Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/323830303a3962303a3a2f33322d3438203d3e203532333432.roa
File:                     323830303a3962303a3a2f33322d3438203d3e203532333432.roa (raw, json)
Hash identifier:          +sRD6+o9T6m+ER/lYAzYpLtOE/6FIcYDOdzJxVPwszk=
Subject key identifier:   2C:C8:2B:01:1E:AF:13:73:D7:E2:32:70:59:85:D9:27:37:C6:20:53
Certificate issuer:       /CN=0D34B4304BB923E80757FDED7508C224FEF6ED84
Certificate serial:       451AB36268E172A24CCB4121F3ED896ED99B74D6
Authority key identifier: 0D:34:B4:30:4B:B9:23:E8:07:57:FD:ED:75:08:C2:24:FE:F6:ED:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/323830303a3962303a3a2f33322d3438203d3e203532333432.roa
Signing time:             Tue 04 Feb 2025 17:59:08 +0000
ROA not before:           Tue 04 Feb 2025 17:54:08 +0000
ROA not after:            Tue 03 Feb 2026 17:59:08 +0000
asID:                     52342
IP address blocks:        2800:9b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1a:b3:62:68:e1:72:a2:4c:cb:41:21:f3:ed:89:6e:d9:9b:74:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D34B4304BB923E80757FDED7508C224FEF6ED84
        Validity
            Not Before: Feb  4 17:54:08 2025 GMT
            Not After : Feb  3 17:59:08 2026 GMT
        Subject: CN=2CC82B011EAF1373D7E232705985D92737C62053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dc:53:16:dc:1d:84:28:e6:da:b4:80:1a:ad:
                    c0:96:40:49:98:df:a2:9d:ea:9c:66:22:3e:5e:b8:
                    f3:40:9c:50:7a:e0:ed:28:48:59:07:8f:1d:93:be:
                    47:31:ad:57:4c:de:26:8f:60:da:8b:0b:e7:07:6c:
                    3c:14:a8:88:ab:44:34:25:fa:69:af:e3:23:7a:1f:
                    09:86:e8:be:8a:d5:56:a2:72:08:00:b2:9e:e5:24:
                    d7:72:68:d8:27:94:79:1a:3d:32:ad:13:91:04:6a:
                    52:dd:6a:11:ee:97:61:e0:71:30:a1:25:a5:15:05:
                    1a:da:fb:81:41:5c:5c:d7:e3:1b:1b:aa:2c:97:1f:
                    f6:ab:cb:1a:07:da:fb:da:67:2c:f1:be:97:81:85:
                    b9:ce:53:39:81:6f:02:28:33:4b:c9:8b:21:01:4a:
                    dd:4f:a2:00:b2:d5:b2:1f:37:48:1a:97:bf:10:86:
                    dd:81:d9:44:ea:b4:23:2e:91:fb:25:d6:59:7f:62:
                    94:25:06:e6:3e:81:38:cd:5a:1c:69:07:f3:6d:7d:
                    08:6d:23:75:38:ea:9f:bd:2a:49:b2:4c:3a:69:6f:
                    e5:9f:a6:c8:3b:91:84:b6:7b:bf:1a:bc:2e:20:c2:
                    d2:25:3a:1c:d7:4c:f1:c5:be:d5:d6:89:ea:a6:f2:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C8:2B:01:1E:AF:13:73:D7:E2:32:70:59:85:D9:27:37:C6:20:53
            X509v3 Authority Key Identifier:
                keyid:0D:34:B4:30:4B:B9:23:E8:07:57:FD:ED:75:08:C2:24:FE:F6:ED:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/323830303a3962303a3a2f33322d3438203d3e203532333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:79:02:48:ec:cb:b7:61:f4:3c:e2:76:64:7d:5b:59:57:26:
         a9:48:3e:24:88:11:87:d2:bb:6a:cc:fa:24:cd:da:aa:ac:6f:
         1a:65:6e:17:62:99:1c:20:f7:a6:95:42:65:27:d1:e4:6a:86:
         62:1b:8d:87:99:84:b5:e3:9c:53:2a:01:c9:a3:63:4b:88:e7:
         09:bc:dd:65:ca:e9:9b:2d:ae:e5:40:ef:cc:d8:44:c4:08:ea:
         b0:b6:f0:56:5a:3c:38:6e:31:14:b1:02:ee:bc:a4:23:84:4c:
         c0:fa:e3:a9:ac:70:47:e1:44:8d:57:14:27:c3:1b:71:4a:2f:
         29:15:cd:fe:79:f8:fe:e1:56:ae:ed:73:d5:b9:bd:60:7f:22:
         cc:52:59:4c:90:de:81:90:f8:b5:3a:b1:82:e1:41:d4:62:d8:
         5b:e0:47:26:da:5a:1b:3f:b6:06:90:b8:a1:9a:e5:d3:a2:f7:
         43:0f:e6:84:bc:c6:ca:98:0b:99:2b:4b:7d:e7:ac:0e:31:b2:
         31:eb:b4:b4:c2:37:12:2e:4a:6c:a6:03:e4:9e:12:72:12:26:
         c8:55:bd:10:c9:52:0e:08:48:a4:d0:c4:86:a0:52:96:a5:9e:
         dc:57:66:b6:0c:52:83:a5:a2:3b:9b:f3:eb:6f:57:01:9f:f1:
         5c:f2:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:00 2025 by rpki-client