Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31323a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a31323a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          5u2Ayu6XnNCnoJ/ZbJes6qAZ6jz9bVP3D5SlQT735ik=
Subject key identifier:   75:F6:8C:C7:23:51:54:A4:B4:E4:C3:12:AF:2D:AF:FE:C3:BE:D3:2E
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       481E713335F3B7EBF44F8B732FA2A4E742017C0C
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31323a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 27 Feb 2025 16:15:00 +0000
ROA not before:           Thu 27 Feb 2025 16:10:00 +0000
ROA not after:            Thu 26 Feb 2026 16:15:00 +0000
asID:                     18678
IP address blocks:        2800:310:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1e:71:33:35:f3:b7:eb:f4:4f:8b:73:2f:a2:a4:e7:42:01:7c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 27 16:10:00 2025 GMT
            Not After : Feb 26 16:15:00 2026 GMT
        Subject: CN=75F68CC7235154A4B4E4C312AF2DAFFEC3BED32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:28:7b:29:af:32:13:04:cb:aa:21:6a:cb:
                    cf:aa:5b:38:08:08:62:2f:aa:ad:34:c2:fd:c3:40:
                    bb:dc:20:54:6d:6a:5f:18:f7:5f:15:02:09:74:82:
                    58:9a:50:46:53:c2:3b:cb:62:a5:83:9a:6d:b6:fa:
                    8e:98:7e:d0:5f:0a:6b:7f:b6:d3:d0:ea:11:25:b4:
                    1d:27:c4:a9:32:4b:2e:55:5d:6d:c0:8a:a6:e7:9a:
                    ce:98:06:84:35:08:da:70:01:7d:59:19:5a:38:5f:
                    6f:c4:6a:29:af:84:91:c9:de:c4:ac:18:e3:70:33:
                    e7:a2:e4:ce:df:73:d5:c2:be:ee:47:12:1b:55:24:
                    14:e0:a2:25:32:3f:12:2a:65:1d:df:4d:51:20:d3:
                    46:e1:07:00:34:68:49:fd:dd:af:43:46:28:4b:7e:
                    00:45:36:50:36:8a:be:9c:76:ce:2f:81:1b:fe:00:
                    b0:47:b2:cb:09:a3:c7:19:6b:cd:d1:6f:04:b6:0c:
                    8b:50:a0:02:41:48:1e:54:36:96:85:85:1f:7f:bd:
                    f8:b3:9c:b7:22:32:9d:27:3d:d2:64:6b:b2:9d:38:
                    b8:33:e7:29:60:88:b7:21:28:a3:99:cf:11:77:a8:
                    97:c9:59:86:7c:b7:09:85:ac:5f:00:73:dc:87:99:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F6:8C:C7:23:51:54:A4:B4:E4:C3:12:AF:2D:AF:FE:C3:BE:D3:2E
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31323a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:38:1e:23:a5:4b:bb:65:2d:44:c7:81:63:d5:8f:63:d2:
         8e:ce:c2:60:aa:2f:da:68:44:50:bb:94:58:82:e7:fd:e7:98:
         c6:f4:6a:c4:c6:11:62:22:94:c7:cc:72:7f:cc:a3:33:b6:00:
         41:bb:66:ef:bc:dc:94:51:56:d0:22:ec:50:fe:e4:a6:65:85:
         8d:a3:e9:87:0b:19:c0:a7:f6:f2:46:45:04:51:08:e7:7b:e4:
         0a:d1:67:b3:b0:59:4b:f2:13:52:a1:3d:af:cf:8d:0f:68:a8:
         16:41:ca:e7:1e:a8:fb:56:fa:8e:35:de:dd:b6:6b:95:68:6b:
         76:66:69:5d:69:00:9c:c2:2d:8c:0b:b8:5b:2c:20:ca:e0:7f:
         23:d1:bd:09:fc:d5:ca:41:61:32:38:c1:84:c3:86:0a:4c:87:
         22:19:ef:cb:ff:ab:3d:a2:f5:1b:e5:1d:6d:8d:f6:89:c4:6e:
         e1:b6:e7:4e:98:40:9e:93:40:9f:70:20:04:5a:1f:bf:53:3a:
         90:d6:80:1d:16:09:4b:53:82:a5:cf:0a:5a:1b:2e:e8:5c:4e:
         c8:78:ed:07:3e:63:ac:20:92:95:57:a7:75:dd:cc:f2:72:32:
         75:1b:d4:18:b9:fa:7c:08:b9:04:4c:53:d6:bf:e1:03:9e:aa:
         03:9e:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:29:27 2025 by rpki-client