Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa
File:                     323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa (raw, json)
Hash identifier:          rpoLeq0f8nbCLXdoAv5xt0TFlwmrDL0hKoGOI2tclLc=
Subject key identifier:   8E:77:8B:1B:DA:91:F7:28:21:B2:E8:AA:26:7B:D1:18:DA:CB:9D:C0
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       619D037380681396CEAFD409A8E249DDFFEDBB75
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa
Signing time:             Tue 04 Feb 2025 18:17:52 +0000
ROA not before:           Tue 04 Feb 2025 18:12:52 +0000
ROA not after:            Tue 03 Feb 2026 18:17:52 +0000
asID:                     26210
IP address blocks:        2800:88:12::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9d:03:73:80:68:13:96:ce:af:d4:09:a8:e2:49:dd:ff:ed:bb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Feb  4 18:12:52 2025 GMT
            Not After : Feb  3 18:17:52 2026 GMT
        Subject: CN=8E778B1BDA91F72821B2E8AA267BD118DACB9DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:ad:08:99:bd:ee:59:30:cf:66:e5:a7:d9:
                    9c:b3:3a:c9:19:43:5e:8a:19:88:c3:fd:66:a2:1f:
                    2e:9b:d4:7c:68:b8:67:e7:23:b0:ff:be:0e:68:3f:
                    be:72:70:77:30:ec:43:4a:9a:0c:5e:5e:59:6c:1b:
                    c3:04:86:42:56:75:6c:72:2d:9f:10:01:a6:1e:23:
                    8a:83:2d:db:88:09:e5:7b:5b:54:0a:8c:1c:dc:0d:
                    57:42:cf:80:51:f9:2b:d5:b8:4d:cc:51:b3:ba:c3:
                    cc:29:8e:ab:29:f1:44:51:55:03:9d:9a:fc:23:07:
                    52:b5:23:28:86:34:1c:57:38:47:7e:b1:b8:1c:fc:
                    9b:a7:b6:3d:d6:61:70:73:1d:29:ac:5e:29:49:3c:
                    44:9e:69:77:44:eb:f4:c5:08:69:2e:9a:fd:64:e4:
                    02:6b:cf:d4:1d:fe:79:7d:9f:6c:d3:db:51:37:71:
                    77:97:5b:81:3c:0e:55:2b:cb:e3:3b:48:8e:55:13:
                    bd:d2:d3:0c:2c:28:30:96:5c:48:90:90:27:d0:07:
                    48:3b:c2:bd:b2:2a:49:8c:74:a9:57:b7:0b:c7:21:
                    9e:15:6c:8e:75:db:ea:a5:ee:e3:82:c8:39:1e:4f:
                    5b:26:e3:b9:45:fe:f4:c2:b3:59:55:4b:68:cd:70:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:77:8B:1B:DA:91:F7:28:21:B2:E8:AA:26:7B:D1:18:DA:CB:9D:C0
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:56:0a:a5:7a:e7:0a:26:22:86:8d:e4:ad:69:94:e8:92:
         ce:9a:4b:33:25:7f:2c:46:e4:cc:38:52:0a:14:48:2d:d6:b9:
         1d:ee:47:35:be:87:22:8a:7d:3f:5b:2b:47:d8:33:a8:77:51:
         5f:6e:8e:17:36:d2:51:ea:bc:34:37:f3:05:de:c8:ce:42:20:
