Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165303a323433303a3a2f34342d3438203d3e203634313234.roa
File:                     323830303a3165303a323433303a3a2f34342d3438203d3e203634313234.roa (raw, json)
Hash identifier:          5CvWifSQu4E/8TV25nkVXrQ9x9w/TFDWW37AA0fpaoI=
Subject key identifier:   CC:1B:9B:E8:E5:AF:38:6E:EF:90:D4:70:53:26:CE:17:7B:7D:FA:20
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       43FA1109BB04DF7646F0648C3119F7A2A5C3C0A8
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165303a323433303a3a2f34342d3438203d3e203634313234.roa
Signing time:             Tue 04 Feb 2025 18:30:28 +0000
ROA not before:           Tue 04 Feb 2025 18:25:28 +0000
ROA not after:            Tue 03 Feb 2026 18:30:28 +0000
asID:                     64124
IP address blocks:        2800:1e0:2430::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fa:11:09:bb:04:df:76:46:f0:64:8c:31:19:f7:a2:a5:c3:c0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Feb  4 18:25:28 2025 GMT
            Not After : Feb  3 18:30:28 2026 GMT
        Subject: CN=CC1B9BE8E5AF386EEF90D4705326CE177B7DFA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:cf:44:c9:90:b2:01:a3:cc:f1:13:0e:89:
                    9f:0b:08:db:66:fa:2c:2a:64:5c:2a:3b:2d:21:69:
                    8b:7d:ed:e9:30:85:35:2e:04:d3:d5:17:90:df:e8:
                    d5:85:26:71:d9:83:e7:8c:cc:19:37:56:d1:7d:7f:
                    bc:7c:de:2a:f5:b1:37:76:07:c9:59:9c:61:97:84:
                    fd:f5:4e:f2:45:36:b1:c7:e1:01:00:6d:40:91:ee:
                    e3:42:1c:0e:74:b0:aa:16:47:ea:3d:05:e0:6a:2a:
                    53:e6:20:85:08:1b:2c:1c:73:e6:a2:be:00:c2:49:
                    b4:e1:62:57:31:72:59:48:19:b6:a4:22:0c:bb:43:
                    94:0d:f3:b9:da:5e:c0:a4:90:b7:ea:bc:e2:e9:4b:
                    67:de:b8:a8:e1:c6:cc:9f:0a:2e:ce:90:2e:73:28:
                    83:11:78:f1:50:fb:b1:30:7c:08:65:5a:73:f9:06:
                    17:de:5c:2a:af:f3:ea:1c:03:ab:1b:c5:86:8c:59:
                    ff:c9:ca:c8:b5:c7:ed:35:fa:b1:3b:fd:13:72:76:
                    82:c5:92:3c:dc:6e:4c:6b:89:06:00:f0:2b:1b:c0:
                    4d:fe:be:76:7d:fb:3b:54:78:63:df:f1:0b:b4:f8:
                    df:22:2a:08:79:72:9f:1b:c3:fd:30:10:52:28:7e:
                    2b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1B:9B:E8:E5:AF:38:6E:EF:90:D4:70:53:26:CE:17:7B:7D:FA:20
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165303a323433303a3a2f34342d3438203d3e203634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1e0:2430::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:af:d7:7b:b7:be:e4:0e:f7:0d:f8:d8:15:66:70:6b:3d:
         eb:99:1f:d8:87:3f:f7:b0:9d:fc:4a:b8:8e:6a:81:ad:c7:8c:
         ed:76:6b:7d:88:cc:a2:db:3f:d3:7f:3a:7f:cf:bf:f8:90:45:
         5e:39:dd:c5:69:74:52:51:a0:f5:2d:71:61:47:bf:e6:3f:2e:
         53:27:a0:0f:ec:6b:65:01:f1:1b:cc:d3:d4:21:d0:83:c7:8b:
         e5:24:07:08:e6:92:a6:61:c6:c2:f7:4b:29:44:a5:22:49:b0:
         bd:14:83:0c:81:cd:39:95:cb:eb:50:c5:22:33:8c:c6:4b:3c:
         01:8c:e7:cd:e2:93:cd:49:93:0e:b1:80:6b:40:7a:1d:46:26:
         68:56:75:55:f7:2d:98:0a:d3:d3:0c:c5:eb:9d:9e:d3:ec:3d:
         ac:6d:4b:42:4e:d4:69:a4:0d:d3:63:f1:3f:6e:46:c0:0f:dd:
         51:01:81:9b:e2:6e:d5:2f:d6:bd:7a:56:be:d2:9c:18:9e:23:
         39:17:36:c7:bf:fb:9a:c5:b2:53:b4:cb:de:de:fb:4f:99:51:
         26:b8:23:af:74:64:fe:99:e0:9a:a8:e2:39:4e:65:aa:b6:dc:
         17:e3:90:d8:29:e6:29:6b:02:0d:b3:fd:39:d4:e2:39:80:1c:
         bb:ef:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:12 2025 by rpki-client