA7F
Authority key identifier: BD:81:A8:9E:73:3F:E5:59:25:6F:66:E3:7A:BB:C0:B3:0E:73:E2:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/323830313a31663a663830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Wed 09 Apr 2025 15:15:00 +0000
ROA not before:           Wed 09 Apr 2025 15:10:00 +0000
ROA not after:            Wed 08 Apr 2026 15:15:00 +0000
asID:                     14080
IP address blocks:        2801:1f:f800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a5:fc:66:38:37:e1:be:65:1c:31:7b:58:2a:61:bd:c6:19:ba:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD81A89E733FE559256F66E37ABBC0B30E73E2D2
        Validity
            Not Before: Apr  9 15:10:00 2025 GMT
            Not After : Apr  8 15:15:00 2026 GMT
        Subject: CN=542519AF9FA41943AC6638268BF6F3DD4B0EABB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:bd:e0:ee:0f:71:38:fb:c6:0f:3d:3d:ee:
                    79:62:22:85:2d:f3:b5:54:7b:dc:1e:b4:32:a2:18:
                    44:47:cf:6f:19:6f:62:8b:31:40:9b:fd:23:f1:23:
                    cc:a0:20:e2:69:ab:8c:f9:78:a4:68:d8:0e:28:48:
                    3f:e3:15:c7:9d:56:47:2e:7f:cb:cf:93:91:0e:fc:
                    7d:14:ef:dd:06:6f:c5:19:e6:ac:bd:d6:9a:10:5f:
                    cd:18:6b:37:cd:c1:6f:e6:75:72:c8:b5:dd:4d:a1:
                    31:f3:6b:d1:52:ad:3f:b6:50:02:70:61:d2:96:cd:
                    9c:df:31:1a:84:f2:af:69:e4:26:e7:c0:52:dd:75:
                    9d:a3:31:c3:4e:0f:8f:9b:89:3d:63:43:b6:6b:08:
                    38:ea:74:5e:d0:a2:4c:38:c7:31:29:a1:47:37:4b:
                    60:17:c2:b0:30:6c:70:16:a0:04:e6:74:cf:4e:63:
                    a2:d4:e5:1a:9a:3d:05:d7:b3:47:e8:36:f9:b1:35:
                    a2:d4:8b:3f:96:f5:b5:42:72:c9:ec:9c:de:df:95:
                    f4:bc:f1:17:85:3c:1e:f7:ac:42:1f:50:0d:4e:21:
                    f9:d1:8f:a4:6b:58:50:17:e4:03:14:a9:11:f7:b8:
                    df:51:49:cf:1a:ce:cc:9b:9d:23:15:40:47:7d:d4:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:25:19:AF:9F:A4:19:43:AC:66:38:26:8B:F6:F3:DD:4B:0E:AB:B0
            X509v3 Authority Key Identifier:
                keyid:BD:81:A8:9E:73:3F:E5:59:25:6F:66:E3:7A:BB:C0:B3:0E:73:E2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/323830313a31663a663830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:6b:cc:13:d5:50:23:25:79:86:50:d4:55:bc:44:3f:55:8f:
         c5:63:ed:fa:a1:30:a3:fa:cb:63:fd:fd:92:8f:ae:96:2f:0c:
         06:ca:4a:14:cb:af:c6:04:7e:ad:2c:ed:76:ca:9d:ca:1c:39:
         7c:6d:ea:b9:49:93:64:54:47:d2:81:14:1c:9d:9f:cb:04:13:
         a5:44:64:4e:42:1e:1f:c9:08:c7:6f:b9:ab:60:f2:33:89:85:
         b4:d1:06:a9:02:b1:dd:47:42:18:89:20:da:98:26:d1:db:fa:
         79:e7:cd:6b:c3:c8:42:20:55:28:48:e6:a8:db:80:58:5b:ba:
         6e:d7:7e:97:6b:bf:ea:f4:9f:9a:73:a8:ab:d3:59:9a:f8:45:
         b3:a6:63:4a:11:bc:2b:b8:21:00:78:f9:07:03:5b:af:cc:88:
         38:b3:eb:19:ce:0f:a9:76:f2:71:3e:53:6c:a1:e4:c8:67:db:
         c0:e4:3a:1e:3e:3d:df:7e:4b:a3:fc:63:28:66:e5:a6:e9:6f:
         a1:fb:26:9a:28:a9:17:16:d5:64:07:69:84:74:d0:ea:ec:27:
         9e:a7:ae:58:5f:f2:d0:21:40:74:be:e4:34:db:ee:85:36:04:
         b7:27:46:3e:98:d9:8f:b2:04:82:8f:dd:2a:ab:63:1a:50:71:
         2a:a3:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:39 2025 by rpki-client on console.sobornost.net