Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a3a2f33392d3430203d3e203237393531.roa
File:                     323830303a3439303a653030303a3a2f33392d3430203d3e203237393531.roa (raw, json)
Hash identifier:          j3Tqgbwz9qkJ64ptdTHcKmK22pZvAackyI176vS8NEs=
Subject key identifier:   7E:45:CD:D3:A9:B2:C2:CB:57:97:81:5D:11:A8:1D:F1:11:B1:E4:9B
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       29E088E9B9CAF4FA9FF4C95DE5B2260750D44F62
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a3a2f33392d3430203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 19:57:09 +0000
ROA not before:           Tue 04 Feb 2025 19:52:09 +0000
ROA not after:            Tue 03 Feb 2026 19:57:09 +0000
asID:                     27951
IP address blocks:        2800:490:e000::/39 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e0:88:e9:b9:ca:f4:fa:9f:f4:c9:5d:e5:b2:26:07:50:d4:4f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:09 2025 GMT
            Not After : Feb  3 19:57:09 2026 GMT
        Subject: CN=7E45CDD3A9B2C2CB5797815D11A81DF111B1E49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:61:ef:c3:d2:9f:45:3c:96:6d:35:d3:8c:
                    05:6f:10:c7:c3:8e:a4:e7:57:e5:9f:52:56:16:2c:
                    71:a8:71:45:c0:b8:09:ed:f6:59:6c:fd:3a:0a:d5:
                    7d:66:a9:da:39:8a:3b:ed:c8:c4:4c:39:6b:1e:cb:
                    60:ff:6b:3a:a9:6d:d5:55:cb:63:a5:89:72:f4:03:
                    98:30:44:46:6e:c0:db:0e:ba:f0:8f:0c:da:30:3c:
                    a3:e0:97:c4:f9:f3:39:88:56:b5:42:ea:20:0f:e8:
                    2b:7b:3b:76:3a:fb:be:23:1d:52:7a:d4:a1:06:bb:
                    78:cc:76:19:59:e7:b0:62:f9:0b:ea:52:66:1f:69:
                    e7:f5:6a:42:73:2b:2b:d2:23:86:71:bc:70:24:b3:
                    cb:1c:16:f0:47:fd:23:3a:78:04:16:3c:84:cc:f3:
                    04:11:98:bf:12:f9:47:cf:bc:ca:b7:76:b5:d7:07:
                    af:c0:ca:55:bb:5c:72:25:22:7e:0b:41:4b:66:e0:
                    9d:fd:be:8e:4e:ae:4f:00:32:fc:47:31:ff:4b:d1:
                    e5:56:8d:47:8a:45:36:59:86:26:a1:fc:16:81:c6:
                    41:72:f8:bb:35:60:f7:d7:49:a5:42:ce:77:64:18:
                    ef:14:70:57:82:86:30:23:57:62:4a:4a:0e:a2:c9:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:45:CD:D3:A9:B2:C2:CB:57:97:81:5D:11:A8:1D:F1:11:B1:E4:9B
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a3a2f33392d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:e000::/39

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:c4:af:ae:87:10:8f:25:ed:2f:b5:e4:95:0a:31:17:13:
         de:b1:fa:58:08:29:c7:e4:d2:d0:5d:bd:1e:7a:53:4c:ec:d8:
         ce:d3:2d:1a:61:12:3b:f3:c7:62:3b:43:fc:04:41:db:3c:92:
         54:6b:06:2c:51:a5:f3:a9:5d:fa:e7:8b:46:e5:fe:a6:31:98:
         e1:cb:d0:88:cb:d9:87:9f:ef:c4:16:dd:d1:d0:1a:8b:ff:95:
         70:a5:a7:e6:66:22:73:d5:49:62:82:c4:44:c3:3c:a3:fc:72:
         85:c4:ca:e7:40:83:df:7a:ca:42:cd:18:6c:77:8b:cf:33:07:
         02:80:0b:92:ca:ac:b5:ff:52:58:03:7e:77:90:06:9e:5d:bc:
         b7:58:e0:49:34:2e:87:d2:59:d1:6b:d9:53:16:a1:ef:99:2c:
         78:4e:04:f0:c5:1f:25:19:85:48:c1:09:4b:58:23:4c:d8:3f:
         a3:ba:08:d3:ae:da:03:03:e0:4f:59:dd:2d:c4:ca:28:02:69:
         64:79:da:af:a7:3a:eb:ea:22:2a:ca:cc:af:86:72:f7:24:75:
         77:f8:c8:cb:7e:b0:46:b4:1c:2c:05:19:ae:aa:ff:21:d2:16:
         62:07:09:47:f3:97:6c:2d:d2:f4:4c:b5:62:30:85:80:3a:27:
         74:af:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:26 2025 by rpki-client