Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323830303a3a2f34382d3438203d3e203237383735.roa
File:                     323830303a3131303a323830303a3a2f34382d3438203d3e203237383735.roa (raw, json)
Hash identifier:          dRggP/EsLgOWzVIIqfNhYlAP8I7EKfLT/2pmJ6InW/Q=
Subject key identifier:   F2:51:1D:57:59:16:24:44:F1:02:A5:64:00:4B:46:4C:F7:CB:6A:57
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       7B9D8A923388FDA50643AC3F19B6DD58CD213DCB
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323830303a3a2f34382d3438203d3e203237383735.roa
Signing time:             Tue 04 Feb 2025 18:27:05 +0000
ROA not before:           Tue 04 Feb 2025 18:22:05 +0000
ROA not after:            Tue 03 Feb 2026 18:27:05 +0000
asID:                     27875
IP address blocks:        2800:110:2800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9d:8a:92:33:88:fd:a5:06:43:ac:3f:19:b6:dd:58:cd:21:3d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:22:05 2025 GMT
            Not After : Feb  3 18:27:05 2026 GMT
        Subject: CN=F2511D5759162444F102A564004B464CF7CB6A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:6a:62:e4:28:91:1f:72:42:04:db:d9:8c:
                    57:79:0d:7d:b4:65:d7:97:c7:9b:17:9a:be:70:36:
                    d1:62:48:53:dd:9a:ce:3c:19:a7:0e:37:1c:10:e5:
                    66:ee:6e:34:37:45:b7:2f:25:b4:97:0e:2d:26:c5:
                    8f:40:a9:00:0f:83:1e:2f:6b:31:c4:9e:c4:7d:10:
                    b1:2d:5c:44:76:c1:50:48:68:d5:67:0a:ef:d5:bc:
                    19:84:8b:77:b9:6d:28:f9:f8:d4:67:b1:c1:84:b5:
                    29:49:b3:4f:1b:b0:c1:dd:2b:1d:3d:38:f8:b2:39:
                    34:49:52:69:48:49:90:40:69:4b:55:64:fa:fd:e2:
                    00:0e:12:a0:34:48:99:eb:1f:ca:4a:ea:f5:f8:19:
                    4c:a9:ae:7c:20:ad:12:72:8a:a8:7d:ee:b0:2e:2a:
                    0b:45:e2:7e:f0:53:86:8a:35:bd:ad:d1:6c:07:b6:
                    c0:56:db:28:ed:89:b3:97:03:14:73:90:f0:28:f3:
                    9b:6c:bc:79:39:b0:99:e3:9a:9c:61:41:79:4b:2a:
                    6b:c4:e4:89:27:cb:4e:cb:a7:ac:46:0f:ad:c2:4e:
                    4f:01:ed:da:9b:78:bb:7c:68:70:f0:b5:f2:d1:05:
                    bc:db:ff:8b:d1:f3:39:62:51:5c:3e:d9:e9:d1:e0:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:51:1D:57:59:16:24:44:F1:02:A5:64:00:4B:46:4C:F7:CB:6A:57
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323830303a3a2f34382d3438203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:61:36:b8:75:07:ad:9a:f2:5b:89:46:e4:88:59:0a:2a:9a:
         6f:de:e0:e6:81:c3:90:0a:3c:34:83:d9:61:8c:09:87:3d:b6:
         7b:9e:8b:81:78:24:e6:d4:bc:1b:63:f8:0c:d3:00:9d:6c:fd:
         82:72:ba:4a:3c:59:ff:e0:83:49:cc:6e:b5:72:8b:4c:97:cb:
         74:81:79:a0:42:b3:a4:0f:28:b4:72:0a:f0:51:de:b8:85:b3:
         f2:2a:95:2b:52:fa:db:68:46:2f:89:32:eb:8b:3c:78:4e:33:
         88:ef:a1:f4:a4:31:78:42:87:6c:7b:5a:b2:70:86:ef:f3:07:
         30:03:df:f3:82:41:2a:49:20:36:22:90:20:1a:e3:c6:b0:0f:
         75:16:c2:d4:06:25:f5:de:b5:9d:cd:51:42:cc:2e:de:ea:5d:
         44:65:86:02:d9:1d:4e:06:62:94:80:75:5b:43:36:31:4e:00:
         a4:3f:0d:1b:7e:dc:f7:a5:06:00:42:24:1c:c7:8b:9f:23:ac:
         4b:a0:24:b5:e7:1c:8c:e8:13:c3:ae:f4:0a:82:b8:49:70:b4:
         14:c2:db:7c:95:9f:62:6b:c0:1b:4e:25:46:3d:02:66:08:7a:
         6d:6d:1c:1c:c5:1b:0a:23:21:5e:43:a2:f6:71:2d:60:60:62:
         d6:72:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:08:07 2025 by rpki-client