Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a3a2f33322d3438203d3e203135313639.roa
File:                     323830303a3366303a3a2f33322d3438203d3e203135313639.roa (raw, json)
Hash identifier:          dBKXmZ4saljquSB4qLOEZEq1blfmMIQStMtbDD/TPw8=
Subject key identifier:   80:71:9B:CC:8A:B9:CB:24:28:7F:89:C9:91:C6:67:B4:30:91:74:A4
Certificate issuer:       /CN=4A21846C50E619589B04A94E63EC535C6F77C010
Certificate serial:       314E04D17F0E7216D50632187759E53F990F3F66
Authority key identifier: 4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a3a2f33322d3438203d3e203135313639.roa
Signing time:             Tue 04 Feb 2025 18:16:35 +0000
ROA not before:           Tue 04 Feb 2025 18:11:35 +0000
ROA not after:            Tue 03 Feb 2026 18:16:35 +0000
asID:                     15169
IP address blocks:        2800:3f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4e:04:d1:7f:0e:72:16:d5:06:32:18:77:59:e5:3f:99:0f:3f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A21846C50E619589B04A94E63EC535C6F77C010
        Validity
            Not Before: Feb  4 18:11:35 2025 GMT
            Not After : Feb  3 18:16:35 2026 GMT
        Subject: CN=80719BCC8AB9CB24287F89C991C667B4309174A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:fd:7e:d7:04:45:46:8b:44:55:4a:0f:20:
                    b7:c3:bb:c0:d9:bf:ac:20:ff:ba:28:1d:99:5c:c4:
                    5d:b8:81:55:c2:c9:24:a4:06:04:39:71:02:8b:4a:
                    96:7a:c3:50:33:2c:cd:e9:0e:2b:1a:e9:f7:60:d7:
                    b6:80:d2:8a:5b:99:1d:24:db:73:dd:6b:8b:7e:6f:
                    89:64:17:46:1c:72:e7:ac:ba:b4:3d:5b:d6:4f:af:
                    d3:84:e4:17:98:7a:0f:fb:39:1a:50:4c:90:eb:f9:
                    56:31:8d:80:55:25:5e:f8:66:6b:fa:03:b9:6e:f7:
                    e5:70:f1:43:8c:85:e5:a3:d1:0c:ef:c8:67:48:62:
                    ef:cf:bc:56:0f:f8:4c:ec:7d:46:95:b5:fb:7d:9e:
                    dc:fd:b7:64:ff:e7:b5:11:23:16:bd:9a:1b:b3:ef:
                    e7:96:d3:8c:63:01:4a:4d:76:5e:ed:b3:5f:5e:c1:
                    f1:9f:0b:0e:b4:88:b5:b3:1c:4c:82:4b:93:0e:a5:
                    96:e0:a1:99:49:44:b9:2a:7d:a3:4a:5f:40:4a:e5:
                    5e:34:16:13:b9:b0:7f:d4:2f:91:61:c2:ee:3a:63:
                    a0:c3:a1:ed:81:fb:85:02:33:41:dd:df:7c:4e:e5:
                    eb:c7:25:ac:91:6e:50:85:3f:41:5f:5c:42:8b:1a:
                    4f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:71:9B:CC:8A:B9:CB:24:28:7F:89:C9:91:C6:67:B4:30:91:74:A4
            X509v3 Authority Key Identifier:
                keyid:4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a3a2f33322d3438203d3e203135313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:80:d1:4e:ca:bc:ee:ff:d2:fd:54:c7:ed:46:54:12:d1:b1:
         6c:53:6b:f3:3b:51:7e:3d:17:e3:87:39:79:65:42:cf:64:9a:
         95:83:0f:2e:be:22:f7:da:5e:0a:a1:74:e4:f6:4f:55:70:07:
         9c:90:5b:44:02:c3:50:2d:68:67:93:3b:83:7b:f2:e7:bd:6d:
         63:27:15:54:2c:43:cf:cf:51:dd:99:35:58:ce:29:85:19:af:
         15:ef:13:ec:e1:5f:37:66:a8:dc:1b:1b:6e:e6:1c:e1:98:a1:
         f4:25:d9:6b:68:dd:45:73:4b:6d:37:68:88:8a:e0:84:f7:c1:
         50:91:49:bf:86:83:90:a6:7e:33:ff:19:04:9a:0d:8c:e2:84:
         45:1d:ad:6e:06:07:a0:c9:3a:53:6f:15:fb:c8:5d:a9:8d:5c:
         1a:a1:cf:d7:80:6d:d8:cc:8a:17:78:42:d5:4d:19:2d:24:75:
         88:4c:77:b6:1c:6c:13:11:58:09:eb:32:8e:b0:2d:82:3a:12:
         b0:b6:c6:45:3e:22:54:29:94:f7:6d:dd:72:3c:74:8c:19:59:
         a1:fb:b6:8e:33:52:05:07:4a:e8:c4:9c:e0:87:54:df:55:18:
         e6:cc:61:43:f7:c6:17:27:b0:56:6c:7b:1e:0a:3a:41:71:77:
         05:51:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:04:34 2025 by rpki-client