Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3332203d3e203237383839.roa
File:                     323830303a3530303a3a2f33322d3332203d3e203237383839.roa (raw, json)
Hash identifier:          psyvGE5CfAWROkWDzUjItScXYxzbILy9HLsbJBjiXPY=
Subject key identifier:   22:FA:76:13:08:72:93:7B:63:5F:BB:FD:8B:8F:2A:E7:54:E6:19:8A
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       7A2835D14478BA974DB141D44646180F068CBC9D
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3332203d3e203237383839.roa
Signing time:             Tue 04 Feb 2025 18:34:46 +0000
ROA not before:           Tue 04 Feb 2025 18:29:46 +0000
ROA not after:            Tue 03 Feb 2026 18:34:46 +0000
asID:                     27889
IP address blocks:        2800:500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:28:35:d1:44:78:ba:97:4d:b1:41:d4:46:46:18:0f:06:8c:bc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Feb  4 18:29:46 2025 GMT
            Not After : Feb  3 18:34:46 2026 GMT
        Subject: CN=22FA76130872937B635FBBFD8B8F2AE754E6198A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:25:66:06:d9:3f:78:2d:1e:52:91:8e:c5:
                    49:4c:44:1e:d4:ca:e8:e2:d1:8b:be:8e:03:75:dc:
                    27:4c:cd:c5:1f:a1:59:9a:e2:c1:98:a1:20:70:9b:
                    de:da:d6:8a:da:55:73:0b:07:74:26:a3:52:20:2f:
                    f3:86:ce:01:56:3b:39:14:47:01:8d:50:b2:94:25:
                    b8:9c:37:29:bf:50:ad:a7:47:e8:50:a3:e6:7b:89:
                    fe:ee:b1:f2:ad:ec:54:cd:03:c1:55:1e:25:e0:d6:
                    c7:e7:43:56:f1:02:dc:a5:90:87:59:43:2c:ec:4f:
                    90:86:e1:11:e1:f8:57:40:39:a2:27:c8:61:c1:1c:
                    a9:75:20:e5:44:b8:50:f3:ed:f8:ed:f3:a0:8e:7d:
                    5f:83:6a:67:4d:0e:21:fc:44:2a:a7:9a:91:3d:4c:
                    49:28:e3:10:2c:93:81:a2:1b:1d:4b:9d:45:98:bc:
                    03:1c:ed:0f:4b:75:90:5d:16:1a:cd:e7:3f:37:73:
                    9c:27:35:03:f6:f6:54:58:9c:1f:0f:ff:f8:ae:05:
                    7e:52:4c:9f:19:80:51:59:74:6e:47:e4:58:ea:33:
                    ad:70:7d:ad:a6:87:16:09:67:43:54:9b:fa:a9:3c:
                    56:57:4b:33:8f:ed:2c:49:3f:34:fb:09:67:60:24:
                    92:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FA:76:13:08:72:93:7B:63:5F:BB:FD:8B:8F:2A:E7:54:E6:19:8A
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3332203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:6b:88:a2:67:62:33:db:a2:24:4d:3c:a7:9b:0a:2f:fd:44:
         fc:f5:14:a9:a9:73:bb:e3:2f:93:8f:e0:88:8e:93:6d:a6:dd:
         3b:77:44:de:05:0c:b5:ec:cb:e6:9e:fe:3c:6a:d2:15:dc:18:
         18:d5:3a:5d:95:48:28:9d:13:6f:6e:51:3e:29:18:cf:f9:3e:
         95:cc:a0:fe:55:40:43:4f:a9:28:d3:91:a0:54:3f:23:0f:2c:
         d8:c9:86:42:62:50:d8:3d:7f:93:f2:2a:ca:bb:3a:4d:7e:90:
         49:b7:9c:0b:87:8b:ef:59:aa:a1:e5:25:a4:76:93:9c:75:0d:
         4b:7d:aa:4b:66:e2:85:09:20:54:bb:0c:b9:e0:1a:c1:19:7d:
         68:f1:e2:47:3e:ce:cc:24:e4:4d:0e:a6:f7:2f:9b:0f:00:d7:
         d7:0b:05:96:be:5c:88:4e:1d:c7:ac:0b:c5:3c:2c:76:78:97:
         84:21:84:ea:0e:43:e7:e7:38:54:52:c8:e4:b1:f2:d0:79:ca:
         4b:9e:69:f6:a1:76:14:18:1b:12:aa:59:99:ee:ff:00:6d:15:
         13:33:33:3c:e0:cb:36:95:f8:dd:45:7b:e6:b5:98:4c:93:f3:
         56:88:ce:e1:6f:90:9f:f8:90:d2:26:bf:45:87:20:06:13:d2:
         e2:b1:11:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:30 2025 by rpki-client