Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203237363935.roa
File:                     323830303a3538303a3a2f33322d3438203d3e203237363935.roa (raw, json)
Hash identifier:          O9Xo4ditioWIRe2OY8wK8fih5hEJlDopK7TvN7JuKMY=
Subject key identifier:   08:7F:0E:38:5E:14:DE:30:75:25:29:35:73:4C:49:DE:E5:A2:32:9B
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       034ABA270A3B6A2AF488AA7269D4DEE13433F852
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203237363935.roa
Signing time:             Mon 16 Dec 2024 19:20:02 +0000
ROA not before:           Mon 16 Dec 2024 19:15:02 +0000
ROA not after:            Mon 15 Dec 2025 19:20:02 +0000
asID:                     27695
IP address blocks:        2800:580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4a:ba:27:0a:3b:6a:2a:f4:88:aa:72:69:d4:de:e1:34:33:f8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Dec 16 19:15:02 2024 GMT
            Not After : Dec 15 19:20:02 2025 GMT
        Subject: CN=087F0E385E14DE3075252935734C49DEE5A2329B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:03:1f:91:64:fd:08:ed:9c:44:8c:4c:fe:
                    ac:63:b6:a8:b8:44:4e:60:01:72:9e:99:64:f2:5b:
                    58:1f:c4:fd:f0:07:59:69:fe:3c:e8:05:bf:a1:30:
                    14:18:28:22:18:38:ad:b6:47:dd:81:d2:ef:59:83:
                    e4:fa:21:89:39:0a:c8:0f:14:0d:61:a0:24:d1:44:
                    4f:4f:2c:d1:ff:c1:a7:81:46:d1:b1:c7:09:80:10:
                    27:3e:67:7d:d9:8f:cd:4e:c7:d3:32:bf:29:bd:cc:
                    4b:2b:cf:b9:95:eb:b0:94:9d:e2:1e:60:a0:d2:56:
                    ee:e5:94:1a:2e:43:1f:05:e3:e2:eb:e0:cf:eb:6f:
                    69:cc:06:2c:92:91:c6:9c:bf:06:03:7d:ea:c6:78:
                    56:72:c8:50:03:e2:4a:f3:7f:69:e0:70:06:d2:8d:
                    86:6e:a9:9a:58:9f:21:08:0a:dd:af:fe:57:bf:24:
                    d2:36:d6:27:d0:bc:34:30:7a:80:45:0f:e6:ae:17:
                    c8:fe:e4:e7:63:df:8b:c1:f1:3a:f5:17:05:9f:de:
                    6c:94:00:22:0a:f0:d2:45:25:a8:56:73:ee:bf:18:
                    aa:61:90:30:eb:31:94:89:4c:7c:82:94:a4:2c:f6:
                    33:bf:d3:66:1b:22:e3:4b:ea:fa:31:82:04:b7:07:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7F:0E:38:5E:14:DE:30:75:25:29:35:73:4C:49:DE:E5:A2:32:9B
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:4f:d1:22:98:df:40:6d:a1:38:b7:62:56:ec:ed:cd:32:
         0a:51:c9:08:83:42:f9:84:0b:ae:21:44:1a:39:a9:e8:16:4f:
         1f:ac:ba:29:ae:b1:0d:98:0f:8f:74:09:45:3c:2f:65:7d:65:
         76:3e:5d:09:7f:5c:d5:66:3d:62:47:28:e3:54:73:40:e1:0d:
         4a:74:b3:06:78:0f:7e:6c:28:59:e9:b4:87:12:38:97:f2:5b:
         63:6e:a9:73:cd:85:e7:a7:bc:d6:d4:0c:9d:ad:ca:b9:98:00:
         d5:bd:01:2c:99:8b:b3:c8:13:84:0a:06:82:a4:c1:76:84:ef:
         4f:a5:be:f1:d9:2f:7a:0a:20:79:b1:9f:68:34:28:4e:5b:0e:
         53:e3:97:60:4d:bd:eb:2d:15:8a:6c:eb:20:ff:82:e6:0d:60:
         ba:9a:0c:e8:d6:0a:76:38:f0:92:b6:1f:59:be:d8:1d:a0:20:
         80:24:b3:0c:72:08:1c:f0:60:d6:f6:2e:50:98:99:6e:f4:2b:
         88:c8:da:58:38:0c:07:c4:e6:2d:5d:2b:26:84:13:0f:b6:a9:
         4f:65:73:a5:4d:02:fd:87:6a:df:f5:82:f6:23:8c:eb:6a:28:
         42:db:a7:08:b0:9d:d5:b9:c7:54:7c:1f:8e:65:49:dd:f2:97:
         16:cf:5f:16
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUA0q6Jwo7air0iKpyadTe4TQz+FIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDEyMTYxOTE1MDJaFw0yNTEyMTUxOTIwMDJaMDMxMTAvBgNV
BAMTKDA4N0YwRTM4NUUxNERFMzA3NTI1MjkzNTczNEM0OURFRTVBMjMyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfgwMfkWT9CO2cRIxM/qxjtqi4
RE5gAXKemWTyW1gfxP3wB1lp/jzoBb+hMBQYKCIYOK22R92B0u9Zg+T6IYk5CsgP
FA1hoCTRRE9PLNH/waeBRtGxxwmAECc+Z33Zj81Ox9Myvym9zEsrz7mV67CUneIe
YKDSVu7llBouQx8F4+Lr4M/rb2nMBiySkcacvwYDferGeFZyyFAD4krzf2ngcAbS
jYZuqZpYnyEICt2v/le/JNI21ifQvDQweoBFD+auF8j+5Odj34vB8Tr1FwWf3myU
ACIK8NJFJahWc+6/GKphkDDrMZSJTHyClKQs9jO/02YbIuNL6voxggS3B6dnAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUCH8OOF4U3jB1JSk1c0xJ3uWiMpswHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMyMzgzMDMwM2EzNTM4MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzYzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAFgDANBgkq
hkiG9w0BAQsFAAOCAQEAiB1P0SKY30BtoTi3Ylbs7c0yClHJCINC+YQLriFEGjmp
6BZPH6y6Ka6xDZgPj3QJRTwvZX1ldj5dCX9c1WY9Ykco41RzQOENSnSzBngPfmwo
Wem0hxI4l/JbY26pc82F56e81tQMna3KuZgA1b0BLJmLs8gThAoGgqTBdoTvT6W+
8dkvegogebGfaDQoTlsOU+OXYE296y0VimzrIP+C5g1gupoM6NYKdjjwkrYfWb7Y
HaAggCSzDHIIHPBg1vYuUJiZbvQriMjaWDgMB8TmLV0rJoQTD7apT2VzpU0C/Ydq
3/WC9iOM62ooQtunCLCd1bnHVHwfjmVJ3fKXFs9fFg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:27:15 2025 by rpki-client