Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65653a363230303a3a2f34382d3438203d3e203133343839.roa
File:                     323830303a65653a363230303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          6do1Dxc6CjnGVANupU2MX1Z+3zaprmh6Tpt8utvOjBk=
Subject key identifier:   23:FC:3F:E6:6F:6F:9A:D7:D8:51:AD:70:58:E6:43:AE:F9:EA:69:8C
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       12EE17646146B920251BC55DFB3F692169F54E23
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65653a363230303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Mon 16 Dec 2024 19:20:03 +0000
ROA not before:           Mon 16 Dec 2024 19:15:03 +0000
ROA not after:            Mon 15 Dec 2025 19:20:03 +0000
asID:                     13489
IP address blocks:        2800:ee:6200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ee:17:64:61:46:b9:20:25:1b:c5:5d:fb:3f:69:21:69:f5:4e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Dec 16 19:15:03 2024 GMT
            Not After : Dec 15 19:20:03 2025 GMT
        Subject: CN=23FC3FE66F6F9AD7D851AD7058E643AEF9EA698C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:55:b3:33:c2:67:d6:04:03:2c:7d:6c:7f:
                    0d:10:14:ed:ed:8e:d2:0c:56:64:d2:94:01:b7:30:
                    33:90:76:60:eb:87:7d:f6:48:67:4e:0a:31:e4:f7:
                    d5:be:10:9a:af:f6:ac:76:bc:76:c8:d5:cd:e7:21:
                    22:44:fe:33:06:38:00:74:bd:19:41:c5:13:64:04:
                    37:34:09:0d:7c:3d:11:71:25:6a:a0:d8:d7:f9:41:
                    27:86:b0:90:8a:6f:34:d3:97:66:23:01:9b:32:39:
                    f9:a5:fa:46:27:8e:74:19:6a:fc:fc:da:3f:41:e0:
                    10:e5:5c:dc:92:4d:7b:43:47:7e:cd:c4:35:d3:65:
                    e1:42:9d:e7:2e:fd:8f:ee:64:7f:80:38:30:cd:60:
                    ae:d7:66:f5:45:f2:66:99:d9:2d:23:90:8e:be:02:
                    f7:7b:20:0a:2d:df:00:d0:88:12:60:a1:f4:37:aa:
                    c1:99:f8:1c:ad:1d:aa:71:fa:ce:7c:9a:87:d2:ff:
                    dc:9a:b5:d9:f2:99:16:10:db:3e:4d:be:87:6b:bc:
                    ba:75:c1:5b:0e:eb:60:a1:70:7a:c4:9b:e1:92:1e:
                    52:1b:cf:1b:49:23:86:cc:20:fd:1b:a9:8a:d0:b6:
                    f3:8b:c7:58:93:bb:4c:9e:9c:7b:74:33:3e:54:ec:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FC:3F:E6:6F:6F:9A:D7:D8:51:AD:70:58:E6:43:AE:F9:EA:69:8C
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65653a363230303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ee:6200::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:87:67:c4:9d:c9:52:68:01:26:b8:de:b9:96:ce:22:eb:
         1a:2f:41:c9:4c:6e:c0:89:73:30:10:c4:c3:51:6f:b1:25:5c:
         3d:31:08:df:6c:9c:61:d4:dc:32:17:9f:23:8e:eb:ef:af:1c:
         99:5c:13:84:be:aa:49:ab:d2:cb:cc:cd:39:fc:cf:59:8c:80:
         e8:bb:93:2c:a0:56:fc:f5:bf:89:c6:46:f3:74:06:7e:ca:b0:
         c8:01:d1:1f:f2:48:4c:c0:f8:fc:c1:a5:7a:c0:81:29:ba:53:
         f5:ca:0f:5a:86:a4:8f:5e:27:54:72:f5:12:a5:a2:0c:af:85:
         80:f6:b8:09:13:3e:78:36:5e:77:49:59:f2:13:99:d3:2e:ee:
         9a:48:e9:57:82:61:6a:34:f5:0b:d7:13:59:49:1c:b7:8d:9d:
         c3:ff:c5:64:36:63:b4:dd:dd:b7:6b:ff:8b:81:72:fb:84:6c:
         06:9d:93:0d:8c:07:9a:4f:c1:70:54:80:97:b7:d1:65:bd:7f:
         c7:be:b6:49:fe:38:35:79:f2:c1:1f:25:74:a6:3a:b4:13:9a:
         e7:10:84:6d:04:64:61:4c:b7:75:90:bf:93:cb:c3:ce:b9:5f:
         aa:94:38:61:f9:41:e5:ca:2e:e6:77:e1:b3:c9:c5:e0:ad:2e:
         85:a9:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:25 2025 by rpki-client