Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646138303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a646138303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          cIcbe2MoCJu04awrZz1jiPfu8/1hKw+US/JGXEwVAU0=
Subject key identifier:   5B:BE:C7:AF:BE:CC:62:00:97:C5:E4:76:FB:C0:E0:44:F8:61:42:89
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       3735DE7079B5915BB1506F093A2D12585A0833D6
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646138303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:58 +0000
ROA not before:           Tue 04 Feb 2025 19:58:58 +0000
ROA not after:            Tue 03 Feb 2026 20:03:58 +0000
asID:                     22927
IP address blocks:        2800:a00:da80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:35:de:70:79:b5:91:5b:b1:50:6f:09:3a:2d:12:58:5a:08:33:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:58 2025 GMT
            Not After : Feb  3 20:03:58 2026 GMT
        Subject: CN=5BBEC7AFBECC620097C5E476FBC0E044F8614289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:63:c5:a2:8d:d3:6f:8e:b9:c7:51:7a:f2:
                    e3:64:09:ea:ea:91:ea:35:bd:9d:00:1a:bb:48:58:
                    fc:d2:6b:e8:dd:bb:5c:b6:50:69:33:64:04:70:06:
                    a7:79:11:49:54:ba:85:35:43:b8:f9:79:4b:93:8f:
                    a6:e7:a3:45:01:05:08:f9:f5:49:15:7b:81:9e:24:
                    24:3e:bc:98:bb:9a:8e:b3:7e:4e:be:df:8e:52:1e:
                    8c:ed:7b:20:d2:cc:74:b5:e0:1d:7b:8a:9f:8f:3f:
                    a2:14:df:62:c5:b7:ec:ad:23:07:d3:5a:c3:8b:5b:
                    2a:23:2d:1f:d4:23:32:12:0e:6b:7b:9f:98:a7:a3:
                    1f:06:26:b7:f4:ed:31:ff:68:17:e3:b3:d1:40:21:
                    73:27:e7:af:10:be:12:01:86:e4:7b:df:5f:08:cf:
                    06:b7:19:39:19:db:a3:c8:0d:6b:be:c7:81:e9:69:
                    f0:66:7d:f0:df:42:55:b0:3f:67:7f:85:15:9c:fc:
                    3f:b0:44:8d:a3:36:51:6c:8e:36:55:d7:6b:82:4a:
                    05:35:7e:ef:03:39:20:3f:30:f1:e2:ea:c8:10:a5:
                    42:bc:e6:7d:23:11:b9:69:39:d6:bb:5f:b5:81:4e:
                    ed:43:d3:db:f9:db:96:11:9d:fb:bf:6b:ff:0a:08:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:C7:AF:BE:CC:62:00:97:C5:E4:76:FB:C0:E0:44:F8:61:42:89
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646138303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:da80::/41

    Signature Algorithm: sha256WithRSAEncryption
         ae:32:02:6f:3d:14:c2:67:33:d7:83:e1:ee:17:3c:70:9b:2a:
         2d:ca:30:15:28:ba:f9:58:cb:5a:b0:17:a0:ea:41:4b:8f:34:
         46:79:a3:86:25:c9:4b:e0:87:be:8e:f1:45:45:94:d3:a1:27:
         cf:ff:ba:a8:e2:01:94:3e:fa:b0:69:5e:5a:04:47:6a:42:32:
         47:ca:68:5a:5f:ed:58:cf:9a:09:03:0b:85:a2:ae:be:f6:df:
         91:cd:5f:f6:b1:42:02:c6:67:9c:4e:36:11:37:8e:21:c1:aa:
         fb:7b:ad:91:b3:a5:79:25:35:4f:fa:3c:d9:3a:80:f9:91:59:
         5a:51:91:0b:62:30:c7:0c:d9:ad:1e:fc:05:e9:42:04:7e:ba:
         ca:73:5c:09:f7:d9:8f:ad:8b:2a:31:51:b9:bf:61:21:5e:52:
         9b:11:3b:52:d0:6a:31:94:c4:42:5c:06:78:f3:7f:78:11:81:
         5b:45:b9:86:c2:2b:e9:6b:4b:87:a2:2d:b0:23:58:67:75:a1:
         26:75:f4:f8:1c:6a:8c:ee:0d:13:66:f6:46:c2:e9:05:21:77:
         e6:2a:9b:8e:ea:ce:ce:2d:b0:dd:1d:98:10:6b:04:9b:6c:c0:
         5d:5d:71:35:72:e8:9f:4b:6e:55:f5:1c:d7:43:5a:d2:68:37:
         3c:4d:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:47 2025 by rpki-client