Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa
File:                     323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa (raw, json)
Hash identifier:          crScHWCO46UTEWGpO4kmRkvSSCKWa9ssVxWO53oixfU=
Subject key identifier:   F3:F2:08:47:04:5F:5A:F2:8E:53:6E:76:A6:DE:F4:59:9C:8C:A0:BB
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       4C8AB5DA0D738F6135860CADA3C934B49472108D
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 19:56:58 +0000
ROA not before:           Tue 04 Feb 2025 19:51:58 +0000
ROA not after:            Tue 03 Feb 2026 19:56:58 +0000
asID:                     27951
IP address blocks:        2800:490:e800::/39 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8a:b5:da:0d:73:8f:61:35:86:0c:ad:a3:c9:34:b4:94:72:10:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:58 2025 GMT
            Not After : Feb  3 19:56:58 2026 GMT
        Subject: CN=F3F20847045F5AF28E536E76A6DEF4599C8CA0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:29:0c:a2:ad:bc:ef:8e:a1:13:83:0f:c4:
                    8e:aa:e4:d4:1f:48:a6:50:14:3d:48:15:7c:62:03:
                    0e:07:21:67:e7:88:5c:60:c8:f8:7e:17:3e:88:9b:
                    b4:c5:dd:d9:0e:68:c2:f0:5a:f3:3e:de:6b:c5:1c:
                    70:03:c6:fd:26:65:9c:a9:26:46:83:32:0c:97:bb:
                    3c:d4:75:b2:ba:ae:a3:c0:93:db:63:44:79:7e:14:
                    02:e2:b9:ce:af:32:67:05:c4:a3:fa:48:48:35:54:
                    b7:bc:53:1c:b8:d7:cd:5c:df:89:d7:f5:49:ea:3a:
                    ab:21:cd:de:fa:7f:af:ed:db:99:4a:32:82:b8:50:
                    87:d1:2a:05:c7:bc:77:fa:b0:ed:3d:a2:96:b1:6a:
                    ee:d5:07:03:a6:a9:65:69:a0:30:d0:7f:dc:17:0d:
                    eb:ab:e4:fe:55:29:46:b9:76:c5:00:4f:48:b1:1d:
                    96:1e:7c:d4:c1:3f:c5:63:1a:40:4b:d1:dc:5b:c3:
                    05:fd:11:a5:f7:ff:30:76:95:dc:64:c6:52:3f:d6:
                    e8:ad:50:cf:0f:43:f0:ed:df:41:57:b3:a9:b0:40:
                    36:c8:36:2e:84:6d:6c:71:89:17:e4:e2:98:3d:ee:
                    1a:62:e1:73:9b:53:21:e3:b3:9d:94:55:5c:44:76:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F2:08:47:04:5F:5A:F2:8E:53:6E:76:A6:DE:F4:59:9C:8C:A0:BB
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:e800::/39

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:10:a8:56:fa:af:a1:af:82:f0:f4:0e:07:e0:c7:5f:27:
         11:ce:3e:a2:c4:1c:1c:bb:86:37:87:86:1a:2d:90:ed:b6:45:
         db:05:58:cd:30:46:48:57:c0:2f:ea:38:c1:c6:ce:8c:7a:99:
         60:62:19:37:8d:de:63:5d:54:eb:e6:f7:ea:59:ae:d9:75:b8:
         54:ce:af:89:e0:69:62:ec:e4:99:21:91:c7:47:30:8c:91:1c:
         f2:eb:58:d0:86:e1:ca:9f:55:cc:9c:e0:91:36:f0:76:61:a5:
         ff:8e:e0:0d:14:7b:fc:e0:7b:f0:bb:d0:57:9b:88:a2:d3:7d:
         59:36:09:d0:dc:13:b6:4e:04:46:56:76:2f:85:4c:9c:68:c1:
         44:87:b0:99:13:e0:93:3c:da:a5:36:97:5e:a2:a4:06:e5:8c:
         fc:88:09:bd:d4:e8:37:68:90:b5:ff:5f:04:25:52:9f:a4:b5:
         67:1f:bd:76:c7:f6:0f:97:d0:7c:41:2b:a6:4a:8f:af:21:3f:
         25:84:56:fd:bc:9d:cd:80:24:48:a6:bf:0e:67:e6:2a:d5:dd:
         97:38:f4:2b:07:38:e7:ba:b2:2a:2b:4a:16:5b:50:c1:7b:02:
         45:61:89:c9:cc:2c:5b:2c:5c:94:18:d2:9f:80:c8:21:26:0a:
         a1:4e:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:04 2025 by rpki-client