Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa
File:                     323830303a3133303a3a2f33322d3332203d3e203237383230.roa (raw, json)
Hash identifier:          VvW5TV/ef/RDGhdiBnBn53njrcKLuWJvUj+wu5IUKwQ=
Subject key identifier:   F8:8B:04:E0:15:4D:08:0F:52:AA:B2:73:79:72:8A:FA:8D:4A:C9:7F
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       32280858E24DDF809E3E6D42868FC45939B93BBB
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa
Signing time:             Tue 04 Feb 2025 20:02:32 +0000
ROA not before:           Tue 04 Feb 2025 19:57:32 +0000
ROA not after:            Tue 03 Feb 2026 20:02:32 +0000
asID:                     27820
IP address blocks:        2800:130::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 10:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:28:08:58:e2:4d:df:80:9e:3e:6d:42:86:8f:c4:59:39:b9:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Feb  4 19:57:32 2025 GMT
            Not After : Feb  3 20:02:32 2026 GMT
        Subject: CN=F88B04E0154D080F52AAB27379728AFA8D4AC97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:0c:fd:f9:33:2f:90:13:b6:37:6d:26:a7:
                    79:ab:d9:c6:3d:8b:90:bf:cd:ff:3b:37:51:73:cb:
                    86:73:30:f7:5d:c0:cc:c6:76:38:c2:f2:ce:bb:b2:
                    46:d8:d2:8f:81:79:62:e4:71:10:47:6b:be:02:d3:
                    62:52:bc:b6:e9:97:38:21:7b:41:d1:3f:20:c3:ec:
                    d5:b8:27:15:aa:50:df:c1:08:c3:09:f1:3a:83:c2:
                    d8:52:7e:50:95:33:5e:f4:79:44:aa:1d:3d:5e:fd:
                    4c:33:c2:ec:c7:8b:9e:c3:fb:86:62:3e:df:08:b1:
                    2c:55:70:d9:4a:0f:c8:96:7c:6d:62:32:dc:35:4c:
                    cc:18:a0:8b:a6:0a:41:95:d3:2a:bd:cb:2f:8c:ba:
                    c6:68:36:58:d6:3b:5d:f3:8e:88:18:10:f6:55:ac:
                    5d:33:3d:63:b1:1b:ce:de:25:7d:cd:a7:65:f9:a9:
                    dc:54:4f:2f:c3:fb:08:02:4e:cd:2c:f8:b4:b4:65:
                    93:36:88:ff:11:90:01:cf:b1:92:10:40:f9:9e:b6:
                    b4:e7:ec:43:e5:a5:84:7a:6d:80:7b:58:40:57:1c:
                    5c:a8:03:3f:29:41:c7:45:60:46:2e:23:6f:a6:64:
                    dd:2d:ab:74:2b:e6:19:ac:65:ce:ae:4b:95:af:32:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8B:04:E0:15:4D:08:0F:52:AA:B2:73:79:72:8A:FA:8D:4A:C9:7F
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:130::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:69:95:9d:d2:df:36:53:3d:02:1d:83:cd:4e:5d:0b:aa:03:
         e2:1b:53:79:b5:78:69:3a:64:86:61:fd:55:a2:02:6a:cb:e4:
