Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa
File:                     323830303a3831303a3a2f32382d3634203d3e203237373437.roa (raw, json)
Hash identifier:          g9wLGIWG1cuaT2ddDRSKxRXg7gfLGRCKQqgXmyDp4Fg=
Subject key identifier:   52:BA:96:89:10:CB:18:94:49:7D:53:7B:D6:54:13:6A:AA:EC:3D:1F
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       50B4F671D4DF649DDEE3912C4C12966C7A04EA28
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa
Signing time:             Tue 04 Feb 2025 18:34:50 +0000
ROA not before:           Tue 04 Feb 2025 18:29:50 +0000
ROA not after:            Tue 03 Feb 2026 18:34:50 +0000
asID:                     27747
IP address blocks:        2800:810::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:f6:71:d4:df:64:9d:de:e3:91:2c:4c:12:96:6c:7a:04:ea:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Feb  4 18:29:50 2025 GMT
            Not After : Feb  3 18:34:50 2026 GMT
        Subject: CN=52BA968910CB1894497D537BD654136AAAEC3D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:74:1d:3d:16:a4:f3:5e:34:95:2d:98:31:
                    12:fd:6b:ee:ee:3a:c0:b9:bc:52:7c:5b:bf:6e:55:
                    a3:c3:b0:2e:54:ca:35:62:ea:fd:b9:e2:8e:48:9c:
                    d7:b6:49:d4:37:7b:21:c8:6b:2b:e5:7f:a7:dc:93:
                    46:fb:53:38:72:0e:28:9d:a4:28:48:5b:3b:b9:21:
                    8a:31:eb:27:33:79:af:bf:61:ca:d2:80:42:8b:11:
                    76:fa:38:98:5b:1b:79:20:a3:fd:82:67:4c:40:3e:
                    86:6b:19:84:a4:c4:c9:3e:4a:2f:dc:06:e8:ec:4b:
                    71:14:de:75:76:f6:b5:0b:50:fd:e6:ab:45:4b:7c:
                    14:7a:d5:f3:24:e8:45:30:5d:08:49:88:ea:70:8f:
                    d4:69:06:af:1d:37:7c:48:c1:c7:15:a8:db:e9:1b:
                    a2:90:70:c7:32:8e:7c:0f:b6:45:a9:66:0a:00:f8:
                    e4:1a:13:9a:13:5d:f5:ce:07:cc:c6:49:92:44:d2:
                    1e:1f:ac:c6:df:90:8a:c9:1e:02:da:ea:be:32:ef:
                    29:0c:bc:c9:77:cc:0d:fb:ef:b4:0c:d9:c8:01:b5:
                    e0:94:de:ce:f9:ca:94:b5:99:92:f2:1c:37:26:6b:
                    ba:ed:56:63:e3:ad:e4:4e:b3:73:d9:db:2d:d0:d7:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BA:96:89:10:CB:18:94:49:7D:53:7B:D6:54:13:6A:AA:EC:3D:1F
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:810::/28

    Signature Algorithm: sha256WithRSAEncryption
         ac:78:e5:f0:53:55:34:48:fd:08:35:57:67:f0:5c:69:84:65:
         30:cf:e6:1e:ba:e8:08:1d:e4:27:f9:d1:c5:22:8c:20:e6:2f:
         b0:32:2d:8f:f5:9a:05:9b:67:da:25:30:47:f1:b5:55:8a:f3:
         9a:ec:5a:f4:8c:2b:74:09:c4:5c:46:12:d5:82:14:73:e5:13:
         d3:de:3a:0c:70:73:1e:dd:a3:da:a9:ac:fe:4a:c9:31:db:e3:
         44:79:65:94:93:76:c5:50:25:8b:44:3b:dc:19:81:bb:d9:36:
         52:fc:42:dc:44:28:60:66:30:46:bb:83:be:f7:fa:54:bb:38:
         e5:63:49:28:2d:52:01:e9:3b:ec:bc:4c:a1:46:4a:25:4a:56:
         5c:a2:8f:e1:74:90:ae:88:48:63:e8:5a:38:f8:75:13:89:c7:
         7a:36:e4:3e:d4:f7:bd:cf:1c:d1:90:5d:88:ce:6f:f7:84:96:
         03:5a:6f:17:a2:54:4a:f8:98:fc:16:3a:59:a6:08:5a:b7:41:
         8c:5a:73:91:32:43:dd:ac:51:c1:f7:ee:8b:2b:04:5b:72:72:
         55:3d:25:d9:01:34:54:6a:05:0a:57:6e:fa:a9:c8:f6:cf:71:
         29:80:0f:77:cb:ec:9d:a4:45:c8:84:20:8c:ea:f6:7d:6b:ec:
         2c:0e:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:23 2025 by rpki-client