Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/323830303a3334303a3a2f33322d3438203d3e2035363932.roa
File:                     323830303a3334303a3a2f33322d3438203d3e2035363932.roa (raw, json)
Hash identifier:          OTIGjFgC04JvY8KckI8XoHN7rBm6Uobyp0ZOufGuP/E=
Subject key identifier:   5E:55:A8:C1:81:59:99:45:27:C8:6D:AA:EC:74:E6:7B:B8:09:EB:E0
Certificate issuer:       /CN=7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD
Certificate serial:       30A79DA93E85F7946429D4E0A64C85FE74071B4A
Authority key identifier: 7B:F5:5E:4B:2D:02:8A:40:96:F4:6A:4E:B8:26:03:99:DE:E1:E8:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/323830303a3334303a3a2f33322d3438203d3e2035363932.roa
Signing time:             Tue 04 Feb 2025 20:06:37 +0000
ROA not before:           Tue 04 Feb 2025 20:01:37 +0000
ROA not after:            Tue 03 Feb 2026 20:06:37 +0000
asID:                     5692
IP address blocks:        2800:340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 04:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a7:9d:a9:3e:85:f7:94:64:29:d4:e0:a6:4c:85:fe:74:07:1b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD
        Validity
            Not Before: Feb  4 20:01:37 2025 GMT
            Not After : Feb  3 20:06:37 2026 GMT
        Subject: CN=5E55A8C18159994527C86DAAEC74E67BB809EBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:8e:27:4f:27:32:6c:3a:87:fc:54:04:60:
                    0d:86:b6:5e:23:6c:88:9c:72:f9:c9:cd:6c:09:4b:
                    34:ca:9e:69:43:e9:4a:1e:97:6a:a5:37:ba:1b:ff:
                    0e:80:69:01:39:bb:a5:27:6d:24:24:e3:fc:74:52:
                    f4:c6:76:62:6f:12:81:0b:61:6d:6a:16:12:bd:3f:
                    ba:d1:c3:0a:f6:23:96:67:56:2f:5d:54:28:57:cb:
                    ec:1a:d6:ca:c2:c6:77:f1:02:04:51:16:bc:5c:9f:
                    18:5b:e7:1b:8e:ab:6b:89:dc:3a:09:51:12:11:3e:
                    12:c3:21:53:3a:00:90:cf:29:e3:df:06:8c:b2:5f:
                    8a:c3:e1:7e:60:f5:94:f5:23:30:5d:00:45:2a:23:
                    73:b9:81:4e:11:90:5c:66:f5:da:3c:fa:f3:b1:d5:
                    2a:5b:91:fb:76:fe:df:bd:44:96:6f:bb:d5:2c:82:
                    c6:9e:71:ed:60:8c:af:ca:be:41:ad:e6:d1:76:86:
                    e5:64:5f:5f:15:e5:1f:40:03:af:b2:c8:ca:8f:5e:
                    89:68:4f:3b:b7:ae:b8:18:db:73:5d:c0:e1:15:9c:
                    81:49:88:d7:fc:9b:d3:94:f2:94:20:a3:33:84:3b:
                    d8:ba:f1:ea:8a:d2:05:48:41:c9:35:58:ed:54:10:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:55:A8:C1:81:59:99:45:27:C8:6D:AA:EC:74:E6:7B:B8:09:EB:E0
            X509v3 Authority Key Identifier:
                keyid:7B:F5:5E:4B:2D:02:8A:40:96:F4:6A:4E:B8:26:03:99:DE:E1:E8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/323830303a3334303a3a2f33322d3438203d3e2035363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:340::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:9e:a4:05:8d:01:e9:e4:80:a3:0a:4c:b3:92:6d:4e:10:
