Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323830303a33303a3a2f33322d3332203d3e203237383037.roa
File:                     323830303a33303a3a2f33322d3332203d3e203237383037.roa (raw, json)
Hash identifier:          LdtsDE1mXm33DlK4PTpnZ6r5PVOslhHBOZxW6awXCgk=
Subject key identifier:   EE:1E:6B:27:AB:ED:BD:B3:23:7E:81:0D:08:00:B7:60:2C:9E:38:C4
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       1ACCF63BE46C07BA25CD9009C2A181A355A7F515
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323830303a33303a3a2f33322d3332203d3e203237383037.roa
Signing time:             Tue 04 Feb 2025 18:21:37 +0000
ROA not before:           Tue 04 Feb 2025 18:16:37 +0000
ROA not after:            Tue 03 Feb 2026 18:21:37 +0000
asID:                     27807
IP address blocks:        2800:30::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cc:f6:3b:e4:6c:07:ba:25:cd:90:09:c2:a1:81:a3:55:a7:f5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:37 2025 GMT
            Not After : Feb  3 18:21:37 2026 GMT
        Subject: CN=EE1E6B27ABEDBDB3237E810D0800B7602C9E38C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:15:32:a9:5f:dd:90:e2:00:77:f6:ea:0a:
                    0b:23:5c:5a:8a:48:d9:c3:5b:8a:b8:e4:6f:2e:72:
                    16:79:55:00:4d:25:f1:0f:cd:d0:9f:ee:ba:68:7c:
                    12:c7:fc:e6:40:fc:4c:b7:45:9c:89:d5:30:8f:5f:
                    ea:cc:e5:58:0f:14:11:21:a1:e9:63:9b:dc:68:56:
                    ee:7a:41:be:f9:76:72:63:30:70:dd:59:7a:32:40:
                    41:6b:01:8d:26:96:92:fe:d6:6b:9d:75:0e:63:dc:
                    e3:c3:2f:05:f7:b6:db:c6:b7:5d:cd:01:ba:bc:7c:
                    37:30:74:97:c3:a6:f5:07:4d:c8:cd:20:99:ad:30:
                    5c:09:aa:f9:ba:c9:d1:a7:4b:a5:1d:3a:17:dc:8d:
                    8b:b9:84:85:d3:b5:35:49:a1:ed:dc:95:e1:b0:ac:
                    2c:89:a0:18:d3:7e:29:43:42:0d:08:da:17:8f:db:
                    07:69:4d:ce:b5:4e:96:f4:60:c2:55:17:2c:b3:ec:
                    40:36:2b:ca:16:ff:6e:4e:11:f9:47:62:27:25:77:
                    06:ed:0a:08:3b:e6:ae:d3:e9:4f:3b:b3:cf:63:16:
                    19:5b:87:80:0d:36:75:6e:55:64:f7:60:77:d9:17:
                    6f:90:5f:e6:16:6d:be:65:83:1d:25:2f:0c:a1:e1:
                    f3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:6B:27:AB:ED:BD:B3:23:7E:81:0D:08:00:B7:60:2C:9E:38:C4
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323830303a33303a3a2f33322d3332203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:30::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:b0:b7:6a:a1:f0:6f:26:ac:a2:8c:64:8b:c5:d4:c0:f6:
         83:e6:fa:19:91:a6:17:8d:a6:86:bc:3a:c7:a5:0a:14:af:e3:
         d1:59:63:27:97:c9:99:1d:19:9f:56:90:cc:99:64:33:0f:7c:
         f8:6f:da:18:df:ba:de:e7:4d:1e:f6:57:3a:48:f0:10:e7:63:
         ae:ca:24:0b:95:8d:39:ef:0d:d2:d0:09:56:f3:f7:39:32:17:
         6d:a4:2b:bc:9d:ea:ab:12:b8:c8:68:12:c1:f1:5d:ef:0d:1d:
         1f:94:09:bd:0e:ae:db:8f:6f:22:e0:5e:36:0b:85:6b:94:ed:
         4d:a1:36:24:7e:ae:a7:1b:ef:07:a5:ae:aa:a9:a7:65:06:68:
         78:01:45:b9:ba:1e:16:2c:1f:a0:ce:9b:41:99:d4:0b:aa:37:
         50:89:cc:64:b6:a3:41:72:68:3b:65:3f:f0:55:3a:70:88:92:
         8a:d6:87:3b:d9:52:f3:c5:aa:24:38:0b:1c:56:28:61:38:47:
         72:20:fe:58:ec:1a:23:75:02:6e:52:7c:60:c4:d8:b1:b5:ae:
         72:74:d6:a3:dc:98:5d:dc:9a:1d:c3:7a:4f:41:e2:1d:87:84:
         61:f4:b0:9f:89:d2:97:7b:c2:69:28:13:cb:f5:63:bb:b8:2d:
         0a:dd:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:08 2025 by rpki-client