Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/323830303a6163303a3a2f33322d3438203d3e203237383337.roa
File:                     323830303a6163303a3a2f33322d3438203d3e203237383337.roa (raw, json)
Hash identifier:          MWvdG5rQJ7qvjCEmJlvb7BTn+MZZ4SLnKCKs/oXWc44=
Subject key identifier:   EA:48:0C:89:F9:96:59:EA:54:A2:FD:94:FF:66:69:5D:6F:CB:C7:5C
Certificate issuer:       /CN=4C35789BFFFE0B4B4D1B262477AD44AA4723EE20
Certificate serial:       501D9BEB40C717D9CE828C5BCF6669D0136F48B9
Authority key identifier: 4C:35:78:9B:FF:FE:0B:4B:4D:1B:26:24:77:AD:44:AA:47:23:EE:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/323830303a6163303a3a2f33322d3438203d3e203237383337.roa
Signing time:             Tue 04 Feb 2025 18:47:15 +0000
ROA not before:           Tue 04 Feb 2025 18:42:15 +0000
ROA not after:            Tue 03 Feb 2026 18:47:15 +0000
asID:                     27837
IP address blocks:        2800:ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1d:9b:eb:40:c7:17:d9:ce:82:8c:5b:cf:66:69:d0:13:6f:48:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C35789BFFFE0B4B4D1B262477AD44AA4723EE20
        Validity
            Not Before: Feb  4 18:42:15 2025 GMT
            Not After : Feb  3 18:47:15 2026 GMT
        Subject: CN=EA480C89F99659EA54A2FD94FF66695D6FCBC75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:1d:b4:be:17:13:b8:b7:68:68:88:93:c5:
                    40:7d:da:08:ff:48:c7:2c:f3:85:18:b3:bf:16:34:
                    ef:96:0d:1a:95:95:01:23:0d:d6:43:75:4b:d4:93:
                    ee:15:65:83:45:9e:b2:1b:4c:c3:b5:e0:d9:d8:a3:
                    c1:1b:78:ee:70:45:00:fb:33:97:11:3b:25:e2:e9:
                    e8:19:53:1b:18:94:01:c3:8b:e3:03:24:0e:6e:62:
                    63:69:58:7f:8e:c6:02:03:39:4d:f2:de:4c:ee:b0:
                    af:66:f2:53:b7:f6:1e:a9:8f:51:ef:5e:9d:20:be:
                    f0:85:0b:84:98:02:76:0e:22:29:62:8d:75:ba:0d:
                    9a:00:f0:79:02:c3:5c:da:6a:5d:da:51:1d:3a:7b:
                    8b:bd:df:65:9a:6a:fd:f1:11:45:7b:d8:a7:85:a6:
                    ee:70:b2:b2:3c:5f:b6:6f:81:04:d6:69:34:73:97:
                    b4:96:e3:a9:b1:1b:56:6e:71:59:92:e0:3f:5c:10:
                    0f:9c:4c:e5:86:90:82:72:df:ed:99:6f:b4:72:ea:
                    77:ed:06:96:d3:3f:92:87:5b:2d:04:9d:47:41:38:
                    56:da:88:d2:e1:19:29:96:bc:50:ba:b6:a3:ed:f1:
                    29:a3:8e:07:19:ba:a0:f6:13:7d:31:9b:0b:8a:fa:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:48:0C:89:F9:96:59:EA:54:A2:FD:94:FF:66:69:5D:6F:CB:C7:5C
            X509v3 Authority Key Identifier:
                keyid:4C:35:78:9B:FF:FE:0B:4B:4D:1B:26:24:77:AD:44:AA:47:23:EE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/323830303a6163303a3a2f33322d3438203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:af:4c:e3:2c:e8:b1:a0:66:00:96:75:a5:d1:3a:87:fb:
         05:d6:bb:0a:5a:4c:d8:00:d4:32:70:ec:bb:9a:d0:4f:80:98:
         10:37:4d:c5:5f:43:b0:c1:70:c8:07:29:fb:63:ec:83:6f:94:
         50:a4:d6:8a:dd:8b:83:e5:d6:f1:22:f0:d4:d1:2c:4f:f6:17:
         c2:2e:b8:98:7f:52:44:14:84:ac:f7:2e:87:2e:9e:9b:0c:fa:
         de:24:66:12:6d:99:28:df:97:a1:c4:c9:ca:50:d2:c4:00:50:
         f4:4f:60:4c:c0:bf:84:bf:20:53:17:48:2e:21:2e:fd:78:b7:
         38:40:ed:c7:a3:73:a7:36:1b:db:1f:4b:d6:15:cb:46:86:77:
         f5:e5:31:de:68:f8:4e:9a:f5:7a:a7:64:6a:ce:53:b6:05:03:
         24:79:5a:2a:45:b7:ed:bb:4f:cb:35:9d:de:50:8e:88:6f:bb:
         1a:72:5e:1f:cc:da:68:17:97:96:7b:9e:0b:a6:94:dc:74:0c:
         51:0d:12:21:ef:b7:ba:f6:f2:8b:0c:c5:ca:cb:21:1b:b2:21:
         04:65:62:d8:25:72:c8:08:29:32:57:45:63:67:15:78:2b:ae:
         6f:45:98:01:c3:49:a7:a1:b1:f5:ca:32:1e:00:74:64:e3:76:
         c5:03:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:43 2025 by rpki-client