         c4:00:6b:ef:03:bb:17:02:c7:91:bb:f2:3d:2f:94:32:06:9e:
         ed:07:89:69:80:dd:f0:43:26:06:bf:91:d4:c7:31:74:05:0f:
         1a:34:bb:02:06:1f:2a:74:de:e0:b7:f8:27:3c:b2:46:05:ce:
         73:f5:60:7e:35:d3:90:b5:ee:5d:d7:47:28:0e:a8:a3:5d:5c:
         89:11:4d:2e:44:dc:dd:5f:52:85:af:b7:da:06:72:36:b7:a6:
         c9:cc:31:1c:9f:41:10:8a:11:d5:f3:12:a5:2a:d6:62:0d:30:
         70:bb:1b:25:8e:b8:ac:e7:57:81:2e:16:5e:71:d8:33:f0:f3:
         b6:0e:78:99:df:57:10:dc:41:ed:67:31:93:b7:1a:2d:d4:45:
         c0:7d:43:63:74:45:e3:f6:a1:b0:0f:3f:75:8c:a7:27:50:b0:
         dd:8f:15:4f:4c:2f:60:e0:95:91:4c:a4:6f:f3:1a:51:72:dc:
         85:1a:2b:ca:eb:00:fa:ee:1c:85:96:d7:d7:be:e7:8d:b8:a2:
         81:e6:d3:6e:79:9d:3c:9e:f9:c3:39:a1:89:37:8d:98:8d:7d:
         14:84:15:72:94:75:87:93:a8:2a:7f:57:22:68:bd:74:58:bb:
         8e:17:28:33
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUMKedqT6F95RkKdTgpkyF/nQHG0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JGNTVFNEIyRDAyOEE0MDk2RjQ2QTRFQjgyNjAzOTlE
RUUxRThGRDAeFw0yNTAyMDQyMDAxMzdaFw0yNjAyMDMyMDA2MzdaMDMxMTAvBgNV
BAMTKDVFNTVBOEMxODE1OTk5NDUyN0M4NkRBQUVDNzRFNjdCQjgwOUVCRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhto4nTycybDqH/FQEYA2Gtl4j
bIiccvnJzWwJSzTKnmlD6Uoel2qlN7ob/w6AaQE5u6UnbSQk4/x0UvTGdmJvEoEL
YW1qFhK9P7rRwwr2I5ZnVi9dVChXy+wa1srCxnfxAgRRFrxcnxhb5xuOq2uJ3DoJ
URIRPhLDIVM6AJDPKePfBoyyX4rD4X5g9ZT1IzBdAEUqI3O5gU4RkFxm9do8+vOx
1Spbkft2/t+9RJZvu9Usgsaece1gjK/KvkGt5tF2huVkX18V5R9AA6+yyMqPXolo
Tzu3rrgY23NdwOEVnIFJiNf8m9OU8pQgozOEO9i68eqK0gVIQck1WO1UEB59AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUXlWowYFZmUUnyG2q7HTme7gJ6+AwHwYDVR0j
BBgwFoAUe/VeSy0CikCW9GpOuCYDmd7h6P0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTNEQzZBNDEzQkY2MDI4NEYwRUUyMjA5NUYzOERCQkE2
OUI3MzIyRUYzOUI2N0MzMzZDQzlFQUEwNkM2NDgyLzAvN0JGNTVFNEIyRDAyOEE0
MDk2RjQ2QTRFQjgyNjAzOTlERUUxRThGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QkY1NUU0QjJEMDI4QTQwOTZG
NDZBNEVCODI2MDM5OURFRTFFOEZELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkEzREM2QTQxM0JGNjAyODRGMEVFMjIwOTVGMzhEQkJBNjlCNzMyMkVG
MzlCNjdDMzM2Q0M5RUFBMDZDNjQ4Mi8wLzMyMzgzMDMwM2EzMzM0MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzNTM2MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgAA0AwDQYJKoZI
hvcNAQELBQADggEBAGFcnqQFjQHp5ICjCkyzkm1OEMQAa+8DuxcCx5G78j0vlDIG
nu0HiWmA3fBDJga/kdTHMXQFDxo0uwIGHyp03uC3+Cc8skYFznP1YH4105C17l3X
RygOqKNdXIkRTS5E3N1fUoWvt9oGcja3psnMMRyfQRCKEdXzEqUq1mINMHC7GyWO
uKznV4EuFl5x2DPw87YOeJnfVxDcQe1nMZO3Gi3URcB9Q2N0ReP2obAPP3WMpydQ
sN2PFU9ML2DglZFMpG/zGlFy3IUaK8rrAPruHIWW19e+5424ooHm0255nTye+cM5
oYk3jZiNfRSEFXKUdYeTqCp/VyJovXRYu44XKDM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:11 2025 by rpki-client