Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa
File:                     323030313a313332303a3a2f33322d3438203d3e203237373333.roa (raw, json)
Hash identifier:          JUOxFDO809fHz2UDcdbSGk60DXAGM1owWub4x5h/wmk=
Subject key identifier:   B6:B9:19:73:E8:F8:47:21:EA:82:0E:72:6D:3E:2D:80:F5:F1:A0:D9
Certificate issuer:       /CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Certificate serial:       2531325228AE4979A0230C3B145A30200C30F1F2
Authority key identifier: C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa
Signing time:             Tue 04 Feb 2025 18:09:54 +0000
ROA not before:           Tue 04 Feb 2025 18:04:54 +0000
ROA not after:            Tue 03 Feb 2026 18:09:54 +0000
asID:                     27733
IP address blocks:        2001:1320::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 11:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:31:32:52:28:ae:49:79:a0:23:0c:3b:14:5a:30:20:0c:30:f1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
        Validity
            Not Before: Feb  4 18:04:54 2025 GMT
            Not After : Feb  3 18:09:54 2026 GMT
        Subject: CN=B6B91973E8F84721EA820E726D3E2D80F5F1A0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:49:c7:e5:8d:fc:ec:c1:85:a8:9d:7d:96:
                    3c:f4:cf:33:02:19:2a:b7:9b:e4:8f:db:dc:fb:a3:
                    fd:e4:71:2a:a3:96:c3:ab:5a:67:78:04:1a:cb:f7:
                    c8:87:da:f5:88:f2:67:63:2d:72:da:66:31:b4:6d:
                    ae:56:53:51:a8:40:2b:bc:bc:db:07:d2:9e:68:07:
                    7e:bd:32:40:f4:9f:45:52:da:70:c2:c0:c3:21:bc:
                    49:2b:99:36:b5:8d:a3:18:23:20:86:02:a1:a2:a1:
                    e3:4e:99:14:26:24:5a:15:8a:d7:87:1d:d5:dc:5f:
                    b4:9e:c4:45:62:7f:bf:cc:30:e4:3f:07:6e:c5:bd:
                    43:f0:a0:37:70:fd:d2:26:e3:d2:df:86:cd:9f:5b:
                    f4:f5:48:3f:4d:52:5c:4e:36:ca:30:3d:29:e4:42:
                    63:32:c8:e9:59:71:17:61:a0:ad:bb:93:3a:b7:ac:
                    3c:80:50:92:25:6b:87:55:09:3f:3c:51:f0:d6:c6:
                    45:35:17:e5:f0:3d:f7:c8:86:81:2f:69:eb:35:61:
                    95:23:d9:6d:c1:d2:3a:dc:e4:62:20:7b:7a:1f:f3:
                    fb:77:65:0f:2a:3e:3e:30:c5:71:7f:c2:47:18:e8:
                    8f:4e:ab:da:49:55:1e:f2:3d:9b:9a:d6:2c:6d:64:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:19:73:E8:F8:47:21:EA:82:0E:72:6D:3E:2D:80:F5:F1:A0:D9
            X509v3 Authority Key Identifier:
                keyid:C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1320::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:f3:85:6a:fe:79:16:45:ed:78:38:8d:2c:71:fb:d0:32:03:
         39:aa:fa:8c:6f:d0:72:dc:be:ab:b4:46:d3:fe:f6:21:32:41:
         e6:59:e3:d0:f4:17:e5:de:37:c5:61:6c:38:eb:ab:92:8c:bc:
         a1:10:4f:3f:f4:6f:d4:e4:fb:03:9b:3b:26:6f:df:71:a8:a4:
         4d:a5:9f:42:6c:68:42:b4:2a:88:5a:4b:46:5c:c5:46:84:cf:
         68:a7:42:36:32:e4:f1:d2:ab:9c:f9:2d:64:a0:48:73:74:bd:
         d6:7d:3d:df:52:54:7f:aa:3d:d5:9a:f3:df:23:43:5d:32:bb:
         2c:33:87:b0:e1:74:b2:14:ec:ed:ac:5a:d2:97:73:0e:48:95:
         03:db:20:3a:e5:ce:50:de:a9:7e:c4:d0:93:50:70:b6:53:da:
         6a:60:5b:e5:2a:16:f0:79:42:3b:fc:3b:a9:6d:f6:eb:3e:dc:
         fb:4e:ea:5f:dc:e5:7b:81:27:30:f4:2d:1f:65:08:41:d9:43:
         57:fe:d8:fd:f1:d2:fd:d5:48:2a:77:56:75:c8:f0:96:f3:71:
         bd:12:7d:56:0f:b5:33:8d:22:8b:be:10:b1:11:82:eb:f9:65:
         2f:d3:c5:a9:d6:d7:70:6d:f8:20:81:39:12:9d:bc:49:0d:e7:
         91:97:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:53 2025 by rpki-client