         7d:a4:f2:44:39:30:e0:69:16:5a:a7:76:16:d1:a8:46:8c:ac:
         28:45:2e:f2:d2:f0:f4:ff:5e:76:ba:d1:19:53:4c:ab:64:76:
         c7:ea:9d:8c:15:29:45:72:1b:04:62:39:e9:e3:b9:10:d9:e3:
         0a:ea:27:65:51:8d:54:4f:40:f8:ff:d7:56:bd:b4:07:01:4b:
         6a:01:97:af:f0:ad:64:02:e1:21:2d:1e:e2:eb:82:77:7f:45:
         9d:b7:7c:4f:ea:8d:36:b3:d6:0b:78:cd:e1:59:7b:84:67:5c:
         06:8c:c6:37:20:1f:40:d0:d5:e4:c0:dc:4e:e1:26:8f:71:fc:
         aa:86:69:b8:bf:ba:ba:d6:76:f9:4c:b1:dc:ea:8a:c9:ee:b1:
         9e:83:3c:f0:c5:ae:5b:7a:11:1a:20:93:28:18:50:1f:dc:56:
         9a:f6:db:6b:ca:aa:2c:af:23:a7:84:14:41:dc:f1:f9:f9:06:
         cc:9e:31:0b:d3:7e:97:79:bf:21:28:b9:48:6e:54:8d:dc:cf:
         a8:ec:19:df:f7:95:ad:2a:d6:de:37:27:2e:e1:40:fa:d0:28:
         e9:26:ad:23
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUMigIWOJN34CePm1Cho/EWTm5O7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA0Qzc4RjM3MjkyMDc1MzQxMThGRkUwMDJFMjE4NkZD
NTM3NTkwMTAeFw0yNTAyMDQxOTU3MzJaFw0yNjAyMDMyMDAyMzJaMDMxMTAvBgNV
BAMTKEY4OEIwNEUwMTU0RDA4MEY1MkFBQjI3Mzc5NzI4QUZBOEQ0QUM5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qAz9+TMvkBO2N20mp3mr2cY9
i5C/zf87N1Fzy4ZzMPddwMzGdjjC8s67skbY0o+BeWLkcRBHa74C02JSvLbplzgh
e0HRPyDD7NW4JxWqUN/BCMMJ8TqDwthSflCVM170eUSqHT1e/UwzwuzHi57D+4Zi
Pt8IsSxVcNlKD8iWfG1iMtw1TMwYoIumCkGV0yq9yy+MusZoNljWO13zjogYEPZV
rF0zPWOxG87eJX3Np2X5qdxUTy/D+wgCTs0s+LS0ZZM2iP8RkAHPsZIQQPmetrTn
7EPlpYR6bYB7WEBXHFyoAz8pQcdFYEYuI2+mZN0tq3Qr5hmsZc6uS5WvMr9NAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU+IsE4BVNCA9SqrJzeXKK+o1KyX8wHwYDVR0j
BBgwFoAUAEx483KSB1NBGP/gAuIYb8U3WQEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTYyREMyRENCRTg2NjAyQUU2QTJFNDIzOTM0ODdFNTJB
RjVDNjgxNUQxMjM2Q0FEMTEwQzhBNkM4NzgyMzNELzAvMDA0Qzc4RjM3MjkyMDc1
MzQxMThGRkUwMDJFMjE4NkZDNTM3NTkwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDRDNzhGMzcyOTIwNzUzNDEx
OEZGRTAwMkUyMTg2RkM1Mzc1OTAxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk2MkRDMkRDQkU4NjYwMkFFNkEyRTQyMzkzNDg3RTUyQUY1QzY4MTVE
MTIzNkNBRDExMEM4QTZDODc4MjMzRC8wLzMyMzgzMDMwM2EzMTMzMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAABMDANBgkq
hkiG9w0BAQsFAAOCAQEAP2mVndLfNlM9Ah2DzU5dC6oD4htTebV4aTpkhmH9VaIC
asvkfaTyRDkw4GkWWqd2FtGoRoysKEUu8tLw9P9edrrRGVNMq2R2x+qdjBUpRXIb
BGI56eO5ENnjCuonZVGNVE9A+P/XVr20BwFLagGXr/CtZALhIS0e4uuCd39Fnbd8
T+qNNrPWC3jN4Vl7hGdcBozGNyAfQNDV5MDcTuEmj3H8qoZpuL+6utZ2+Uyx3OqK
ye6xnoM88MWuW3oRGiCTKBhQH9xWmvbba8qqLK8jp4QUQdzx+fkGzJ4xC9N+l3m/
ISi5SG5UjdzPqOwZ3/eVrSrW3jcnLuFA+tAo6SatIw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:06:39 2025 by rpki-client