Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/323830303a3335303a3a2f32392d3634203d3e203131353536.roa
File:                     323830303a3335303a3a2f32392d3634203d3e203131353536.roa (raw, json)
Hash identifier:          Q4TP8bS/sYvBDOLV7MzyP2gM/1w8dAykZIfxzt/RrBU=
Subject key identifier:   41:CC:D8:09:F1:D6:0F:4E:38:15:3C:84:FD:22:02:F6:6E:DD:24:B6
Certificate issuer:       /CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
Certificate serial:       75D39EE1CA3442EEC404877539C6BE41098F242A
Authority key identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/323830303a3335303a3a2f32392d3634203d3e203131353536.roa
Signing time:             Tue 04 Feb 2025 18:48:40 +0000
ROA not before:           Tue 04 Feb 2025 18:43:40 +0000
ROA not after:            Tue 03 Feb 2026 18:48:40 +0000
asID:                     11556
IP address blocks:        2800:350::/29 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d3:9e:e1:ca:34:42:ee:c4:04:87:75:39:c6:be:41:09:8f:24:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
        Validity
            Not Before: Feb  4 18:43:40 2025 GMT
            Not After : Feb  3 18:48:40 2026 GMT
        Subject: CN=41CCD809F1D60F4E38153C84FD2202F66EDD24B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:06:06:b2:29:af:9e:30:31:4e:7e:2b:cb:c6:
                    4f:d3:07:90:8b:0e:a2:f6:8c:a2:89:9c:96:08:84:
                    4f:f4:ef:a3:2c:91:a0:61:32:05:a7:35:f9:7e:bc:
                    f6:0c:8b:15:52:f3:42:e6:a2:ad:58:75:99:9e:83:
                    08:bb:ab:fa:81:e3:f6:da:98:b9:ff:8a:44:6e:44:
                    3a:2a:d7:3a:7c:ea:bb:02:72:d3:e3:30:0a:5f:50:
                    4d:95:65:85:df:ed:2b:1c:b7:70:3f:46:60:4c:44:
                    b4:0c:eb:58:9b:e5:49:d5:bd:77:0e:10:2b:a5:5e:
                    95:40:31:9e:30:9b:ce:3f:0d:40:ae:da:95:84:76:
                    fe:2a:62:32:7d:af:fd:45:fa:81:d4:cf:88:67:39:
                    e7:f6:b3:2f:2c:92:15:ac:0f:4a:ba:ef:7b:11:cd:
                    d1:34:a5:1a:21:a8:b0:e5:55:d3:3c:c7:dc:bc:46:
                    39:ab:81:01:0a:ec:ab:09:76:7d:3f:c8:38:3a:f4:
                    70:eb:af:3d:89:18:9c:c5:0a:34:1e:29:f7:3f:92:
                    45:d9:33:31:08:e6:37:ba:63:d7:16:2d:75:3f:70:
                    24:cb:bc:42:14:12:d3:a3:f5:00:22:c9:8f:cd:0f:
                    b7:6b:7c:1b:95:87:b1:cc:61:ae:e6:64:99:8d:8b:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CC:D8:09:F1:D6:0F:4E:38:15:3C:84:FD:22:02:F6:6E:DD:24:B6
            X509v3 Authority Key Identifier:
                keyid:78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/323830303a3335303a3a2f32392d3634203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:350::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:e4:0b:7f:ab:2e:dd:be:71:37:c3:c9:46:38:ad:bc:65:
         8f:f4:2b:b8:57:a8:95:38:b7:4b:8f:56:37:13:8f:e1:ce:2f:
         d8:9a:f6:09:a3:d4:bd:13:70:01:d9:76:70:54:d3:eb:99:d5:
         81:5f:b5:93:c8:02:4a:a1:ac:c7:dc:70:51:9a:2d:4d:1c:e6:
         0c:c5:19:70:2f:cb:66:d1:96:71:6f:86:ac:6f:db:c9:fa:8e:
         d4:94:35:14:ad:05:72:ca:3c:ba:6b:9b:63:bf:15:be:eb:f9:
         1f:37:23:47:bc:68:f1:e6:82:0a:1c:25:35:b2:bf:35:92:b3:
         51:dc:db:0c:a5:8b:7e:a7:87:f5:54:7d:12:60:bb:c4:01:c7:
         67:72:48:5c:47:ac:e0:50:62:35:33:93:67:45:a9:2b:45:8f:
         7d:f0:49:a1:74:5c:86:42:db:80:56:5e:37:50:7c:37:60:6f:
         e8:61:18:40:8b:a4:88:d3:17:ca:92:5f:31:81:14:eb:97:de:
         c9:c2:c9:17:4e:6c:58:52:1f:14:a9:87:2e:b9:8e:2f:12:72:
         89:e6:fe:6e:b1:9d:1f:ca:bc:cc:d3:a1:1c:5e:e4:22:20:3e:
         19:9e:17:6e:88:33:e6:5d:3f:91:0f:0b:c9:8b:b3:04:9f:59:
         9a:68:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:23 2025 by rpki-client