Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830303a6134303a3a2f33322d3634203d3e203232303830.roa
File:                     323830303a6134303a3a2f33322d3634203d3e203232303830.roa (raw, json)
Hash identifier:          N4Ac8hV4rVBuF2WNv6CzsVXPlRnyrvE5u4gE6RLjBK8=
Subject key identifier:   E5:7B:6E:4D:72:F7:69:F7:A0:49:C8:BE:41:B1:96:8B:66:81:D1:F5
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       26C0F76EDCC6BC2B6EF747939E103CD9D9007DFF
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830303a6134303a3a2f33322d3634203d3e203232303830.roa
Signing time:             Tue 04 Feb 2025 18:23:44 +0000
ROA not before:           Tue 04 Feb 2025 18:18:44 +0000
ROA not after:            Tue 03 Feb 2026 18:23:44 +0000
asID:                     22080
IP address blocks:        2800:a40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c0:f7:6e:dc:c6:bc:2b:6e:f7:47:93:9e:10:3c:d9:d9:00:7d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Feb  4 18:18:44 2025 GMT
            Not After : Feb  3 18:23:44 2026 GMT
        Subject: CN=E57B6E4D72F769F7A049C8BE41B1968B6681D1F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:7a:eb:b0:d6:f8:ca:71:9d:6e:c2:ed:13:
                    5e:6f:98:2a:41:4d:39:b4:89:be:5d:04:ab:3c:3f:
                    21:3c:0d:b4:52:0b:58:51:c4:c0:2f:f8:3a:df:f4:
                    61:f0:be:8f:2d:10:20:de:21:df:ed:6f:61:9e:fa:
                    53:9b:f1:fc:d9:16:b2:e9:1b:ed:d8:3d:b1:05:d0:
                    b9:e4:2d:86:39:1c:40:4a:28:92:1d:8a:01:16:a5:
                    54:c4:36:ff:6e:54:32:24:e8:6c:e0:08:8a:ae:f3:
                    18:37:0e:21:bd:8a:b3:3a:26:50:25:0e:ca:99:da:
                    3c:0f:d5:2b:fa:aa:2f:91:da:cb:25:30:08:1d:02:
                    45:1f:ca:75:29:05:61:c0:87:5d:24:07:e1:2d:9f:
                    e3:ba:84:c1:7d:5e:37:d8:12:4e:cf:5c:c2:7f:67:
                    01:ba:84:a4:4a:f0:99:ed:73:69:f4:48:a4:b3:a0:
                    e9:25:73:5d:07:ab:a0:21:d8:d2:5d:a1:27:8b:b3:
                    6b:ba:9f:96:9d:94:b7:61:48:98:93:55:53:33:7c:
                    69:d6:d8:a4:a7:f9:23:29:9b:65:d2:8c:3c:86:0f:
                    3b:ff:2a:de:a0:97:23:a7:3d:60:1a:33:fd:3f:fe:
                    ed:71:9a:54:7b:35:11:af:6f:58:41:21:6f:42:03:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7B:6E:4D:72:F7:69:F7:A0:49:C8:BE:41:B1:96:8B:66:81:D1:F5
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830303a6134303a3a2f33322d3634203d3e203232303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:68:45:e5:da:66:b1:22:dc:44:34:c6:7b:81:69:79:3e:87:
         1d:53:81:b1:c8:c8:2f:8e:e5:0e:09:a7:0d:98:89:ec:03:23:
         fc:22:10:f3:e9:fd:e4:8a:08:d7:c7:e4:d9:fa:fa:a7:c2:3a:
         8b:a3:dc:bb:10:b5:f3:63:08:9f:60:ad:f2:c9:e8:e2:eb:d8:
         5e:fe:19:a7:d2:84:dd:95:81:c7:de:c5:f8:7d:2b:86:f5:9e:
         53:f6:33:18:1a:ce:9e:a8:2a:cf:2e:59:da:7e:1b:60:b0:99:
         c3:2f:6b:b4:50:4d:b9:26:62:79:eb:55:da:2f:e8:3f:d9:4a:
         a2:2d:13:ce:d2:e9:54:68:b0:74:db:3a:e1:e2:b7:e6:2d:9f:
         71:87:1d:49:72:f7:b8:8e:3b:d3:2a:89:2c:4e:52:4e:dd:18:
         47:18:ca:3c:6f:07:a6:81:5e:cf:d5:d6:b4:14:6c:c0:1d:ee:
         89:af:82:b2:0f:34:80:66:33:62:42:c7:2b:97:a8:02:bc:55:
         aa:80:24:cd:25:55:b0:a6:db:a4:24:6b:bd:bf:45:00:93:c9:
         d3:8f:a3:bf:cc:02:51:6d:fb:2e:30:57:41:8e:79:d6:84:53:
         1f:b4:fb:50:b1:00:8b:99:5d:75:40:cc:0b:dd:a8:1a:43:4d:
         61:59:e5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:46:38 2025 by rpki-client