Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a653a3a2f34372d3438203d3e203236323130.roa
File:                     323830303a38383a653a3a2f34372d3438203d3e203236323130.roa (raw, json)
Hash identifier:          iGbe0BccLEKntuSrjlWIWXkL+HMWFPxpO02cI6+Olb8=
Subject key identifier:   3E:06:7F:E1:4D:31:F0:D8:0A:31:EA:A4:AF:CD:96:58:99:14:2D:C2
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       125454EDA77CB020E1E52AA53FC10985FC80A965
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a653a3a2f34372d3438203d3e203236323130.roa
Signing time:             Tue 04 Feb 2025 18:17:51 +0000
ROA not before:           Tue 04 Feb 2025 18:12:51 +0000
ROA not after:            Tue 03 Feb 2026 18:17:51 +0000
asID:                     26210
IP address blocks:        2800:88:e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:54:54:ed:a7:7c:b0:20:e1:e5:2a:a5:3f:c1:09:85:fc:80:a9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Feb  4 18:12:51 2025 GMT
            Not After : Feb  3 18:17:51 2026 GMT
        Subject: CN=3E067FE14D31F0D80A31EAA4AFCD965899142DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:57:e4:b5:d4:bb:df:48:45:9c:60:51:44:
                    77:f9:0f:cc:87:96:5b:af:2a:27:c5:f5:31:c6:9d:
                    4e:d2:60:6b:7e:22:07:7e:4b:95:41:3a:ed:85:6b:
                    93:c5:52:82:ea:ce:72:9f:88:a1:7d:74:af:e8:ef:
                    ec:08:22:db:dd:77:56:9e:8d:e4:77:1e:c4:cb:33:
                    95:32:6f:f6:74:18:99:73:73:8a:11:b4:8c:f1:98:
                    c3:65:91:44:98:dd:86:e1:f7:29:30:cb:35:a3:eb:
                    b4:a3:d5:ed:89:f0:6e:05:e1:55:e7:b1:46:18:4f:
                    2d:6a:66:31:50:a6:27:c8:39:5f:20:a0:65:d9:94:
                    cb:c1:ab:9c:ab:2e:1d:20:1c:d7:c8:bf:ae:97:b8:
                    cd:52:47:76:ee:42:fd:c6:17:b8:e5:08:31:08:c3:
                    3d:b3:ed:25:d3:c0:37:14:d0:33:b8:59:c5:5a:02:
                    2d:44:e2:f6:30:63:b7:b6:8b:92:00:b7:94:ea:10:
                    99:5e:17:7c:e2:bf:26:e1:b2:b0:38:ef:46:e4:ce:
                    fc:c9:60:f4:bc:81:78:03:b2:e5:d1:13:bc:04:f1:
                    cd:a8:0a:08:95:f3:17:88:9f:d4:04:3c:e9:a6:90:
                    20:81:1b:0d:ec:58:e0:43:35:b0:c0:06:d7:97:f0:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:06:7F:E1:4D:31:F0:D8:0A:31:EA:A4:AF:CD:96:58:99:14:2D:C2
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a653a3a2f34372d3438203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:e::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:ca:53:4f:d8:56:11:c4:53:90:29:ee:49:4c:6e:fb:fb:c0:
         bf:92:00:cb:91:9a:e9:41:02:d9:b5:43:30:dc:7e:82:1f:36:
