Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/323030313a313337383a3a2f33322d3332203d3e203532323530.roa
File:                     323030313a313337383a3a2f33322d3332203d3e203532323530.roa (raw, json)
Hash identifier:          YmLa1Slc1iLmS+aRA/D2STKZ5npk07CRigLaWDkz4lM=
Subject key identifier:   C2:EC:32:D9:6F:72:11:1D:40:7F:7A:ED:ED:ED:76:C2:AB:F4:16:CC
Certificate issuer:       /CN=E840769E201D72D7EA098EEE7538061FBEA58116
Certificate serial:       30E26996B21563DF8C7EE30DF71E11581E728C93
Authority key identifier: E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/323030313a313337383a3a2f33322d3332203d3e203532323530.roa
Signing time:             Tue 04 Feb 2025 18:09:21 +0000
ROA not before:           Tue 04 Feb 2025 18:04:21 +0000
ROA not after:            Tue 03 Feb 2026 18:09:21 +0000
asID:                     52250
IP address blocks:        2001:1378::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 23:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e2:69:96:b2:15:63:df:8c:7e:e3:0d:f7:1e:11:58:1e:72:8c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E840769E201D72D7EA098EEE7538061FBEA58116
        Validity
            Not Before: Feb  4 18:04:21 2025 GMT
            Not After : Feb  3 18:09:21 2026 GMT
        Subject: CN=C2EC32D96F72111D407F7AEDEDED76C2ABF416CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:6b:b2:28:ab:41:f0:30:79:1a:d8:92:d7:
                    4b:32:c9:2e:7d:fc:25:1a:04:75:ff:54:19:b1:10:
                    1c:47:dd:f3:da:43:6f:45:45:5b:a2:49:a1:bd:c2:
                    21:77:2e:eb:b9:8c:00:79:0b:4d:cf:a8:0b:9a:2a:
                    50:ba:f7:9f:1f:5a:31:79:33:b2:ec:1b:39:8b:58:
                    91:57:fb:4d:f0:59:71:90:07:b0:e3:f2:bd:c6:96:
                    bf:a0:a7:63:40:61:a4:d9:3c:60:81:78:a5:1a:f0:
                    a2:8d:84:b7:df:b2:dd:90:dd:e0:05:57:b9:31:cd:
                    f8:08:54:5d:b6:d9:8e:a7:99:ed:f2:25:55:8b:ea:
                    44:f1:a9:64:be:06:0a:e8:65:ef:e8:e5:56:81:7d:
                    07:21:fa:94:2a:dc:ab:09:81:4b:f7:4d:2e:ab:e2:
                    8b:53:ed:1d:c5:a4:b2:38:5e:b0:d6:eb:51:8c:9a:
                    48:4f:9f:ba:b1:3a:2f:f5:e1:bc:e4:f9:20:72:98:
                    2a:7f:eb:62:42:3f:73:08:9a:25:44:8d:b5:fb:78:
                    3f:68:2f:f5:57:15:1a:04:76:c3:74:fb:ab:40:74:
                    27:6e:f3:f5:89:6b:69:f8:84:21:a0:bf:85:b3:9b:
                    4d:df:ae:91:36:30:fa:9f:11:10:8b:c4:15:c2:bf:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:32:D9:6F:72:11:1D:40:7F:7A:ED:ED:ED:76:C2:AB:F4:16:CC
            X509v3 Authority Key Identifier:
                keyid:E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/323030313a313337383a3a2f33322d3332203d3e203532323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1378::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:c6:42:47:54:e8:a8:df:26:d7:51:19:23:b0:02:fb:06:
         d9:a8:0a:e2:d8:87:1b:42:46:61:0a:45:f8:36:fb:3e:29:c8:
         38:85:04:fc:12:d1:a1:ad:9d:19:1c:52:8f:5b:4d:11:b7:cd:
         10:d4:d6:cd:af:8e:23:05:8c:20:91:b0:ef:e8:45:80:ab:dc:
         1f:99:5b:e3:f9:d2:70:b5:25:02:b1:f8:60:78:b1:d2:3c:62:
         33:e3:4e:12:a7:bb:2a:b9:62:26:c6:2e:8b:ca:cc:7b:ef:22:
         81:e7:93:d6:98:73:d6:9a:a4:bb:e4:d1:d8:37:6e:77:ec:06:
         a6:12:c6:57:10:4b:83:18:8a:c5:fe:e3:53:6f:28:f1:cf:a6:
         7d:83:f9:1a:b3:e2:19:70:93:25:63:e0:c4:8e:ea:69:00:42:
         21:9e:a7:9d:e6:64:81:16:6f:91:fc:de:53:dd:b4:14:d3:25:
         33:11:77:5b:fb:ca:4a:87:a1:28:91:9d:b9:f2:e2:74:ef:e8:
         c0:cf:93:3d:5a:1a:0e:b9:01:d3:c2:11:e1:e6:3d:11:5e:7c:
         bf:27:34:36:d2:79:c6:32:08:0f:29:9c:54:a6:0f:f7:2b:6c:
         41:cb:99:fb:01:85:b3:14:32:1f:8e:5e:16:15:68:28:ca:16:
         6f:f8:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:15:33 2025 by rpki-client