Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31313a3a2f34382d3438203d3e203236323130.roa
File:                     323830303a38383a31313a3a2f34382d3438203d3e203236323130.roa (raw, json)
Hash identifier:          LF4CmrOF7wo9H6BTtT7IqoHVcDUmR6nQCg5eFicU7co=
Subject key identifier:   58:A4:8B:2D:F4:C0:F7:A0:31:B5:F6:90:0E:86:21:14:D7:CB:2B:57
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       7DFF4B06662542FBB9E0F074893A3E9047E0EBA6
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31313a3a2f34382d3438203d3e203236323130.roa
Signing time:             Tue 04 Feb 2025 18:17:50 +0000
ROA not before:           Tue 04 Feb 2025 18:12:50 +0000
ROA not after:            Tue 03 Feb 2026 18:17:50 +0000
asID:                     26210
IP address blocks:        2800:88:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ff:4b:06:66:25:42:fb:b9:e0:f0:74:89:3a:3e:90:47:e0:eb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Feb  4 18:12:50 2025 GMT
            Not After : Feb  3 18:17:50 2026 GMT
        Subject: CN=58A48B2DF4C0F7A031B5F6900E862114D7CB2B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:1f:bb:b8:89:b1:b9:80:2a:7f:d1:75:92:
                    af:28:a1:b7:bb:48:97:8b:57:76:7d:0a:67:8b:62:
                    97:ec:6d:05:b3:35:85:1b:65:e5:b7:82:19:12:70:
                    e5:36:37:63:66:b3:c2:4a:f9:43:9f:5d:13:b5:b8:
                    20:44:e4:4b:e4:8f:6d:38:c0:6d:13:db:7a:36:cd:
                    eb:fb:03:42:d4:4d:a8:7b:3b:43:20:df:b7:fd:97:
                    36:c8:59:d5:7c:05:73:19:ef:65:d0:20:77:0a:a0:
                    56:60:0c:fe:0c:45:35:cb:0a:63:d5:49:74:25:37:
                    0d:78:89:81:8f:10:c6:64:0a:9c:ef:fe:0c:15:ef:
                    99:17:1a:17:c0:85:80:66:10:0f:0c:68:17:ec:0c:
                    43:6c:aa:f3:9e:4c:b0:fa:f1:d6:57:66:30:8b:f1:
                    53:ef:2f:1c:b4:14:e8:ac:ce:70:31:7f:58:8b:a4:
                    9c:6d:05:97:33:dd:6c:ff:ce:1f:70:f2:40:de:6a:
                    dd:86:b1:cf:52:4f:29:15:c8:b3:53:ca:e9:c1:5c:
                    0e:c8:9a:fc:de:13:54:df:88:f8:0e:8e:b3:6f:e6:
                    d2:f3:d0:69:bb:d2:d4:bc:0a:2b:26:5d:79:b6:ac:
                    81:11:a0:49:34:7e:d6:27:dd:a7:aa:cb:20:d7:33:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A4:8B:2D:F4:C0:F7:A0:31:B5:F6:90:0E:86:21:14:D7:CB:2B:57
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31313a3a2f34382d3438203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:cc:7a:28:cf:e1:8d:79:d3:62:e4:44:d4:7e:6d:51:f8:
         81:9c:fc:56:14:22:56:cb:1a:7e:5d:53:e4:5f:a0:4c:35:ed:
         b0:bc:83:ee:75:b9:2c:2e:2d:cc:9b:46:5a:f5:fc:7d:1c:65:
         45:bf:20:27:0b:92:5a:cd:43:e4:53:55:dd:50:5b:37:e8:07:
         d5:41:4b:0b:35:47:50:89:e2:63:42:81:82:ad:1a:0f:6b:08:
         9f:4e:9d:b9:f1:df:d2:84:6e:02:18:5c:81:9b:fc:b1:33:70:
         c2:54:63:5b:30:4f:38:0b:09:c3:9f:10:a9:8a:44:ff:68:97:
         24:65:51:b8:25:89:56:62:f5:3f:5f:df:22:02:8e:20:ea:e3:
         cb:14:1b:0c:99:51:99:58:02:0d:a3:1b:5c:fc:32:37:20:d0:
         0a:84:3a:9a:98:00:a2:51:0a:99:1b:7b:23:74:5b:61:57:9d:
         89:09:b5:e0:68:25:a3:d9:5b:8d:12:5e:36:22:59:9d:b9:01:
         db:b7:3e:a0:49:ab:67:fb:47:81:b1:3b:3a:d3:49:eb:22:44:
         7f:63:6c:46:7a:d3:a9:b1:8e:7d:bf:41:d0:ab:b7:a8:ac:41:
         d6:06:b4:90:1e:61:0a:43:d3:c9:cf:cc:1e:2e:46:6f:10:37:
         a5:ff:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:55:58 2025 by rpki-client