Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/323830303a3433303a3a2f33322d3438203d3e203233343837.roa
File:                     323830303a3433303a3a2f33322d3438203d3e203233343837.roa (raw, json)
Hash identifier:          CwiUpPeISDkUf/tES3FeZuVbOpP713pBcYeIr6nfiXA=
Subject key identifier:   AA:FD:E6:B4:DA:2B:7D:A8:CA:7E:3C:47:D5:19:8A:A5:2F:B9:CE:5F
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       1B798F3D1BD833DBBB8E066AEA212939C99A254B
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/323830303a3433303a3a2f33322d3438203d3e203233343837.roa
Signing time:             Tue 04 Feb 2025 18:26:41 +0000
ROA not before:           Tue 04 Feb 2025 18:21:41 +0000
ROA not after:            Tue 03 Feb 2026 18:26:41 +0000
asID:                     23487
IP address blocks:        2800:430::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:79:8f:3d:1b:d8:33:db:bb:8e:06:6a:ea:21:29:39:c9:9a:25:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Feb  4 18:21:41 2025 GMT
            Not After : Feb  3 18:26:41 2026 GMT
        Subject: CN=AAFDE6B4DA2B7DA8CA7E3C47D5198AA52FB9CE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:33:b0:0c:08:74:0e:9f:9a:4d:96:e7:78:
                    23:f1:3a:4c:41:6f:13:2f:f7:a2:c8:13:86:4d:95:
                    c3:57:67:54:45:89:02:ba:f5:3c:64:a9:d9:2d:8a:
                    01:06:40:40:62:9a:3c:b0:74:2f:7f:c6:f1:7a:d4:
                    e5:10:3c:48:31:e7:a0:13:4d:54:2e:04:24:b3:d2:
                    1b:c0:72:63:c3:30:8c:91:d3:c5:a5:66:6b:34:1b:
                    3f:12:84:ae:47:88:ea:f2:f0:11:ea:97:f5:0c:1a:
                    c2:e5:0b:1b:51:f6:28:65:24:af:3d:b2:de:4e:9f:
                    ad:64:b8:94:4b:e8:99:fe:47:aa:aa:12:78:58:39:
                    a1:0a:62:38:dd:62:fc:45:e1:29:88:6b:60:30:3d:
                    1a:2b:c9:9b:8f:ed:64:f0:88:7a:5f:13:90:8b:be:
                    ed:22:ca:71:d9:e4:0a:02:14:8f:d7:9a:d8:0d:07:
                    50:1c:88:db:8b:73:3e:bb:d6:93:94:df:0f:83:91:
                    ec:18:7e:f3:7f:f7:0d:c5:b0:b6:b0:39:5d:71:67:
                    5b:bf:34:f5:a8:e1:d0:d9:75:c0:c4:b3:35:4c:45:
                    9a:ae:c4:35:15:40:04:64:46:64:37:aa:21:31:6a:
                    8c:23:7a:af:aa:3f:49:37:3d:8c:e6:5d:5b:26:95:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:E6:B4:DA:2B:7D:A8:CA:7E:3C:47:D5:19:8A:A5:2F:B9:CE:5F
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/323830303a3433303a3a2f33322d3438203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:430::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:47:bf:98:1d:71:96:35:95:9a:60:99:76:79:ea:17:f6:ec:
         20:a2:79:18:9f:1d:56:59:4a:3b:02:e3:57:71:0d:6b:89:4d:
         60:3d:5a:54:41:42:da:6a:a5:fc:2c:e1:ee:8c:8e:64:ca:4f:
         c7:3c:00:07:44:86:63:4b:51:e3:ab:e6:5a:a2:c8:5c:63:9a:
         9b:5b:e2:da:2f:75:f8:f9:8a:98:10:9f:90:f8:43:68:ed:f8:
         52:bf:7a:60:58:17:76:85:d8:ba:5b:ba:2e:19:2d:28:eb:8a:
         5d:5a:1b:1d:f4:41:a9:84:9a:18:3e:0f:ff:73:e5:11:c2:74:
         65:97:38:0d:89:f9:35:82:36:1b:45:bd:25:c0:ce:fd:85:b5:
         4b:6f:f1:c1:28:87:8e:fe:29:f4:60:2c:df:e8:b9:b1:e3:cd:
         94:f2:fc:79:5d:01:67:3c:65:8c:19:04:04:bc:4b:8d:1e:82:
         49:f4:e0:25:f8:62:75:ae:a9:68:3c:37:de:cb:74:4e:19:17:
         c9:c6:75:84:eb:e7:78:e1:70:2e:ee:1d:0f:d5:88:33:aa:22:
         7c:e7:fd:a8:e8:ff:eb:73:9e:67:50:78:8b:3c:44:da:a1:ac:
         a0:af:6b:6a:20:3d:fe:96:88:23:5d:3a:81:70:e7:99:9c:68:
         bf:bf:04:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:34 2025 by rpki-client