Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa
File:                     323830303a6264303a3a2f33322d3332203d3e20323639373530.roa (raw, json)
Hash identifier:          qhbwBZk9vlgCg+3+LKKtZAbyHyHvM9g+PWDyKgdskwA=
Subject key identifier:   EE:04:72:23:D4:79:91:60:BB:81:A9:ED:10:AD:50:A3:18:96:1C:67
Certificate issuer:       /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial:       57ED8608166A8D3E5A7C29506AB36997E252191A
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa
Signing time:             Tue 04 Feb 2025 18:49:17 +0000
ROA not before:           Tue 04 Feb 2025 18:44:17 +0000
ROA not after:            Tue 03 Feb 2026 18:49:17 +0000
asID:                     269750
IP address blocks:        2800:bd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ed:86:08:16:6a:8d:3e:5a:7c:29:50:6a:b3:69:97:e2:52:19:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
        Validity
            Not Before: Feb  4 18:44:17 2025 GMT
            Not After : Feb  3 18:49:17 2026 GMT
        Subject: CN=EE047223D4799160BB81A9ED10AD50A318961C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:a1:24:c6:bc:72:d9:e9:3a:64:07:08:2d:
                    85:63:b3:7a:84:0f:26:7e:73:35:af:71:7e:42:6f:
                    68:6a:2e:8b:4f:83:cd:b7:d7:6d:84:23:c6:02:24:
                    54:c1:ed:7c:3f:76:07:f0:3f:b2:91:27:8d:23:79:
                    29:69:85:65:7c:41:7a:b9:42:44:ff:b1:d0:d8:30:
                    a7:b5:2b:8f:60:ae:a2:44:58:0d:1c:f1:38:1d:87:
                    63:16:1e:53:0e:25:8d:59:8a:f7:92:76:d2:ba:49:
                    8d:40:73:10:42:28:0c:ba:40:8c:98:6a:3c:80:d3:
                    46:fc:1d:b4:f8:cf:1f:2e:e9:21:a8:93:78:9f:29:
                    41:ca:97:48:84:0b:63:c7:b2:cb:8a:ac:91:bd:1b:
                    4a:09:e1:b5:99:3f:1e:5c:f7:99:23:da:b7:21:50:
                    b8:bf:9f:75:e2:ca:87:e1:16:b4:f3:46:16:a6:ed:
                    9a:0b:25:c3:0b:96:8c:73:bd:6e:3c:23:f4:bb:64:
                    c8:d4:fe:72:93:10:5b:09:5c:60:a4:ce:dc:62:f4:
                    ae:fe:6e:00:b6:a6:4c:4d:95:7a:f1:68:5d:a6:8c:
                    a3:e9:3d:22:03:3e:7d:b8:f8:38:fc:3c:a3:9f:3d:
                    5e:1a:da:7b:05:6a:4d:e6:f7:d0:71:1c:01:2c:59:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:72:23:D4:79:91:60:BB:81:A9:ED:10:AD:50:A3:18:96:1C:67
            X509v3 Authority Key Identifier:
                keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:af:77:f1:4d:35:68:62:7d:d5:aa:a8:57:f6:a5:a6:8d:a6:
         9a:af:ce:58:bf:f2:d6:70:dd:ba:39:1e:17:ec:66:0a:10:d4:
         85:4e:27:4b:21:c7:55:db:8e:f5:90:b1:16:3e:a4:a6:57:a5:
         70:20:36:42:0f:59:f6:91:af:4c:23:a3:b0:ec:b4:b3:48:45:
         18:f7:97:7b:c3:f6:d9:26:85:42:a0:bb:ba:a3:dd:5a:09:58:
         ef:f4:04:1a:44:4d:fc:9a:26:bd:04:09:2c:3c:e5:f0:9a:71:
         e8:0d:f5:91:88:12:4f:2f:cc:16:a6:64:16:fd:6b:ff:19:4f:
         25:f3:b3:2d:2c:0d:63:76:42:31:97:6d:06:d7:52:27:e3:e1:
         25:8e:8d:97:38:48:31:1e:6d:b9:ac:65:51:f0:ec:64:de:02:
         b5:d5:94:14:44:82:23:73:61:4d:37:11:79:10:26:f2:e1:34:
         89:a6:6c:30:97:7a:bf:20:78:f7:71:a5:b3:e2:e9:d5:15:31:
         ee:e9:18:3b:8a:55:6d:31:92:ad:ed:76:4d:65:29:24:ee:fe:
         ac:3b:14:51:61:c0:d3:e0:d2:8e:d5:a1:13:14:f1:33:30:f2:
         f3:5e:4c:eb:79:b0:a8:61:9d:d6:3d:51:d7:1f:18:0a:99:07:
         ec:ee:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:11 2025 by rpki-client