Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f34392d313238203d3e20323634383435.roa
File:                     323830303a3730303a3a2f34392d313238203d3e20323634383435.roa (raw, json)
Hash identifier:          5xPuegZn327eZk1j+H4Uw3wKraSWrHYS4EUhcu6GGs8=
Subject key identifier:   88:69:84:18:EE:1E:85:11:A2:23:E4:27:25:D8:12:F3:95:99:D3:BA
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       2201619B68FC1350B3DD5130FCCABD2960BCFE26
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f34392d313238203d3e20323634383435.roa
Signing time:             Thu 27 Feb 2025 16:25:00 +0000
ROA not before:           Thu 27 Feb 2025 16:20:00 +0000
ROA not after:            Thu 26 Feb 2026 16:25:00 +0000
asID:                     264845
IP address blocks:        2800:700::/49 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:01:61:9b:68:fc:13:50:b3:dd:51:30:fc:ca:bd:29:60:bc:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 27 16:20:00 2025 GMT
            Not After : Feb 26 16:25:00 2026 GMT
        Subject: CN=88698418EE1E8511A223E42725D812F39599D3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ca:88:7a:69:0c:8a:58:77:c6:75:8c:29:6e:
                    53:2a:b1:1e:85:cb:01:d3:9f:5b:85:b2:7e:ae:b4:
                    28:48:ab:20:30:a7:b8:4b:04:66:f9:d3:69:ec:00:
                    e6:11:ab:0c:75:c5:ba:20:9f:fa:68:90:48:03:a5:
                    b9:fa:cf:bd:1e:c8:23:ba:79:3d:ea:9c:83:12:27:
                    c0:93:f4:ea:a3:d3:23:53:80:8f:4a:6d:29:3e:89:
                    31:30:a4:44:ad:c2:1f:a5:97:34:a0:4b:4f:c5:21:
                    b3:3d:e4:0c:f6:34:17:b9:49:ec:f4:25:94:4e:0d:
                    4e:ac:e7:a5:02:18:dd:07:d1:ca:9d:ba:6c:01:8e:
                    6b:e7:2a:5e:9c:20:f3:b3:5b:9a:c5:45:4c:79:4d:
                    10:46:bc:88:8b:99:0d:8e:0a:16:b3:b9:c1:1b:aa:
                    3a:e9:7e:fd:2b:45:f0:3d:58:4b:87:ec:94:36:06:
                    69:16:25:32:60:08:f4:01:20:0b:01:9b:12:f1:21:
                    62:0d:f8:91:fd:bd:90:74:6f:98:b3:6b:db:2a:d7:
                    6f:4d:96:22:ec:38:65:90:40:e3:7d:1d:26:f3:f3:
                    48:2e:83:4d:78:ea:7c:86:d6:2f:9a:4e:ab:2b:e7:
                    cf:b7:73:2a:f5:f3:b0:01:2d:b8:ec:ee:9e:94:48:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:69:84:18:EE:1E:85:11:A2:23:E4:27:25:D8:12:F3:95:99:D3:BA
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f34392d313238203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/49

    Signature Algorithm: sha256WithRSAEncryption
         b8:9b:b2:5d:96:64:aa:fb:2a:36:37:3e:0c:ac:16:88:3a:d0:
         f6:0d:83:66:e1:46:cf:4c:db:e3:c6:05:46:c9:b1:d1:8a:f7:
         65:c5:d7:6d:e6:ef:d7:48:b9:5e:41:53:15:d0:f6:11:f1:85:
         72:05:46:63:b7:87:13:bc:9c:75:60:4d:e7:80:27:37:d1:fd:
         d7:7c:0f:d9:bc:b3:28:70:63:a1:01:6a:c5:b2:5c:8f:8a:b5:
         1d:0f:f4:98:ff:af:47:c1:4d:dc:ba:cc:29:b3:30:30:46:a1:
         a0:da:57:40:87:e7:35:66:cb:99:7c:33:dc:dd:f0:8f:03:78:
         d7:6e:50:c2:ed:7a:6c:a0:0c:26:5f:0a:b5:b1:db:38:30:ca:
         a3:68:3b:c5:74:40:bf:33:65:34:fd:56:4f:90:7a:de:b7:71:
         05:00:fd:f3:48:a8:04:47:a8:ef:66:82:5d:a9:ed:42:9e:ea:
         a9:fe:d6:d6:27:4f:fc:05:93:3d:5e:ef:04:f0:5d:05:3d:50:
         97:75:46:05:72:08:61:dc:80:1f:cb:de:00:d4:c0:c8:d7:f5:
         bb:36:ef:a2:cc:5d:b6:b1:bb:e3:af:21:af:10:af:a6:99:26:
         f2:62:2d:a7:2e:75:c0:0b:f4:14:a5:dd:14:bc:7c:86:bd:92:
         9d:ac:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:01:47 2025 by rpki-client