Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa
File:                     323830303a3565303a3a2f33322d3438203d3e20333934363834.roa (raw, json)
Hash identifier:          ZckC7NUJINiDsBv8JWTY3icmFW+svjCV9ga7pSUWf1M=
Subject key identifier:   7F:BA:CE:F3:0F:77:FD:2C:6C:20:67:F3:F3:3C:F1:EB:37:D3:0C:22
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       6294501250B5F137A051E8B875BCC2927DDCABC8
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa
Signing time:             Tue 04 Feb 2025 18:38:18 +0000
ROA not before:           Tue 04 Feb 2025 18:33:18 +0000
ROA not after:            Tue 03 Feb 2026 18:38:18 +0000
asID:                     394684
IP address blocks:        2800:5e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 13:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:94:50:12:50:b5:f1:37:a0:51:e8:b8:75:bc:c2:92:7d:dc:ab:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Feb  4 18:33:18 2025 GMT
            Not After : Feb  3 18:38:18 2026 GMT
        Subject: CN=7FBACEF30F77FD2C6C2067F3F33CF1EB37D30C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:a9:12:2c:a5:45:83:ee:f7:c5:11:14:94:
                    49:f2:6c:72:99:19:49:b3:42:32:13:ee:9b:2a:d7:
                    48:a9:37:31:ad:35:e8:b3:7c:4b:cf:6e:f5:71:ec:
                    88:65:ec:64:c4:09:a4:b5:b9:c1:44:15:13:3d:b7:
                    97:83:8d:9c:ac:9a:5e:69:7b:15:8b:61:44:16:10:
                    3d:07:3c:ec:21:7f:8f:ee:ff:f3:a2:9b:62:70:4f:
                    01:b8:97:dd:2e:46:0a:f9:b2:e2:e3:b3:83:67:1a:
                    d0:f4:bc:ec:5a:42:7d:b6:7f:fa:53:5a:56:60:cc:
                    05:e8:8c:30:a9:c4:bd:6a:c9:9f:76:e4:58:93:f8:
                    5d:fc:4e:88:33:28:15:ec:61:7c:e1:57:c8:21:e2:
                    e5:f2:81:86:9a:77:ba:ab:a3:64:59:15:71:cf:91:
                    56:fc:46:16:55:cd:05:e9:9c:59:a9:0c:e3:98:8b:
                    5f:c0:dd:88:14:0b:04:90:79:69:d6:05:a0:b3:ba:
                    97:e8:99:e4:ba:f1:e9:e0:01:95:41:b8:32:a9:0f:
                    89:fa:67:5a:60:4d:a8:69:a6:95:91:5d:cf:72:2f:
                    93:97:a6:01:be:ba:6f:ff:ab:dd:f0:20:26:a6:3f:
                    3c:17:38:ce:a1:28:a0:9e:8e:0f:2f:b0:14:f1:c7:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BA:CE:F3:0F:77:FD:2C:6C:20:67:F3:F3:3C:F1:EB:37:D3:0C:22
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:5a:91:ca:0d:e9:6b:e9:41:db:a3:e5:6a:33:37:c5:1c:
         a2:47:61:3b:28:ef:f3:10:5d:64:6e:87:e9:98:71:51:10:83:
         16:59:9a:6d:d6:2e:33:50:4c:c6:da:93:35:83:1c:a2:5e:89:
         d0:3e:62:80:09:a0:df:7c:2a:65:9f:b7:96:e1:ab:09:af:8b:
         43:c2:4f:ec:02:2d:36:8c:b4:c8:19:b2:44:54:83:0c:4b:f9:
         26:a3:3d:14:b2:46:fc:1a:e8:e1:5d:08:d8:cc:b6:f1:8a:bc:
         cc:af:a4:31:52:4d:4d:a2:1e:8a:b5:a9:14:74:e1:4b:7f:d1:
         b7:b0:77:2b:c2:11:c4:ac:18:fc:f3:00:ef:51:d6:19:94:67:
         ea:10:a8:e2:d3:31:be:cc:2e:36:a1:db:f9:65:43:8d:3f:cd:
         39:e5:d7:f7:ab:63:b3:9e:24:fe:46:ef:59:81:bc:9e:43:3b:
         ba:23:41:65:41:16:c0:14:83:55:3a:5e:dd:83:f7:df:7e:ed:
         ea:ec:12:44:16:a5:d7:d0:1c:f0:b9:12:e6:59:36:61:32:3e:
         6c:9e:a9:6c:a9:cf:38:1e:61:5f:61:d1:5d:41:1b:55:d4:37:
         90:6e:51:2d:35:31:ac:63:22:a0:17:bf:d1:e3:75:50:ef:5b:
         14:c4:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:28 2025 by rpki-client