Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a313030303a3a2f33362d3438203d3e203136363239.roa
File:                     323830303a3539303a313030303a3a2f33362d3438203d3e203136363239.roa (raw, json)
Hash identifier:          +m2v8TbaVAsMC7QFwQ6E3nuo9vrSrT3AjgL67Kje5I8=
Subject key identifier:   9F:C7:FF:AA:A7:1D:31:09:13:53:B5:DA:3D:08:67:BE:9D:D0:E5:F3
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       5832CE30DAD7A7926BBE81FA63A3A9800E2BAB2C
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a313030303a3a2f33362d3438203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:56 +0000
ROA not before:           Tue 04 Feb 2025 19:55:56 +0000
ROA not after:            Tue 03 Feb 2026 20:00:56 +0000
asID:                     16629
IP address blocks:        2800:590:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:32:ce:30:da:d7:a7:92:6b:be:81:fa:63:a3:a9:80:0e:2b:ab:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:56 2025 GMT
            Not After : Feb  3 20:00:56 2026 GMT
        Subject: CN=9FC7FFAAA71D31091353B5DA3D0867BE9DD0E5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:55:b8:25:df:c4:ca:5c:ac:4f:2f:d0:92:
                    11:50:e9:d2:79:c8:2d:ef:a8:c2:de:ba:3c:15:5d:
                    c6:73:b2:48:ec:1f:c9:6a:8c:5f:33:05:52:a5:fa:
                    51:65:24:6e:1f:2e:b6:09:d5:de:27:9e:7f:d1:fa:
                    05:ed:62:49:08:c0:80:b7:4a:97:44:3a:14:72:08:
                    87:df:a4:98:13:52:82:59:13:37:6a:31:2e:b4:f7:
                    c4:6b:f8:c8:cf:c6:28:34:7d:5e:8b:50:3e:ff:cb:
                    58:d4:0e:40:a1:5a:6d:1b:73:73:5e:b6:20:26:3a:
                    0a:28:52:d4:7e:24:3a:3a:fc:c5:0d:60:14:93:dc:
                    9b:30:55:38:2d:1d:9a:26:71:0f:d6:1b:bd:22:4c:
                    6b:7b:ab:83:17:e0:ac:47:bd:9c:95:54:6b:c0:75:
                    24:04:2a:65:e9:29:95:3b:0c:9d:00:40:4c:db:ef:
                    90:92:74:74:f1:a0:a3:97:72:b7:dc:53:89:70:92:
                    b5:8c:eb:b4:2a:ac:c5:b9:0f:84:be:89:74:3f:6f:
                    97:9a:d9:42:b7:0e:5f:2d:e3:3e:7d:7b:d1:22:4f:
                    4e:15:ef:d1:f2:b5:c8:eb:51:1b:5d:0d:4c:d9:ce:
                    d9:9e:ff:58:4c:b7:de:58:f3:6e:71:f5:49:f0:8a:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:FF:AA:A7:1D:31:09:13:53:B5:DA:3D:08:67:BE:9D:D0:E5:F3
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a313030303a3a2f33362d3438203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:590:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ce:df:ac:87:bf:cd:ef:bd:d2:ec:79:48:51:29:4e:c5:ce:c3:
         65:f1:56:f4:a9:67:f9:34:cd:84:f3:1d:68:e9:95:b3:c4:35:
         45:ff:27:4c:76:ca:a5:63:87:47:b4:26:67:d4:31:d5:98:d3:
         01:4e:0a:20:33:c5:6b:a9:7f:8d:48:e9:af:d0:c2:26:73:6c:
         77:c1:c2:88:e1:e1:33:7e:4a:e8:f5:8c:3c:32:58:68:c8:11:
         b2:1d:c1:57:56:04:7f:31:1a:1b:fe:4c:05:7d:18:49:55:78:
         e9:d4:2f:65:3a:8e:36:e8:fa:f3:87:c0:35:3a:84:87:5e:46:
         d3:70:2d:b3:6c:28:36:a8:65:ec:86:ca:69:b8:52:6f:f5:a7:
         28:96:ab:1a:f0:44:c4:37:08:ed:1b:95:0c:df:12:d1:68:bb:
         6f:0a:b4:e9:8a:74:f2:81:24:13:5e:84:c1:4d:1c:9b:b3:b0:
         1a:30:52:29:2e:f6:17:1b:fd:f3:ca:4e:11:7d:2d:ce:6c:de:
         77:02:de:6b:60:da:b6:05:55:50:b0:f1:ef:92:12:ef:f9:d9:
         6f:a5:8a:ec:a1:95:60:f1:20:75:b9:e7:0b:e4:cd:1c:28:d4:
         52:7e:62:f6:e0:75:60:bb:f5:e6:52:b3:6a:be:7a:c1:f6:94:
         fc:22:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:06 2025 by rpki-client