Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/323830313a31383a373830303a3a2f35322d3532203d3e203237393431.roa
File:                     323830313a31383a373830303a3a2f35322d3532203d3e203237393431.roa (raw, json)
Hash identifier:          eM7UYYAm1hvW75BDDelfArJt1NkRyTj9y7pC/Hq5kUU=
Subject key identifier:   02:B8:77:F2:69:3A:1B:68:C8:8A:9F:25:CC:FB:DD:C8:3A:62:85:84
Certificate issuer:       /CN=5A51CDFCFC7F119BCD857EB25AB4AB52177BF284
Certificate serial:       7D94457A54761737113C32EADBB16352F6717712
Authority key identifier: 5A:51:CD:FC:FC:7F:11:9B:CD:85:7E:B2:5A:B4:AB:52:17:7B:F2:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/323830313a31383a373830303a3a2f35322d3532203d3e203237393431.roa
Signing time:             Tue 04 Feb 2025 18:22:40 +0000
ROA not before:           Tue 04 Feb 2025 18:17:40 +0000
ROA not after:            Tue 03 Feb 2026 18:22:40 +0000
asID:                     27941
IP address blocks:        2801:18:7800::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:94:45:7a:54:76:17:37:11:3c:32:ea:db:b1:63:52:f6:71:77:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A51CDFCFC7F119BCD857EB25AB4AB52177BF284
        Validity
            Not Before: Feb  4 18:17:40 2025 GMT
            Not After : Feb  3 18:22:40 2026 GMT
        Subject: CN=02B877F2693A1B68C88A9F25CCFBDDC83A628584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:66:f4:c4:6c:e9:90:3b:5d:c3:f7:34:bc:
                    c9:b8:aa:47:df:8a:8e:2c:2c:18:be:ef:9c:90:f7:
                    82:30:46:cf:27:39:72:b4:ef:70:17:9a:33:d8:a3:
                    cc:2e:e7:86:4f:55:1c:5f:a6:40:78:fb:5b:ff:83:
                    2e:81:db:a3:e1:08:0f:ed:ea:59:41:32:bd:ba:68:
                    51:ea:d8:8b:c9:fe:b6:b3:cc:bb:8e:5c:8f:6d:3f:
                    16:5e:a6:bb:e6:6d:06:71:e8:f7:f3:51:0d:ce:66:
                    22:2a:21:b3:a1:b1:15:95:b1:03:e6:06:45:23:ad:
                    6b:37:6d:28:37:16:c6:a3:1d:21:23:cc:ad:b7:1d:
                    0f:2a:9d:4a:e5:0c:41:b9:b8:5f:01:56:ee:21:42:
                    91:bb:36:78:e2:5b:74:20:b6:bf:c3:f2:ae:33:31:
                    60:4f:45:11:08:56:95:cb:29:cb:30:0c:bd:3b:4f:
                    60:ec:cf:fe:af:68:03:a7:5d:b5:21:e0:4a:84:9f:
                    06:b6:d1:b2:5e:b9:09:ad:ea:67:09:d1:88:62:a0:
                    5c:3a:9b:8b:22:18:54:82:76:01:e9:dc:a4:da:eb:
                    97:22:ea:76:ee:ba:62:36:0e:59:97:9a:32:06:90:
                    e5:22:82:0e:ce:68:74:2d:57:66:5b:29:01:f6:bd:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B8:77:F2:69:3A:1B:68:C8:8A:9F:25:CC:FB:DD:C8:3A:62:85:84
            X509v3 Authority Key Identifier:
                keyid:5A:51:CD:FC:FC:7F:11:9B:CD:85:7E:B2:5A:B4:AB:52:17:7B:F2:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/323830313a31383a373830303a3a2f35322d3532203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:7800::/52

    Signature Algorithm: sha256WithRSAEncryption
         02:00:ba:38:a2:4b:7b:b7:8a:99:d8:13:e8:83:32:96:7f:c2:
         d4:88:6e:03:20:e8:77:8e:16:fa:5e:cb:a8:53:d0:17:32:f4:
         63:a6:f9:dc:b8:de:d9:22:5b:5b:19:03:c4:16:f2:90:e4:db:
         4d:48:5f:18:fe:ea:b2:f7:db:51:d1:5d:7a:4c:e8:b7:ed:3f:
         9e:4e:a8:71:3e:45:2d:98:b8:8c:a6:56:66:b6:ab:b1:24:41:
         48:0a:98:7f:8c:50:1e:6a:85:86:68:3d:69:fe:8f:2c:3c:cb:
         d2:6b:ea:e9:7a:f3:b8:94:10:35:20:bc:72:d9:23:b3:01:99:
         a2:64:d2:ad:c7:ad:b1:aa:a0:c9:da:c8:09:54:24:b2:58:fd:
         b7:c0:d8:8d:c1:e4:0b:b8:9e:0c:52:69:95:8b:8e:b3:72:16:
         f1:20:87:5e:6d:57:47:bb:c9:7b:b6:40:7a:ed:df:e0:6f:9d:
         45:23:0f:d4:d6:b3:9f:84:03:65:2e:07:48:34:f3:85:3f:0f:
         f4:f0:ed:83:c7:64:10:27:2b:7e:f6:9f:f1:5a:c6:5e:a6:f5:
         dd:2c:49:5c:ad:af:29:a3:25:41:69:11:e8:17:33:31:a2:1e:
         6f:70:e8:7e:46:86:7d:9c:d4:56:eb:40:98:fb:81:0e:fb:c6:
         d4:64:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:13 2025 by rpki-client