Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203133343839.roa
File:                     323830303a3538303a3a2f33322d3438203d3e203133343839.roa (raw, json)
Hash identifier:          YvTuefydrQQF2h2RxcttEKLIZKUnogJzHkNx1shercQ=
Subject key identifier:   6C:4D:7B:67:BD:68:ED:B3:FC:31:11:17:28:F3:A1:AD:92:FB:2A:14
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       13183A18CA7853A7BDC855F56FC8FAB9FA58EEFF
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203133343839.roa
Signing time:             Thu 09 Jan 2025 20:05:00 +0000
ROA not before:           Thu 09 Jan 2025 20:00:00 +0000
ROA not after:            Thu 08 Jan 2026 20:05:00 +0000
asID:                     13489
IP address blocks:        2800:580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:18:3a:18:ca:78:53:a7:bd:c8:55:f5:6f:c8:fa:b9:fa:58:ee:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  9 20:00:00 2025 GMT
            Not After : Jan  8 20:05:00 2026 GMT
        Subject: CN=6C4D7B67BD68EDB3FC31111728F3A1AD92FB2A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:92:8a:45:95:cb:64:bb:11:03:39:bc:de:
                    8f:46:84:7a:35:86:dc:37:8f:c9:c8:e9:1f:ae:82:
                    58:55:ef:f7:50:b0:07:56:82:50:d2:da:c1:82:06:
                    ba:4e:cd:78:20:a9:e9:47:fb:de:82:fa:ae:00:b1:
                    d8:fb:f0:d0:cd:12:cb:70:35:68:9c:57:41:ca:d8:
                    01:db:5c:c5:25:fd:43:38:80:a6:57:a6:9d:10:43:
                    dd:24:96:51:6c:5f:96:5c:5f:10:cd:7d:68:ff:35:
                    57:ba:e2:5a:11:49:c5:c6:42:d3:b3:63:09:dc:d5:
                    e8:20:9d:c3:03:77:94:e5:85:b2:a2:a1:c3:8a:01:
                    eb:36:7a:a7:b8:6c:f8:40:1b:c7:6b:a3:21:29:59:
                    db:72:a2:3c:b1:8c:c7:c1:d4:20:d6:4c:e9:86:d0:
                    64:96:33:a0:b1:61:c4:6a:e9:c5:f7:06:e8:d0:38:
                    e5:a5:f9:64:7b:29:cd:be:7b:55:7c:61:ce:1b:93:
                    e2:45:df:1b:cd:54:39:bf:bc:d0:49:ed:4f:23:91:
                    cc:d6:06:e1:a7:da:4a:db:f6:97:82:ba:c8:c4:f2:
                    65:55:19:61:62:c2:a1:4b:3b:be:c5:12:6d:60:5a:
                    75:59:0d:f0:ff:9f:aa:9e:9e:87:76:b1:16:84:4d:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4D:7B:67:BD:68:ED:B3:FC:31:11:17:28:F3:A1:AD:92:FB:2A:14
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:12:b4:89:10:ef:f3:a4:c2:73:d1:79:e6:41:80:53:73:
         e3:cb:7a:13:e5:f3:79:2b:8c:c9:a6:98:f1:ca:da:1f:45:de:
         78:56:bd:3b:45:23:95:4d:fd:0c:b5:42:2f:e1:8f:53:61:98:
         02:3f:13:7b:27:cf:c3:b0:fb:4d:c6:1f:47:3b:09:65:c5:db:
         00:d9:72:ba:60:6a:be:6c:95:b3:e3:bf:cf:7d:4c:0a:70:3f:
         96:ee:d4:a1:29:6e:34:ea:39:b8:0f:ea:93:e9:78:92:11:b1:
         26:0e:df:ec:f7:f1:2f:00:73:70:bb:79:ee:1e:ec:2f:90:fd:
         eb:3c:07:d4:7c:3e:e8:86:fc:8f:f5:3b:08:37:ab:8b:6d:92:
         ec:37:7d:35:f9:68:22:47:a6:a4:77:b9:92:5f:09:50:8f:61:
         8b:26:2d:7b:ae:9b:8c:01:a7:c3:3e:3b:71:cb:c2:52:60:79:
         6c:a0:4c:d0:51:65:bd:62:00:1b:ee:49:c1:29:17:d2:c1:c0:
         ce:0c:1d:08:2f:1b:aa:ff:d6:92:a0:bd:5e:cf:2d:42:ed:b5:
         37:1f:51:5f:80:e4:c8:74:2c:91:a0:d0:93:c1:83:d4:53:d3:
         4e:ea:ef:d5:ac:7f:d3:6c:a3:1f:e7:13:e6:88:e1:bd:22:32:
         f0:70:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:51 2025 by rpki-client