Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/323830303a3166303a3a2f33322d3332203d3e20333938373730.roa
File:                     323830303a3166303a3a2f33322d3332203d3e20333938373730.roa (raw, json)
Hash identifier:          huEqjzFhS3c6Uzfz8ju3dJ10ct92/+VFUqmbno5lHWQ=
Subject key identifier:   8E:AD:FA:59:04:1E:9A:18:4E:A5:75:3B:4E:6A:8A:84:AE:FC:21:2F
Certificate issuer:       /CN=EF36402B07BAFB4905A62D80B3635A1FE03066F2
Certificate serial:       48187609F1D0A0DA04AF25D8941FC882B588E0B4
Authority key identifier: EF:36:40:2B:07:BA:FB:49:05:A6:2D:80:B3:63:5A:1F:E0:30:66:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/323830303a3166303a3a2f33322d3332203d3e20333938373730.roa
Signing time:             Mon 19 May 2025 11:35:00 +0000
ROA not before:           Mon 19 May 2025 11:30:00 +0000
ROA not after:            Mon 18 May 2026 11:35:00 +0000
asID:                     398770
IP address blocks:        2800:1f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:76:09:f1:d0:a0:da:04:af:25:d8:94:1f:c8:82:b5:88:e0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF36402B07BAFB4905A62D80B3635A1FE03066F2
        Validity
            Not Before: May 19 11:30:00 2025 GMT
            Not After : May 18 11:35:00 2026 GMT
        Subject: CN=8EADFA59041E9A184EA5753B4E6A8A84AEFC212F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:d2:6c:01:91:c7:23:cd:ac:58:e6:5b:e4:
                    fb:91:bf:32:a5:54:90:97:13:59:b6:3e:d0:4b:f5:
                    ff:f7:14:e7:99:ee:69:ea:1c:a1:e4:06:d9:50:f5:
                    53:24:ef:36:03:1c:e5:68:38:b1:f9:38:87:c1:23:
                    dd:b0:15:53:aa:70:af:30:d4:2e:ff:6c:79:d4:2e:
                    01:93:a3:38:1b:da:8e:a4:35:7c:7f:b6:c1:ee:eb:
                    86:eb:f0:df:0b:c1:82:f2:9a:79:a7:ed:0d:b6:63:
                    81:12:9e:66:1d:12:86:0b:86:b7:84:21:2f:24:ee:
                    38:15:76:bc:f9:97:6c:29:29:22:02:db:0b:43:51:
                    a2:40:1c:95:06:f9:83:db:12:49:21:bc:b5:fe:ca:
                    e5:2d:94:94:a7:1d:13:98:43:52:7f:e0:32:65:e8:
                    dd:8c:3a:60:04:90:d9:17:8f:85:7e:4d:7d:a4:70:
                    6e:47:3d:84:41:df:3f:ed:2a:9b:3c:0c:7d:8a:1b:
                    b1:88:66:f1:08:af:bc:09:97:ac:bd:c8:a1:96:9b:
                    cd:4e:69:43:60:dc:64:d9:67:70:40:3b:f8:ea:46:
                    bc:e5:43:f6:77:b3:f8:e8:1d:d1:e5:44:a8:6e:5f:
                    31:00:64:20:5f:51:84:35:81:d5:9b:6d:bb:1b:77:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:FA:59:04:1E:9A:18:4E:A5:75:3B:4E:6A:8A:84:AE:FC:21:2F
            X509v3 Authority Key Identifier:
                keyid:EF:36:40:2B:07:BA:FB:49:05:A6:2D:80:B3:63:5A:1F:E0:30:66:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/323830303a3166303a3a2f33322d3332203d3e20333938373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:5e:a8:e1:cf:b7:ad:36:20:c7:10:f0:ff:52:30:14:07:
         23:62:b6:30:7c:42:f1:5f:97:64:1a:9e:82:71:be:ab:cf:17:
         59:7c:4c:6b:6e:1a:c1:42:09:4a:13:49:ea:f5:ae:57:ae:c8:
         89:7e:e4:8c:02:9a:5b:19:7e:38:40:2c:c4:cd:84:39:b9:1e:
         4e:fa:78:1a:d2:dc:3a:08:21:ae:e7:fb:11:97:ff:c0:c3:d5:
         71:fa:93:20:ad:86:f4:6c:60:dc:c8:87:93:43:43:03:03:9e:
         dd:29:36:4a:1b:b4:8c:ec:c9:9a:99:87:b5:76:b4:19:8b:bc:
         19:5c:c4:a4:4b:7f:28:7c:dd:6a:db:31:30:92:92:60:68:9a:
         0b:a9:5c:69:38:c4:7b:65:69:41:32:82:b3:f4:16:8e:25:5b:
         f6:3c:84:00:49:7b:36:58:24:85:d0:56:b9:f3:f9:b7:63:4b:
         17:a7:55:1e:a1:62:4b:3b:13:77:63:f8:23:1b:65:7c:70:06:
         b7:0c:66:6b:93:21:5a:a5:29:32:c6:db:0f:db:38:f0:dd:4b:
         24:52:a9:c7:3e:f2:42:06:bd:a0:35:11:2c:4a:68:0b:81:69:
         49:66:0b:04:65:21:c3:4b:09:32:54:28:5e:a2:b5:d4:ab:6c:
         1f:04:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:03:28 2025 by rpki-client