Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa
File:                     323830303a3665303a3a2f33322d3438203d3e203532333230.roa (raw, json)
Hash identifier:          oJSdMlf3Ztzs9ZGOj0jzjbCechtnaR/W7lO56wvHe2Q=
Subject key identifier:   6A:BF:47:DB:8F:E8:E3:F8:A1:DD:F8:DC:30:87:8E:A1:FA:61:CF:5F
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       5D4F91909D05DB4816B8D10B80EEE90977FA4E12
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa
Signing time:             Tue 04 Feb 2025 18:39:11 +0000
ROA not before:           Tue 04 Feb 2025 18:34:11 +0000
ROA not after:            Tue 03 Feb 2026 18:39:11 +0000
asID:                     52320
IP address blocks:        2800:6e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4f:91:90:9d:05:db:48:16:b8:d1:0b:80:ee:e9:09:77:fa:4e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Feb  4 18:34:11 2025 GMT
            Not After : Feb  3 18:39:11 2026 GMT
        Subject: CN=6ABF47DB8FE8E3F8A1DDF8DC30878EA1FA61CF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ed:82:1d:cb:34:92:db:d2:fa:45:ca:c0:f2:
                    82:6b:ed:69:52:49:67:e9:bb:bf:a7:03:88:50:d9:
                    70:98:41:ef:f4:4b:35:d7:52:8c:79:20:6c:eb:59:
                    b7:6d:56:62:f7:b8:f8:70:fe:fc:8b:e1:00:ce:5a:
                    09:ac:e0:6d:6e:8c:5a:89:20:ff:a6:49:fc:e9:0e:
                    ce:15:bc:40:54:d5:98:05:0e:1c:80:4a:41:61:4c:
                    a2:a5:b2:b4:bf:75:65:9c:7b:76:ab:34:5e:51:25:
                    06:ca:78:64:57:f7:d3:4e:c5:04:53:4d:47:54:72:
                    4c:a9:ab:68:71:79:27:dc:7e:39:1a:1e:56:ed:39:
                    82:e9:d8:90:10:8f:99:14:62:a4:cd:6d:c0:19:35:
                    f2:58:34:05:d5:fa:13:14:56:51:5f:89:99:10:09:
                    d7:97:08:7c:04:81:a3:67:d3:71:54:6d:bd:ed:68:
                    d2:26:d8:2f:78:1a:f9:da:de:5a:0d:b9:5a:ee:ec:
                    a7:bd:88:14:b0:4f:af:3d:ad:cf:10:9c:6d:06:0e:
                    ab:7a:88:65:f4:56:70:16:99:6c:c9:5c:93:22:2d:
                    84:b4:10:32:af:40:7a:d5:55:76:e7:1d:4b:4a:cc:
                    46:c4:95:97:a8:ba:19:29:72:16:24:cf:23:f7:59:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BF:47:DB:8F:E8:E3:F8:A1:DD:F8:DC:30:87:8E:A1:FA:61:CF:5F
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:75:3f:c7:8c:44:94:e5:f8:89:72:1a:78:98:19:bd:fb:50:
         3e:95:f1:8c:a8:ec:38:3f:44:73:b5:91:cb:7a:15:16:5e:44:
         0c:ce:a8:dc:06:e7:2e:c5:ec:8e:cd:d6:51:41:b6:75:e9:d3:
         36:97:37:cd:d2:c1:70:af:bd:66:1f:6d:7e:33:1e:22:a2:d5:
         18:72:8f:90:b4:d7:c1:92:5b:9f:9f:79:15:31:f3:57:bf:0a:
         e9:05:77:63:42:77:c5:b0:d5:13:e4:d8:ea:f1:78:3e:b7:3f:
         36:62:fc:e7:8b:a8:97:5b:36:01:bf:a5:f3:a7:d8:20:67:1e:
         9a:78:7b:b4:3f:1b:2b:2c:8f:6a:68:5f:30:ae:cb:4d:38:8d:
         de:b3:7d:eb:d3:84:4b:71:48:e0:f4:86:f7:44:ea:9e:c4:c7:
         00:52:0a:7e:7f:e5:d5:e6:14:92:71:83:89:d1:30:7f:8f:36:
         58:fa:f4:89:d2:32:37:a3:a9:1d:12:10:3c:0d:6c:2a:54:22:
         c4:7d:e0:c1:38:d0:0b:ec:ff:e9:46:67:b1:41:da:23:21:c8:
         6c:b8:52:f0:04:23:ff:d9:08:c2:9c:98:c1:af:fb:a3:4a:38:
         4f:4d:e3:f4:81:a2:c2:05:87:01:b5:12:76:6d:1f:c4:c5:e4:
         87:9e:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:44 2025 by rpki-client