Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430343a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6430343a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          aEcHKDzXmMpKCk5awrZdAm1hRxy9FG5oMW1IU8HN8zo=
Subject key identifier:   E2:35:D7:4F:2E:F7:A4:FA:39:6D:A6:22:ED:DE:32:D6:CC:1E:FE:E9
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       559972CAF2E35DDE2803B3B55E911DB24201C137
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430343a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 13 Mar 2025 15:05:00 +0000
ROA not before:           Thu 13 Mar 2025 15:00:00 +0000
ROA not after:            Thu 12 Mar 2026 15:05:00 +0000
asID:                     18678
IP address blocks:        2800:310:d04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:99:72:ca:f2:e3:5d:de:28:03:b3:b5:5e:91:1d:b2:42:01:c1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 13 15:00:00 2025 GMT
            Not After : Mar 12 15:05:00 2026 GMT
        Subject: CN=E235D74F2EF7A4FA396DA622EDDE32D6CC1EFEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:41:6f:48:97:e0:ff:16:cd:e2:81:21:01:
                    71:0c:01:43:7b:e2:b2:46:fe:7d:c5:ee:42:7e:eb:
                    bf:23:67:b6:a5:bf:de:89:c9:ad:c0:05:b7:a5:41:
                    63:08:21:89:ab:6e:96:94:c1:dd:18:4d:7d:53:d7:
                    8b:f8:9c:14:c1:e9:86:8d:6e:9f:9f:1c:c3:dc:6a:
                    bc:7a:9d:94:ea:0c:da:72:13:b0:2a:68:ae:0d:e2:
                    54:0f:9c:04:55:c2:03:f5:c8:d4:30:3f:af:b5:e0:
                    db:11:64:81:d2:b3:08:f5:98:1c:ee:82:e1:a0:65:
                    90:18:96:9f:c9:bb:f6:a8:35:3a:76:a0:13:e3:e0:
                    07:cb:e6:64:bd:82:53:0c:87:26:0b:7c:8e:71:2a:
                    74:f6:95:34:1e:e5:9e:2f:55:d7:4b:8f:2c:49:e5:
                    9e:38:4e:33:9c:17:cb:17:15:58:3d:5c:ac:91:15:
                    6e:5c:ff:30:b7:37:c0:bf:e6:62:98:f2:97:6a:5d:
                    44:a3:04:c9:9b:49:c8:00:47:cc:b9:da:78:a4:ab:
                    49:d5:4f:7e:a8:09:b4:c4:d6:96:b2:6f:2a:e7:b2:
                    36:e8:7f:87:0b:ea:53:ba:77:16:42:59:c2:11:4d:
                    09:96:e6:7f:b3:37:ad:15:24:3b:a3:65:b6:0a:af:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:35:D7:4F:2E:F7:A4:FA:39:6D:A6:22:ED:DE:32:D6:CC:1E:FE:E9
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430343a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:d04::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:34:3d:00:b5:99:0c:fb:bd:b0:a8:7b:3a:22:98:fd:00:7b:
         a5:a1:a4:7a:a7:6a:db:03:96:63:b2:77:97:01:74:4c:d6:0e:
         76:70:11:cd:a0:bc:a4:d7:ea:ba:e6:a2:be:a5:87:79:11:d2:
         b1:0f:b7:9b:bd:36:93:95:54:13:9d:c7:ec:79:d0:fc:b5:28:
         92:ff:78:8c:32:03:72:fb:15:f9:a1:97:3c:ad:47:1f:32:22:
         56:3d:ac:c3:ce:19:a5:a7:0d:03:57:91:32:49:6e:31:e5:d6:
         a1:a2:1e:5b:55:d0:a3:dc:e6:41:e4:12:16:20:e4:cc:ab:be:
         47:25:24:31:93:5e:4c:3a:22:53:cf:36:f0:ad:00:55:ef:e7:
         7c:a6:a7:bf:53:f3:bf:f4:47:cb:37:b0:08:e9:79:01:65:f2:
         c4:fb:ca:b9:86:16:42:e1:69:4c:8c:df:e7:b9:a5:af:99:95:
         dd:cc:7e:13:c5:d2:86:36:7d:1b:cc:7a:d4:36:24:db:38:cb:
         22:b4:63:7e:69:51:75:05:87:71:8d:c2:c0:c1:48:ff:ff:8f:
         41:50:d5:62:fa:2b:8e:90:a7:c8:42:4f:70:0d:72:c8:c0:ec:
         bc:69:31:5b:69:11:b0:df:2e:18:fc:7c:67:ab:0c:1a:ff:eb:
         67:40:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:11:13 2025 by rpki-client