Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961303a3a2f32392d3438203d3e203134353232.roa
File:                     323830303a3961303a3a2f32392d3438203d3e203134353232.roa (raw, json)
Hash identifier:          APevvhb9pPJxmVoPkdIhqTqEDyfMtZnggxlTLicb/WE=
Subject key identifier:   8C:E7:25:60:F6:E2:B0:EB:3B:DC:7A:BB:33:84:9A:17:29:6F:C1:BA
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       58C3CE50189476276C62D0EA9E69A42C41220102
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961303a3a2f32392d3438203d3e203134353232.roa
Signing time:             Tue 04 Feb 2025 20:08:42 +0000
ROA not before:           Tue 04 Feb 2025 20:03:42 +0000
ROA not after:            Tue 03 Feb 2026 20:08:42 +0000
asID:                     14522
IP address blocks:        2800:9a0::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c3:ce:50:18:94:76:27:6c:62:d0:ea:9e:69:a4:2c:41:22:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Feb  4 20:03:42 2025 GMT
            Not After : Feb  3 20:08:42 2026 GMT
        Subject: CN=8CE72560F6E2B0EB3BDC7ABB33849A17296FC1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:dc:42:4e:76:a0:04:8b:7b:fa:6a:18:c9:
                    50:23:f5:ff:3c:0a:f1:1d:20:1e:4e:46:b5:ee:b0:
                    3d:fa:84:cc:bb:29:d4:07:d3:1b:9d:d8:ab:84:c7:
                    8c:c4:bf:52:3c:db:d4:0e:fe:c3:f4:b1:a1:70:7f:
                    03:3c:81:43:ae:8f:12:9e:1b:22:c9:9c:ee:3f:1d:
                    4a:5b:30:b4:b4:2b:f9:08:e9:e5:11:3b:d5:26:34:
                    3e:0c:63:00:ff:4f:ce:9b:89:e4:dd:3a:31:bc:64:
                    65:b3:b6:27:40:41:bb:1b:a7:f8:17:ed:cb:3c:41:
                    70:6d:ce:a8:64:21:9d:7d:44:f7:f6:e8:22:ec:42:
                    c7:2f:e6:31:83:d2:fc:99:89:c4:53:5e:2d:84:c1:
                    57:e3:a9:64:72:93:03:15:96:f7:b1:b9:58:95:9e:
                    7e:84:68:c9:b1:ae:4f:cf:e7:c0:e3:73:53:8c:64:
                    04:59:16:8a:c4:ef:c0:58:a4:e4:35:b4:12:c6:dd:
                    61:09:8b:3f:57:7e:ce:74:81:59:25:43:72:6f:6f:
                    b8:a4:9f:cd:a1:ae:79:ad:a9:25:ad:fc:73:be:8e:
                    04:36:03:47:fd:ac:9d:cb:c0:5a:b2:3e:a4:8f:6c:
                    34:97:12:13:fe:28:2a:64:9b:2b:e7:72:17:97:18:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:25:60:F6:E2:B0:EB:3B:DC:7A:BB:33:84:9A:17:29:6F:C1:BA
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961303a3a2f32392d3438203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a0::/29

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:9a:fb:f1:6c:77:3b:e4:d3:ee:7e:75:a8:3e:fe:60:1f:
         1d:97:a9:52:a0:d3:5e:74:48:6b:59:0d:ea:57:73:e9:d5:f4:
         ab:9e:e4:d9:b7:48:c3:40:ad:13:89:b7:9c:f2:9d:91:92:4b:
         7a:b7:1f:a3:91:f6:ff:7d:60:fb:a2:03:0c:95:2b:64:75:1b:
         ed:ad:b5:ff:9b:28:34:7d:44:28:e8:22:ba:dc:e1:c5:1d:03:
         99:67:3a:94:c6:e4:4d:23:56:8f:bc:0d:99:06:94:7b:b7:0d:
         a5:13:11:34:80:28:ff:78:f1:c6:88:c3:43:40:12:f6:ce:d9:
         c4:71:52:4f:9b:d5:88:01:01:56:14:1a:54:0d:83:f4:fa:7d:
         4f:f4:06:89:0a:b0:1d:59:7e:c5:35:8f:d4:5e:0b:92:6e:88:
         c9:08:8c:b9:19:b6:3e:24:11:28:b6:71:99:d6:63:4d:bb:4c:
         54:73:80:72:17:31:ac:fc:eb:74:30:e6:1f:f3:15:39:0e:62:
         ad:4a:1d:80:87:f6:b4:d4:32:c8:8e:75:92:9c:3e:a6:99:29:
         91:e6:b5:6c:17:cb:46:3f:31:24:2a:3b:d0:f9:ba:93:1a:2c:
         60:3e:44:db:2d:d5:9e:19:a9:9d:4e:70:d7:46:a6:ab:b6:0b:
         4c:07:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:20 2025 by rpki-client