Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237393836.roa
File:                     323830303a3330303a3a2f33322d313238203d3e203237393836.roa (raw, json)
Hash identifier:          RH+gQcmE5nEJsYXcXmbvuj7mG6lQB++El58rh576a6A=
Subject key identifier:   94:4E:1D:02:D1:EB:AE:BD:5F:87:B2:CD:B6:7F:E8:B2:A0:C2:DC:E2
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       5920454E59B9B137D6F1806F42BECFDA57387CAD
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237393836.roa
Signing time:             Tue 04 Feb 2025 19:56:29 +0000
ROA not before:           Tue 04 Feb 2025 19:51:29 +0000
ROA not after:            Tue 03 Feb 2026 19:56:29 +0000
asID:                     27986
IP address blocks:        2800:300::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:20:45:4e:59:b9:b1:37:d6:f1:80:6f:42:be:cf:da:57:38:7c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Feb  4 19:51:29 2025 GMT
            Not After : Feb  3 19:56:29 2026 GMT
        Subject: CN=944E1D02D1EBAEBD5F87B2CDB67FE8B2A0C2DCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:74:f2:90:55:b9:40:18:55:5e:a4:aa:77:
                    9a:11:c8:69:4d:98:19:7c:89:29:c0:98:22:b2:62:
                    d0:20:11:61:25:ea:0e:80:4f:3c:0b:f0:3b:1e:4b:
                    74:da:fc:ec:b1:79:9c:05:12:85:71:d8:07:56:d6:
                    fe:c9:b6:ec:0c:b8:7f:46:e8:f6:b6:ce:d5:da:54:
                    d3:3a:10:7a:8f:9c:82:9f:e3:e0:06:c1:bc:a5:eb:
                    ee:04:b8:20:9a:e8:75:89:b1:7e:41:79:12:27:fa:
                    14:3a:40:2d:3f:40:83:58:62:8e:c1:68:6c:0a:20:
                    f2:82:4a:79:78:f3:c4:46:65:5a:2c:40:a1:e1:7a:
                    4a:64:c5:bb:8b:f8:48:33:5e:77:e2:30:fc:bb:34:
                    18:41:6d:a8:28:a3:80:b9:15:3a:40:45:5f:a5:67:
                    35:71:1f:de:27:15:43:7e:c9:a9:90:bd:76:c8:c0:
                    2d:f3:e9:73:99:0a:18:cb:d3:57:62:ed:b4:65:67:
                    4e:5e:78:fd:a0:a6:ec:03:2b:5b:85:8a:8b:03:43:
                    08:90:3c:c8:64:35:b2:2d:ef:f2:c1:29:42:8e:e6:
                    3c:af:e0:d9:07:23:9f:4d:2b:55:09:82:a6:ce:01:
                    0a:a0:1b:5c:79:c7:af:e0:95:b6:bb:1f:84:f0:08:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4E:1D:02:D1:EB:AE:BD:5F:87:B2:CD:B6:7F:E8:B2:A0:C2:DC:E2
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:02:3e:b4:7a:3a:a3:55:2b:fa:99:9a:a6:43:0c:9e:98:
         e7:8d:d2:23:8a:26:89:f0:d6:9c:0c:da:37:7d:3b:d3:dc:e5:
         c1:8c:57:b7:9f:81:e0:8d:42:5c:f7:0d:66:7c:ad:d9:80:91:
         d4:cc:68:5b:55:c2:6e:66:f0:c7:c8:99:b7:0c:fe:b3:86:0e:
         d3:96:5f:bb:0d:33:ab:d6:34:b7:d7:79:3e:5c:bc:44:9b:c7:
         a6:88:a3:31:31:2d:3e:dc:d0:76:1d:8f:e6:fd:90:be:00:9d:
         44:a8:4b:ec:e8:9c:98:93:53:43:5f:97:5f:bf:fc:27:2e:22:
         51:7c:11:ea:4f:f7:86:72:de:5d:d2:f6:9b:cb:8a:49:03:59:
         4e:b0:2b:17:a1:67:92:e0:47:53:9a:42:4b:b0:3c:54:82:d0:
         95:6c:f9:fc:2c:f1:03:3f:09:d4:ad:32:33:63:b1:44:0b:15:
         70:dc:bf:b4:37:0a:75:bd:27:f6:c4:52:ed:a0:39:a5:15:21:
         f8:5a:e6:14:25:0d:f4:65:9f:b0:f1:ac:b3:8e:cf:99:7a:5c:
         a7:6f:a0:a7:1d:fe:8c:9f:c6:46:b1:84:49:3e:06:9b:38:65:
         9c:50:7c:14:1b:08:79:b1:3e:3e:5b:9f:50:f7:32:fd:7f:7c:
         c4:dc:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:19 2025 by rpki-client