Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa
File:                     323830303a3863303a3a2f33322d3332203d3e203138383430.roa (raw, json)
Hash identifier:          +ZZUEk1wGoKD5v4TDf++5VjMeR9QZx+aQ13Srb25Q+w=
Subject key identifier:   75:D3:9F:14:E7:58:9A:8C:2E:78:0E:95:45:9D:55:DD:EC:87:36:C3
Certificate issuer:       /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Certificate serial:       76C39BBC2998BEF3F8E1698135DE03CAD34F58B8
Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa
Signing time:             Tue 04 Feb 2025 18:31:47 +0000
ROA not before:           Tue 04 Feb 2025 18:26:47 +0000
ROA not after:            Tue 03 Feb 2026 18:31:47 +0000
asID:                     18840
IP address blocks:        2800:8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c3:9b:bc:29:98:be:f3:f8:e1:69:81:35:de:03:ca:d3:4f:58:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
        Validity
            Not Before: Feb  4 18:26:47 2025 GMT
            Not After : Feb  3 18:31:47 2026 GMT
        Subject: CN=75D39F14E7589A8C2E780E95459D55DDEC8736C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:d0:eb:11:f9:63:bb:44:ef:06:be:9c:09:
                    26:1a:46:7f:ef:81:f9:21:52:e9:a3:c1:c2:93:8b:
                    ed:9c:ad:84:41:f0:eb:30:5e:41:2c:11:f3:79:7f:
                    56:38:56:69:85:fc:61:db:d9:de:79:aa:d6:8a:74:
                    c2:2b:88:69:70:8d:78:d5:8b:09:68:e0:52:e4:9d:
                    d9:12:b0:3e:3a:15:5e:af:c6:41:c5:00:d2:77:ae:
                    79:a6:0a:b9:9f:13:94:fc:75:a3:e7:44:05:9d:73:
                    db:b0:da:84:99:be:aa:62:89:cd:2d:05:ec:ef:d3:
                    0e:42:fd:1b:2c:f2:b9:f2:bf:5b:35:ef:6e:68:6f:
                    d4:45:53:57:d3:b7:bb:19:33:44:b7:47:ce:eb:28:
                    b5:de:10:cb:fb:8d:fb:71:db:a6:b0:89:e4:68:e8:
                    04:4d:78:24:67:aa:67:ab:41:de:ff:51:ab:7d:60:
                    1b:0e:d3:cf:29:4e:79:77:79:45:bb:60:b7:20:68:
                    9d:98:8a:b1:c0:61:4a:5d:f7:bc:6a:f4:5b:ea:b7:
                    f9:a1:63:66:56:bf:2e:05:da:4e:75:d2:9f:72:a8:
                    9f:fe:04:0a:77:d4:c9:9a:bd:66:54:53:42:b7:18:
                    d6:97:4b:27:49:df:04:c7:bb:33:4b:be:42:54:0e:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D3:9F:14:E7:58:9A:8C:2E:78:0E:95:45:9D:55:DD:EC:87:36:C3
            X509v3 Authority Key Identifier:
                keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:f3:bb:70:fe:3c:77:f9:a0:f4:b1:83:ed:0f:15:37:3a:a2:
         c1:6a:77:dd:a9:45:4e:7d:41:e7:2b:e1:b1:1b:a2:06:3e:69:
         09:d2:b0:dc:22:08:09:37:c9:aa:db:27:fa:4b:ff:a5:03:84:
         8b:83:f0:05:8e:1f:77:f0:f4:9a:ff:17:2a:ad:0f:b5:0c:d2:
         21:b7:87:ac:cb:b7:14:31:29:2f:d4:3b:0c:68:b7:8d:56:5d:
         74:29:63:54:0d:dc:3b:30:c6:26:3a:d8:ea:44:f7:25:81:35:
         0a:1a:ff:df:46:85:6c:f2:9d:06:b0:81:e3:79:f0:cc:10:ca:
         08:2a:d5:54:e3:74:d7:90:d2:fe:c9:dd:54:5c:92:29:e2:34:
         8a:de:26:19:6b:e0:55:18:bf:92:e9:e4:68:f2:7e:bf:aa:dd:
         02:24:ab:a3:82:dd:61:d1:fe:06:2b:a3:48:c1:6e:d7:70:25:
         c5:03:7f:5f:36:c4:b8:3d:a5:7f:45:e8:ff:9b:e5:49:9f:cd:
         11:54:54:b6:32:cc:69:96:7c:84:17:0a:74:5c:99:03:d6:de:
         e7:d9:07:4a:4b:1b:29:9b:65:41:c5:56:d6:1b:5f:6d:39:52:
         52:72:e2:dc:89:05:9c:e0:93:bb:53:ad:df:81:7d:23:30:9a:
         20:41:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:39 2025 by rpki-client