Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/323830303a3935303a3a2f33322d3332203d3e203130323939.roa
File:                     323830303a3935303a3a2f33322d3332203d3e203130323939.roa (raw, json)
Hash identifier:          P+4zz3QuCk1rETL/BZp51XzQ6ikPpmlPSWMLFgXQlQE=
Subject key identifier:   CC:BA:F6:35:1A:C8:A9:A5:4E:2D:8E:8E:97:84:8C:CA:CB:45:AE:E1
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       2E47A2E13DDBEA50FB01FCAF09DE3C1CB9EC9765
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/323830303a3935303a3a2f33322d3332203d3e203130323939.roa
Signing time:             Tue 04 Feb 2025 18:03:16 +0000
ROA not before:           Tue 04 Feb 2025 17:58:16 +0000
ROA not after:            Tue 03 Feb 2026 18:03:16 +0000
asID:                     10299
IP address blocks:        2800:950::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:47:a2:e1:3d:db:ea:50:fb:01:fc:af:09:de:3c:1c:b9:ec:97:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Feb  4 17:58:16 2025 GMT
            Not After : Feb  3 18:03:16 2026 GMT
        Subject: CN=CCBAF6351AC8A9A54E2D8E8E97848CCACB45AEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:73:61:03:90:5d:ac:e3:96:94:bd:81:b4:
                    34:1f:27:79:78:35:72:ab:53:df:3c:90:f7:eb:b0:
                    0c:c7:40:dd:8e:35:a9:3e:88:bf:41:db:80:fe:13:
                    9d:09:1f:ae:17:9c:94:e9:f8:b4:6c:87:84:9b:27:
                    51:79:72:0b:84:83:a8:b9:9c:97:b9:41:51:8b:c2:
                    e2:8d:f6:15:78:d0:d7:7d:a3:ef:1d:d6:07:f6:b0:
                    aa:37:7c:24:d3:55:e0:1a:b1:99:ad:e7:82:68:ef:
                    86:0f:41:8c:eb:b3:e5:69:43:76:97:83:7c:88:96:
                    fb:20:44:be:7b:9d:b9:85:04:ad:ea:37:4d:9c:d7:
                    5d:51:38:6a:1c:30:f4:ad:47:5e:af:03:46:f9:b4:
                    c7:d1:a7:67:33:d2:7f:bc:b3:87:e6:66:ab:0b:fa:
                    e9:d2:8e:fd:e1:c8:61:4e:f2:da:18:c1:62:d8:59:
                    14:7f:bc:a7:e3:70:cb:c9:44:8a:5d:68:57:b1:84:
                    0d:a3:dd:f5:0a:ec:12:a1:46:90:ef:ef:d9:e7:06:
                    a7:fb:08:c7:08:86:f3:b3:4f:80:2e:cd:6a:85:50:
                    5d:03:e6:0c:2f:ec:44:a1:d4:b6:5d:87:8c:ef:15:
                    b9:c6:47:37:4e:1c:c0:2c:72:01:b9:40:b2:43:4c:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BA:F6:35:1A:C8:A9:A5:4E:2D:8E:8E:97:84:8C:CA:CB:45:AE:E1
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/323830303a3935303a3a2f33322d3332203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:950::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:cf:c8:68:13:50:e1:34:fa:37:f0:60:0f:d6:09:94:6c:
         44:21:16:64:95:a7:f6:32:db:d2:52:9a:3a:67:2c:0d:03:03:
         10:69:6a:07:07:ac:bb:bf:a0:6f:e9:7f:12:be:40:28:03:46:
         68:cf:91:34:5c:90:20:39:69:ca:7c:dc:99:0c:42:d5:c5:3e:
         c7:af:1a:7f:bb:60:00:ac:14:18:d8:e3:05:36:bd:10:f1:4a:
         cb:b3:a9:55:f7:c9:ae:44:3b:63:17:68:0c:5d:c3:9a:3c:ac:
         dc:51:af:6a:b2:18:80:97:f2:0b:18:df:7b:ea:b3:94:fc:5a:
         8c:0f:0b:28:c3:b1:4c:e3:e7:77:93:95:2a:37:db:84:f5:e8:
         ce:75:ec:55:c4:b9:9f:8c:fc:f3:f0:6b:f0:83:f7:5d:c4:02:
         0c:75:7b:22:4e:93:57:55:91:7f:42:e0:3a:18:16:67:8f:29:
         e2:ad:dc:65:2b:ee:6c:da:68:91:ef:b9:6c:d3:9b:98:fa:73:
         f9:9a:a3:23:7a:e2:ff:0a:a6:fc:b6:ce:e8:f7:46:5e:25:81:
         d5:e6:31:ab:2b:5d:55:f8:e5:3c:1c:02:bd:8b:c7:c0:01:2d:
         0e:60:08:f8:08:ae:ca:d2:2c:49:34:98:eb:b8:b1:5e:5e:03:
         f3:21:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:49 2025 by rpki-client