         e5:32:60:11:f0:fc:90:26:fd:d4:1a:bf:ac:d6:e1:65:a7:bc:
         39:cd:de:fa:3b:91:78:d7:1a:fc:fe:c0:b1:e0:39:61:8e:6c:
         e8:1c:7d:5c:03:5c:1b:89:51:36:92:23:74:9b:0b:a5:c7:e6:
         78:8a:2a:07:0d:4e:50:5a:b4:00:03:c0:0f:ae:b4:71:7d:59:
         a4:1f:0f:ae:3d:fa:e2:71:1a:a9:75:2f:c6:4e:f6:f4:6a:c2:
         f3:b6:a5:17:e0:0a:33:ae:13:75:d1:30:af:7c:ab:b5:44:87:
         60:32:7b:24:ee:39:f8:1e:a9:5a:e1:b6:25:28:62:a3:93:1e:
         33:c5:07:29:eb:5b:e8:fd:53:e3:62:06:8b:5b:2b:4a:4e:a1:
         17:48:1b:4a:e2:16:90:81:03:93:f5:2a:42:7c:fd:91:5f:91:
         83:7c:62:3f:14:2b:12:87:4c:eb:51:64:e8:c1:9d:47:76:89:
         92:c7:41:fa
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUYZ0Dc4BoE5bOr9QJqOJJ3f/tu3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUyMzk4RTIyOENBRjgyNjNENjU0QzFGMzVBMTU1MjEz
NjM0Qjg0MDAeFw0yNTAyMDQxODEyNTJaFw0yNjAyMDMxODE3NTJaMDMxMTAvBgNV
BAMTKDhFNzc4QjFCREE5MUY3MjgyMUIyRThBQTI2N0JEMTE4REFDQjlEQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2a0Imb3uWTDPZuWn2ZyzOskZ
Q16KGYjD/WaiHy6b1HxouGfnI7D/vg5oP75ycHcw7ENKmgxeXllsG8MEhkJWdWxy
LZ8QAaYeI4qDLduICeV7W1QKjBzcDVdCz4BR+SvVuE3MUbO6w8wpjqsp8URRVQOd
mvwjB1K1IyiGNBxXOEd+sbgc/Juntj3WYXBzHSmsXilJPESeaXdE6/TFCGkumv1k
5AJrz9Qd/nl9n2zT21E3cXeXW4E8DlUry+M7SI5VE73S0wwsKDCWXEiQkCfQB0g7
wr2yKkmMdKlXtwvHIZ4VbI512+ql7uOCyDkeT1sm47lF/vTCs1lVS2jNcKdvAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUjneLG9qR9yghsuiqJnvRGNrLncAwHwYDVR0j
BBgwFoAUDiOY4ijK+CY9ZUwfNaFVITY0uEAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRUNERTc1MDQ3QUFEMTM1QzBBNDdGRTFERTZENkIwRDNG
RTFCMDY3MUREQjVFRjkzQTEyNTQ0NDk3Qzk0NDE1LzAvMEUyMzk4RTIyOENBRjgy
NjNENjU0QzFGMzVBMTU1MjEzNjM0Qjg0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTIzOThFMjI4Q0FGODI2M0Q2
NTRDMUYzNUExNTUyMTM2MzRCODQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0VDREU3NTA0N0FBRDEzNUMwQTQ3RkUxREU2RDZCMEQzRkUxQjA2NzFE
REI1RUY5M0ExMjU0NDQ5N0M5NDQxNS8wLzMyMzgzMDMwM2EzODM4M2EzMTMyM2Ez
YTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzNjMyMzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASgAAIgA
EjANBgkqhkiG9w0BAQsFAAOCAQEAhLNWCqV65womIoaN5K1plOiSzppLMyV/LEbk
zDhSChRILda5He5HNb6HIop9P1srR9gzqHdRX26OFzbSUeq8NDfzBd7IzkIg5TJg
EfD8kCb91Bq/rNbhZae8Oc3e+juReNca/P7AseA5YY5s6Bx9XANcG4lRNpIjdJsL
pcfmeIoqBw1OUFq0AAPAD660cX1ZpB8Prj364nEaqXUvxk729GrC87alF+AKM64T
ddEwr3yrtUSHYDJ7JO45+B6pWuG2JShio5MeM8UHKetb6P1T42IGi1srSk6hF0gb
SuIWkIEDk/UqQnz9kV+Rg3xiPxQrEodM61Fk6MGdR3aJksdB+g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:49:28 2025 by rpki-client