Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030343a3a2f34372d3438203d3e203135313639.roa
File:                     323830303a3366303a343030343a3a2f34372d3438203d3e203135313639.roa (raw, json)
Hash identifier:          iOBn6qhB6Ghq6ZWy3g5atL2rLvBebxHriJrmeWS0bG0=
Subject key identifier:   16:88:F7:A7:7A:64:1A:F2:1B:82:09:F4:93:A0:88:F3:E0:C0:D6:18
Certificate issuer:       /CN=4A21846C50E619589B04A94E63EC535C6F77C010
Certificate serial:       0FFC20DB51700023DF2205963C198BC8273E7984
Authority key identifier: 4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030343a3a2f34372d3438203d3e203135313639.roa
Signing time:             Tue 04 Feb 2025 18:16:34 +0000
ROA not before:           Tue 04 Feb 2025 18:11:34 +0000
ROA not after:            Tue 03 Feb 2026 18:16:34 +0000
asID:                     15169
IP address blocks:        2800:3f0:4004::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fc:20:db:51:70:00:23:df:22:05:96:3c:19:8b:c8:27:3e:79:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A21846C50E619589B04A94E63EC535C6F77C010
        Validity
            Not Before: Feb  4 18:11:34 2025 GMT
            Not After : Feb  3 18:16:34 2026 GMT
        Subject: CN=1688F7A77A641AF21B8209F493A088F3E0C0D618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:70:df:8a:da:7f:10:13:f2:3f:72:e6:22:
                    15:6b:e8:5c:9f:ea:ef:2a:ab:57:b3:22:1b:f9:fb:
                    44:be:82:0d:25:d2:af:a5:e7:30:0b:6a:86:b9:d8:
                    e3:ec:c4:1c:5a:52:2a:94:ab:34:da:9b:28:ef:20:
                    8d:de:fd:d8:c4:ae:02:59:87:36:ae:b5:21:97:b2:
                    98:ed:f9:78:d9:dc:6f:c1:75:e4:1b:e9:81:b0:18:
                    85:b5:e0:4d:1e:fe:50:b5:42:80:c5:63:f7:9a:8e:
                    b7:68:c9:ef:36:6b:58:b1:f1:f0:d9:1d:e5:da:8b:
                    40:92:cf:c0:8b:d6:91:9f:e4:a8:86:f4:0b:83:82:
                    c3:2c:f9:19:d2:80:91:13:b5:f3:8d:85:4f:e7:e8:
                    61:15:e6:57:7e:45:4c:44:e6:05:f9:bd:b8:3d:06:
                    20:62:88:37:b5:5d:59:78:b6:39:13:5d:49:8b:ae:
                    41:e4:df:65:02:68:ae:35:30:21:af:44:66:85:30:
                    3d:9a:8f:81:a3:86:4c:28:7a:fd:d4:82:42:b0:c2:
                    89:80:1a:f1:cf:9c:68:e4:3f:d1:f6:45:3b:04:37:
                    9a:d6:53:4a:fc:a0:c5:b4:6c:f9:0a:25:d3:0b:73:
                    dc:5f:e6:04:28:f8:c5:02:28:0d:76:bf:8a:79:98:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:88:F7:A7:7A:64:1A:F2:1B:82:09:F4:93:A0:88:F3:E0:C0:D6:18
            X509v3 Authority Key Identifier:
                keyid:4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030343a3a2f34372d3438203d3e203135313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3f0:4004::/47

    Signature Algorithm: sha256WithRSAEncryption
         08:20:50:50:8e:49:7c:73:f2:97:b1:f9:aa:08:7b:da:d9:a5:
         1d:dc:52:21:e0:77:98:52:f2:bb:47:90:04:c1:91:40:0d:0c:
         c4:67:a2:8d:9e:c2:ea:d7:83:a4:77:4f:30:3d:e4:d9:0e:8f:
         d3:b2:3d:0d:36:82:5f:ec:e0:69:1d:f8:de:7f:d1:68:8b:da:
         f5:46:91:c1:e9:e5:0a:f8:68:dd:4a:50:94:a3:f0:dc:4a:75:
         9e:13:4a:34:48:10:4a:8f:65:dc:8c:a4:7d:13:a9:2e:59:41:
         fb:f2:f5:89:0c:d4:1d:88:1f:82:5d:01:a2:c5:7b:a2:4c:b6:
         3d:80:b4:22:e3:6f:1d:47:5f:13:df:8d:4d:4f:70:e4:c9:c0:
         a0:2a:2a:f5:c6:17:45:84:a3:7e:b2:07:7e:0f:76:b0:69:a8:
         5f:42:9f:4c:34:72:29:61:18:78:87:78:7b:40:cf:aa:30:2b:
         dc:23:25:81:cf:da:ff:80:01:9c:0b:84:a1:3c:a9:f7:02:f9:
         0d:7b:5b:5e:11:33:5b:17:ba:2d:81:1c:a2:26:af:12:76:77:
         6f:ee:82:84:0e:3e:33:63:d4:a9:56:cd:24:87:c7:a8:02:8b:
         a8:43:da:50:8d:56:27:a6:c9:32:0f:87:65:a4:32:41:d4:ca:
         11:d5:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:04:34 2025 by rpki-client