Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
File:                     323830313a3163303a3a2f33392d3430203d3e203532343234.roa (raw, json)
Hash identifier:          h8yYlpglVyq0EU1saiLkKXNWNFnE0KDlG9RvRKIZ5N8=
Subject key identifier:   A8:75:6D:20:E2:6E:11:40:76:90:67:F7:17:51:AA:57:39:5C:B7:4F
Certificate issuer:       /CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Certificate serial:       4E5E3E8BE00A52AFB118CE968AE24FE43982A70A
Authority key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
Signing time:             Tue 04 Feb 2025 18:03:12 +0000
ROA not before:           Tue 04 Feb 2025 17:58:12 +0000
ROA not after:            Tue 03 Feb 2026 18:03:12 +0000
asID:                     52424
IP address blocks:        2801:1c0::/39 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5e:3e:8b:e0:0a:52:af:b1:18:ce:96:8a:e2:4f:e4:39:82:a7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
        Validity
            Not Before: Feb  4 17:58:12 2025 GMT
            Not After : Feb  3 18:03:12 2026 GMT
        Subject: CN=A8756D20E26E1140769067F71751AA57395CB74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:5f:2a:f1:59:42:4e:18:81:f4:0f:bd:94:
                    4a:e6:48:fd:f8:b8:f0:f7:0f:24:65:4a:27:a8:10:
                    13:35:17:41:56:e5:98:9e:64:ff:a9:46:9b:e2:25:
                    96:1c:27:85:c5:0f:4c:06:ee:d9:a3:73:7f:95:21:
                    d1:ab:69:d9:1b:8e:77:72:da:9f:27:eb:20:34:8c:
                    1a:86:52:b3:14:ff:90:fe:96:87:b9:bf:e3:7e:21:
                    ee:4f:7f:56:fa:98:33:0d:19:db:c5:67:66:e6:60:
                    10:0b:fe:52:66:ab:89:ae:47:22:4c:85:97:12:2e:
                    be:4f:0d:6a:c0:78:38:40:31:76:60:c8:b1:09:27:
                    ff:ce:50:fe:69:c6:19:ab:08:4b:5b:40:3b:d1:cf:
                    e5:65:cb:a2:34:8a:07:3b:b6:a3:52:f5:f4:c0:6a:
                    4f:74:92:07:cc:cb:50:5a:0a:7c:a0:71:9d:c5:85:
                    d5:40:f3:c5:53:7a:78:b0:a0:73:28:38:df:94:71:
                    12:4a:3f:7e:b9:55:03:0e:7b:e9:b4:b7:1b:76:b1:
                    f9:f4:f3:42:62:6b:c0:0a:c8:26:f7:3d:29:20:a2:
                    76:fa:fc:28:79:20:dc:4e:0d:8e:ee:f0:d7:78:96:
                    1e:fe:d2:a6:07:26:c0:40:cb:83:c8:3f:8c:b8:14:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:75:6D:20:E2:6E:11:40:76:90:67:F7:17:51:AA:57:39:5C:B7:4F
            X509v3 Authority Key Identifier:
                keyid:A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c0::/39

    Signature Algorithm: sha256WithRSAEncryption
         49:00:f8:18:7a:ee:6f:87:39:8a:80:9d:45:90:9c:3e:de:a7:
         7c:a6:80:7b:1f:99:55:1b:54:66:42:73:f1:91:96:14:4a:fa:
         a5:ce:9c:77:3b:3c:8d:ee:fb:8f:cd:f5:f4:7b:09:f1:2c:e8:
         fb:94:79:49:90:c5:89:ab:f3:e0:5d:42:20:5d:9e:a9:75:77:
         f7:22:74:b6:25:cb:a8:34:a1:24:8e:8a:67:4b:20:59:82:1c:
         eb:75:be:ec:6f:a5:c2:3d:32:68:ad:a2:02:63:06:21:57:9e:
         8f:b7:f7:61:90:61:f2:68:c6:ea:a8:a2:e7:82:a4:52:ee:a0:
         11:1b:c9:ad:fa:06:0f:2a:25:5d:5f:d9:d1:14:69:cc:3a:3c:
         a2:f8:34:28:5d:10:d8:a3:55:a4:4e:c0:9b:38:3e:4b:39:9e:
         98:9e:2d:0f:0d:89:bc:c8:42:a5:75:33:70:68:69:ba:b8:95:
         c0:97:17:8e:74:88:3f:91:84:3d:59:c1:9b:e2:e2:bd:9b:22:
         38:3f:93:4a:f7:1b:64:1c:1e:4d:f4:b2:4f:d3:f8:e4:fa:da:
         05:22:a2:41:70:27:68:2d:fe:3c:85:7e:c5:88:42:8d:65:4c:
         21:7c:6d:81:90:c7:6e:3c:20:b9:a8:83:21:44:e7:fe:18:af:
         9e:ba:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:52 2025 by rpki-client