Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/323830303a3264303a3a2f33322d3332203d3e2033363033.roa
File:                     323830303a3264303a3a2f33322d3332203d3e2033363033.roa (raw, json)
Hash identifier:          yglrNlmp7rwV72UfNu/lcwWOt7Dalr+NNAjG6Cmheac=
Subject key identifier:   CB:08:74:99:81:1C:3C:5D:59:A6:D8:F6:7C:D3:5E:AD:FE:87:EB:27
Certificate issuer:       /CN=B0292ED2ED57841F24F3EF9EECC9946356474634
Certificate serial:       52CAE11AD49D30B4467F1C9501D28B5A7333E091
Authority key identifier: B0:29:2E:D2:ED:57:84:1F:24:F3:EF:9E:EC:C9:94:63:56:47:46:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0292ED2ED57841F24F3EF9EECC9946356474634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/323830303a3264303a3a2f33322d3332203d3e2033363033.roa
Signing time:             Tue 04 Feb 2025 19:57:11 +0000
ROA not before:           Tue 04 Feb 2025 19:52:11 +0000
ROA not after:            Tue 03 Feb 2026 19:57:11 +0000
asID:                     3603
IP address blocks:        2800:2d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/B0292ED2ED57841F24F3EF9EECC9946356474634.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/B0292ED2ED57841F24F3EF9EECC9946356474634.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0292ED2ED57841F24F3EF9EECC9946356474634.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:e1:1a:d4:9d:30:b4:46:7f:1c:95:01:d2:8b:5a:73:33:e0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0292ED2ED57841F24F3EF9EECC9946356474634
        Validity
            Not Before: Feb  4 19:52:11 2025 GMT
            Not After : Feb  3 19:57:11 2026 GMT
        Subject: CN=CB087499811C3C5D59A6D8F67CD35EADFE87EB27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:5c:ff:2d:09:e7:9b:54:0e:16:68:b3:06:
                    51:56:87:42:d4:0f:77:50:00:62:cb:d8:54:c5:29:
                    63:99:bd:53:8e:c0:95:b4:4e:c3:aa:c9:7f:9e:a0:
                    e8:82:aa:78:f2:4c:11:e7:ac:3d:54:39:d5:f3:50:
                    6f:e2:c9:10:19:c4:69:a0:65:da:02:00:7a:f8:ca:
                    7a:2b:31:32:d1:70:3e:93:be:c1:8d:87:00:20:17:
                    ad:12:36:42:71:00:96:01:48:81:d3:e2:d6:17:6b:
                    5b:cb:3c:7d:a1:08:41:5c:b0:09:df:17:31:4c:34:
                    41:9d:c0:2a:65:7e:5b:52:c3:5c:39:3a:ff:0d:f4:
                    64:80:5a:51:ab:f4:e0:98:6c:22:24:ae:83:d9:b9:
                    92:a8:4e:a2:9e:03:73:fc:c4:c0:c4:62:e6:45:3c:
                    6c:8c:e2:27:4b:7c:00:a9:5d:76:c8:fa:b3:79:c2:
                    c7:a0:b3:76:f6:0e:51:54:ea:e8:1a:d1:a2:9c:e1:
                    da:b4:a5:bf:6b:62:9c:bd:e2:e2:85:54:0d:43:fe:
                    31:18:ca:d2:0e:48:f5:bc:cb:8b:6b:f8:0a:45:b9:
                    90:09:4c:ce:fd:9c:7e:b3:3a:d2:22:c6:1b:c4:e7:
                    bc:b2:45:6d:67:21:9a:d5:fa:81:7a:7e:72:e6:fc:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:74:99:81:1C:3C:5D:59:A6:D8:F6:7C:D3:5E:AD:FE:87:EB:27
            X509v3 Authority Key Identifier:
                keyid:B0:29:2E:D2:ED:57:84:1F:24:F3:EF:9E:EC:C9:94:63:56:47:46:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/B0292ED2ED57841F24F3EF9EECC9946356474634.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0292ED2ED57841F24F3EF9EECC9946356474634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/323830303a3264303a3a2f33322d3332203d3e2033363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:84:11:0c:6b:8b:4a:fa:6c:84:53:15:9c:99:c1:54:5c:
         62:41:35:25:8e:54:82:24:7c:25:d9:b7:1c:8f:8d:07:76:a3:
         90:45:d6:5a:5b:a0:62:19:d0:4e:82:ae:c0:22:cb:d5:58:ae:
         ec:25:64:be:3c:00:06:95:e0:35:1f:6a:c3:75:5b:61:3a:ea:
         b6:0c:b4:72:0c:2a:d1:1d:07:c0:60:92:a3:d8:99:d9:2f:b2:
         48:b7:35:a1:92:c0:18:a7:e9:21:3d:7f:46:38:a2:1d:dc:9e:
         e6:ee:9c:5e:8e:f1:94:de:ac:8a:9d:7f:ed:cc:2f:8e:f4:fa:
         a8:57:92:56:1e:4c:00:a7:56:9a:fe:75:47:b8:50:cb:7d:a7:
         b5:47:b6:41:1c:92:3c:ee:5f:d5:7a:32:32:2e:99:e6:6b:11:
         e1:21:cc:dc:c8:9c:b9:5d:46:fe:bd:f8:f5:fa:41:b1:21:b9:
         23:70:a2:15:8b:9e:c4:6d:5d:56:d7:c1:d1:ef:91:cc:39:c7:
         41:03:db:2b:c6:05:1c:40:93:4f:6b:d7:41:4b:a8:f9:6b:f2:
         91:52:73:29:8b:83:c7:a6:ad:e7:b6:aa:e1:cd:4a:2c:40:5f:
         69:e1:6a:80:cb:e5:70:2f:54:32:31:28:3e:8c:5f:82:e7:b2:
         14:9f:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:52:13 2025 by rpki-client