         41:76:b6:14:7c:5f:bb:34:25:3f:2a:b2:91:16:f8:6a:23:20:
         4a:94:58:1c:6c:19:77:04:b1:20:61:99:f0:0c:18:0d:3d:5d:
         f0:5a:28:fe:73:97:c1:0c:4c:8b:2c:e3:ef:32:b2:00:5b:3f:
         40:50:2f:5f:6c:d0:25:50:b0:22:ee:ea:4a:e1:25:c7:88:44:
         aa:31:b6:1c:d3:60:e6:b3:4b:b8:47:49:63:ff:ff:da:21:ac:
         3f:34:48:7d:75:7e:d5:b4:35:2a:b7:2b:54:39:a5:92:7a:fe:
         ab:cb:5d:c7:79:e4:ab:6d:b7:0b:e0:8c:ce:34:6b:e2:db:61:
         44:c9:51:f6:17:63:e2:14:a0:5c:2a:dd:11:c2:24:2d:2f:49:
         10:51:d6:98:46:47:63:a9:03:60:f0:e3:ad:50:3b:28:d0:f0:
         90:4e:39:f2:13:e3:92:f7:f4:60:43:80:2e:67:cb:3d:04:53:
         89:32:c3:f3:51:04:80:bb:6b:71:5a:1f:80:e7:ad:87:43:04:
         78:35:b0:d1:5f:da:3c:4b:86:9b:aa:dc:cb:9e:a4:f6:4e:d0:
         05:53:1a:38
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUElRU7ad8sCDh5SqlP8EJhfyAqWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUyMzk4RTIyOENBRjgyNjNENjU0QzFGMzVBMTU1MjEz
NjM0Qjg0MDAeFw0yNTAyMDQxODEyNTFaFw0yNjAyMDMxODE3NTFaMDMxMTAvBgNV
BAMTKDNFMDY3RkUxNEQzMUYwRDgwQTMxRUFBNEFGQ0Q5NjU4OTkxNDJEQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjFfktdS730hFnGBRRHf5D8yH
lluvKifF9THGnU7SYGt+Igd+S5VBOu2Fa5PFUoLqznKfiKF9dK/o7+wIItvdd1ae
jeR3HsTLM5Uyb/Z0GJlzc4oRtIzxmMNlkUSY3Ybh9ykwyzWj67Sj1e2J8G4F4VXn
sUYYTy1qZjFQpifIOV8goGXZlMvBq5yrLh0gHNfIv66XuM1SR3buQv3GF7jlCDEI
wz2z7SXTwDcU0DO4WcVaAi1E4vYwY7e2i5IAt5TqEJleF3zivybhsrA470bkzvzJ
YPS8gXgDsuXRE7wE8c2oCgiV8xeIn9QEPOmmkCCBGw3sWOBDNbDABteX8IehAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUPgZ/4U0x8NgKMeqkr82WWJkULcIwHwYDVR0j
BBgwFoAUDiOY4ijK+CY9ZUwfNaFVITY0uEAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRUNERTc1MDQ3QUFEMTM1QzBBNDdGRTFERTZENkIwRDNG
RTFCMDY3MUREQjVFRjkzQTEyNTQ0NDk3Qzk0NDE1LzAvMEUyMzk4RTIyOENBRjgy
NjNENjU0QzFGMzVBMTU1MjEzNjM0Qjg0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTIzOThFMjI4Q0FGODI2M0Q2
NTRDMUYzNUExNTUyMTM2MzRCODQwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0VDREU3NTA0N0FBRDEzNUMwQTQ3RkUxREU2RDZCMEQzRkUxQjA2NzFE
REI1RUY5M0ExMjU0NDQ5N0M5NDQxNS8wLzMyMzgzMDMwM2EzODM4M2E2NTNhM2Ey
ZjM0MzcyZDM0MzgyMDNkM2UyMDMyMzYzMjMxMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEoAACIAA4w
DQYJKoZIhvcNAQELBQADggEBAETKU0/YVhHEU5Ap7klMbvv7wL+SAMuRmulBAtm1
QzDcfoIfNkF2thR8X7s0JT8qspEW+GojIEqUWBxsGXcEsSBhmfAMGA09XfBaKP5z
l8EMTIss4+8ysgBbP0BQL19s0CVQsCLu6krhJceIRKoxthzTYOazS7hHSWP//9oh
rD80SH11ftW0NSq3K1Q5pZJ6/qvLXcd55KtttwvgjM40a+LbYUTJUfYXY+IUoFwq
3RHCJC0vSRBR1phGR2OpA2Dw461QOyjQ8JBOOfIT45L39GBDgC5nyz0EU4kyw/NR
BIC7a3FaH4DnrYdDBHg1sNFf2jxLhpuq3MuepPZO0AVTGjg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:08 2025 by rpki-client