Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa
File:                     323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa (raw, json)
Hash identifier:          LQ3ZVfY4n9gk5vdeMyBsweX/I72QEKgk3yWYvQ9mDOo=
Subject key identifier:   56:5F:69:D9:89:E5:EF:39:85:66:4D:4D:EF:32:50:F1:96:1B:A9:EF
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       24FFF5754F4AEA2306A423ACF686F6B948FE9F98
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa
Signing time:             Fri 14 Mar 2025 14:11:50 +0000
ROA not before:           Fri 14 Mar 2025 14:06:50 +0000
ROA not after:            Fri 13 Mar 2026 14:11:50 +0000
asID:                     14232
IP address blocks:        2800:2b0:4000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ff:f5:75:4f:4a:ea:23:06:a4:23:ac:f6:86:f6:b9:48:fe:9f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Mar 14 14:06:50 2025 GMT
            Not After : Mar 13 14:11:50 2026 GMT
        Subject: CN=565F69D989E5EF3985664D4DEF3250F1961BA9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:f9:76:ae:35:a9:09:6e:95:19:2e:4f:e0:
                    16:e7:23:26:f7:80:de:d8:bf:6c:46:de:79:93:45:
                    b3:05:b9:68:08:06:da:82:6a:69:84:cf:52:d2:e9:
                    cd:46:7c:60:42:0a:4c:27:d6:64:52:81:0a:d8:be:
                    34:62:be:bc:a4:fc:b4:16:7c:98:9a:43:1c:c0:9b:
                    1c:55:a8:96:b0:ae:82:ed:0d:87:fc:ac:08:8a:6b:
                    1c:47:b5:91:c1:4a:36:d7:a1:7b:75:16:cc:21:e7:
                    3c:90:c6:4a:e2:bc:d7:35:de:fd:1d:2d:38:d1:c3:
                    52:a8:cc:c3:4c:be:9d:a8:24:9c:30:c4:21:a7:24:
                    21:6b:6c:05:00:b8:60:92:5d:ef:f6:f5:e0:c9:f4:
                    09:80:3d:27:f1:23:9b:13:ba:24:a0:cf:fc:ec:1c:
                    22:19:25:6d:03:c6:65:fc:dd:06:c4:ad:cd:9d:6e:
                    97:a6:89:05:2c:f2:e6:f2:4f:be:8e:6a:9b:ef:06:
                    0c:17:49:f4:36:67:d6:e4:c6:91:d5:69:6c:d1:c9:
                    16:c1:c5:3a:7a:1c:37:03:e4:6e:6a:15:60:91:92:
                    85:8c:b7:64:65:d7:ce:a5:63:2f:19:e6:e9:00:06:
                    4a:63:4a:92:a8:05:ca:71:6f:2f:29:ee:a5:78:db:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:69:D9:89:E5:EF:39:85:66:4D:4D:EF:32:50:F1:96:1B:A9:EF
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         65:0e:91:bc:7e:a6:8d:9d:93:cd:c4:f2:73:ad:13:a1:99:b7:
         41:f7:99:67:26:84:c8:f4:45:0d:99:b7:66:42:3d:e6:4c:e5:
         29:f0:49:15:87:21:74:84:b3:8a:21:14:37:de:98:52:fa:aa:
         44:33:88:7f:ba:27:57:88:b1:8f:7d:36:49:87:ba:56:7e:c8:
         02:56:53:34:1b:08:50:c9:2f:ee:e2:ec:d7:c3:d4:8b:83:8a:
         4b:5b:5b:9b:34:89:cf:a7:36:1f:35:13:0d:07:2d:9a:73:ea:
         6a:71:b4:5a:e1:d1:56:09:a4:4b:36:42:d4:87:64:41:1f:15:
         4c:c7:80:d8:d6:3e:a9:dc:d0:4b:54:f8:9c:1d:d9:73:4a:e3:
         0e:f5:e5:c9:19:a6:6a:ea:15:78:0b:9f:c2:0e:06:fe:5f:32:
         fc:18:87:94:d3:4c:bf:64:91:e3:f1:d3:fb:7c:c8:19:b6:04:
         25:b3:9e:db:f6:a2:6d:ee:f3:10:ac:8f:bc:6e:34:b7:b3:86:
         3e:a2:f5:9e:a5:2c:12:43:be:7f:aa:af:b6:b9:03:b5:89:a9:
         fa:99:15:66:8d:07:b5:67:55:04:93:67:68:0d:91:79:6e:89:
         83:c5:a0:a7:bf:74:f6:25:c3:37:23:40:fc:3d:57:b7:39:74:
         63:dc:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:28:54 2025 by rpki-client