Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3438203d3e20323731393730.roa
File:                     323830303a6430303a3a2f33322d3438203d3e20323731393730.roa (raw, json)
Hash identifier:          u1lGRC3PbO1ViySbCFiPnNqq7GALama2C4a8i1uOqaY=
Subject key identifier:   D2:29:6D:54:67:1E:97:B7:5F:D1:FB:D1:38:C7:6F:FD:E9:4F:CC:A4
Certificate issuer:       /CN=B9E6C43D762E93FD87830A253F11922C7BC63907
Certificate serial:       34A1B78849A3F1DA823760C072077FD3E8BDBFBB
Authority key identifier: B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3438203d3e20323731393730.roa
Signing time:             Fri 24 Jan 2025 15:45:00 +0000
ROA not before:           Fri 24 Jan 2025 15:40:00 +0000
ROA not after:            Fri 23 Jan 2026 15:45:00 +0000
asID:                     271970
IP address blocks:        2800:d00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a1:b7:88:49:a3:f1:da:82:37:60:c0:72:07:7f:d3:e8:bd:bf:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E6C43D762E93FD87830A253F11922C7BC63907
        Validity
            Not Before: Jan 24 15:40:00 2025 GMT
            Not After : Jan 23 15:45:00 2026 GMT
        Subject: CN=D2296D54671E97B75FD1FBD138C76FFDE94FCCA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:8a:de:11:2d:c0:c3:97:49:a5:ef:c5:df:
                    49:89:9b:e7:6a:c1:16:f6:fd:ee:67:17:5d:52:3a:
                    c8:8e:8f:3d:02:49:fa:b1:b6:79:0e:95:9a:de:70:
                    e4:0d:7a:67:42:6f:5c:ac:db:d4:ad:bf:8c:e9:16:
                    e8:6c:08:a2:96:ca:05:ff:58:07:6e:80:36:cb:e0:
                    22:72:cb:f9:1c:a2:29:15:9e:04:35:ca:0b:10:ff:
                    a8:4e:90:81:d0:02:c5:77:14:9c:73:a1:3b:a7:43:
                    9e:2c:63:f9:81:f3:11:b1:c4:5d:e2:a9:b1:18:42:
                    11:09:32:5b:c7:fe:ab:de:a6:3d:f8:8c:95:6b:04:
                    06:58:9d:d9:b5:b9:c1:92:57:03:04:a0:f7:84:7f:
                    dd:b2:ba:a3:da:26:1c:02:de:a1:5f:72:21:f5:a3:
                    03:de:10:ee:0a:24:07:87:c9:0c:cb:75:26:77:f7:
                    ac:d3:fd:f3:95:71:29:b0:ee:ed:4a:32:4f:08:e1:
                    ff:c7:82:0f:bf:54:0c:b3:3a:a1:14:54:2d:82:47:
                    71:63:d9:a0:8b:c2:a8:4e:21:47:ec:5c:4c:11:51:
                    d3:bd:d4:1c:04:0b:18:70:88:b8:84:b7:de:53:3a:
                    ca:10:9c:6e:ea:73:0f:9e:69:d5:46:d6:a5:e6:92:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:29:6D:54:67:1E:97:B7:5F:D1:FB:D1:38:C7:6F:FD:E9:4F:CC:A4
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3438203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:3d:3c:33:af:4d:49:0e:14:52:2c:81:b4:a3:a9:2d:53:d4:
         b7:be:f7:2b:d2:e5:60:80:a1:72:b1:d4:c2:4e:47:99:b6:26:
         b9:57:fe:d7:f8:61:27:9c:e9:31:ec:f4:7d:cb:3d:34:bb:bd:
         ea:b1:2d:1a:b0:99:96:70:29:a7:d6:c5:90:02:c0:c1:e1:42:
         43:b1:68:71:1e:c1:0f:ac:5f:51:b8:c3:d2:0d:8f:9d:3c:3d:
         ed:7d:7d:f2:11:7b:ce:00:cb:a6:07:03:5d:1c:19:7f:a0:20:
         0b:05:31:c4:ba:28:65:16:dc:73:9f:34:5c:4f:e9:72:a8:04:
         3d:d1:f9:52:98:4b:f5:9a:f7:a2:41:92:e9:5e:21:38:7e:05:
         86:cc:22:75:83:7f:15:b1:a8:f4:a3:cc:76:8e:4d:c6:46:8d:
         2b:67:1d:ef:1f:6e:1b:b9:b3:1e:de:7f:21:3a:40:5f:e9:65:
         d6:b5:09:5e:e3:f9:97:e6:a7:87:49:bc:e9:a5:72:67:21:58:
         00:29:fb:05:7e:ad:81:0c:a8:64:f2:2c:61:78:9e:31:5c:de:
         bb:ba:80:4c:4b:cd:09:28:e9:9f:7c:e8:92:ff:e7:4d:f3:6c:
         57:a2:0a:8c:54:eb:b7:a6:a8:27:e7:55:9f:c7:e7:69:91:93:
         0e:af:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:12 2025 by rpki-client