Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3230303a3a2f34382d3438203d3e20333938393437.roa
File:                     323830303a6231303a3230303a3a2f34382d3438203d3e20333938393437.roa (raw, json)
Hash identifier:          JgH+zlQ/O9kQMLl7rq5F1jF9otgPVFv3IW1IgtXllHE=
Subject key identifier:   EE:6F:AA:09:3F:BB:62:7D:8A:03:47:20:A3:E0:A7:4B:61:C9:BB:8D
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       4DFF2C318EE562420DDA0BF5B45021F7EC781DAC
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3230303a3a2f34382d3438203d3e20333938393437.roa
Signing time:             Thu 26 Dec 2024 19:05:00 +0000
ROA not before:           Thu 26 Dec 2024 19:00:00 +0000
ROA not after:            Thu 25 Dec 2025 19:05:00 +0000
asID:                     398947
IP address blocks:        2800:b10:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 22:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ff:2c:31:8e:e5:62:42:0d:da:0b:f5:b4:50:21:f7:ec:78:1d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Dec 26 19:00:00 2024 GMT
            Not After : Dec 25 19:05:00 2025 GMT
        Subject: CN=EE6FAA093FBB627D8A034720A3E0A74B61C9BB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:2a:ff:74:5f:60:24:f7:d5:56:83:56:3f:
                    ca:cd:3c:be:38:fc:0f:af:4f:cd:33:83:ec:00:b1:
                    13:06:be:94:14:3c:00:14:7e:e0:ec:a3:91:d2:3b:
                    23:80:86:2b:82:3d:2b:6c:2b:ad:82:18:eb:81:60:
                    85:9b:71:5b:bb:30:e7:14:b9:3a:45:73:fb:ff:bf:
                    f5:ee:f7:84:7f:98:ce:bd:8d:3a:bf:a9:7e:13:7f:
                    28:66:f4:9a:2b:4a:28:2a:d8:d2:ae:e8:54:ab:04:
                    d3:a7:59:e9:24:ed:90:2d:52:e5:07:51:59:06:40:
                    a8:65:f4:5c:97:bc:bd:c5:13:00:84:7f:e9:b0:81:
                    9f:a6:1a:8b:8f:76:e6:bf:b3:28:f7:a6:a3:c0:bd:
                    22:47:a1:b2:53:60:2e:5a:15:44:a9:d4:03:26:95:
                    7f:f1:9c:25:5a:c8:56:05:e5:19:d6:2e:fc:5e:b6:
                    1c:d9:69:b6:a1:53:98:79:2b:60:db:fc:2f:39:7e:
                    8b:9f:72:f1:da:df:d6:8b:d4:bb:5c:72:46:60:1f:
                    bb:f1:2b:d2:32:8d:a0:8c:70:58:32:e7:8e:a4:4f:
                    da:60:af:e8:b8:99:9e:2c:ee:0f:d5:f8:ef:d0:30:
                    d4:97:e1:2e:dc:b1:2e:9c:a2:8a:3d:cc:81:cc:cc:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6F:AA:09:3F:BB:62:7D:8A:03:47:20:A3:E0:A7:4B:61:C9:BB:8D
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3230303a3a2f34382d3438203d3e20333938393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b10:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:a4:8f:0e:95:81:25:bc:f0:51:50:9c:fe:4a:fb:75:76:
         aa:ea:7d:80:df:31:28:37:db:f8:75:0a:f5:52:1f:22:fd:71:
         c4:59:fb:5e:83:07:e5:f6:2a:dd:23:be:66:ca:86:97:56:7b:
         f8:d3:85:59:19:0d:bb:1d:fe:f7:0e:e1:05:61:1e:12:6f:3c:
         9a:be:69:43:b8:88:a5:76:80:a1:dc:5f:f9:fa:7b:8d:2f:04:
         44:76:b8:f6:5d:1f:64:fb:ce:fb:17:48:29:30:20:45:dc:dc:
         d1:96:a4:f2:1c:03:4d:9e:ae:13:0e:0f:16:f1:8c:83:cc:95:
         f5:44:e3:8e:e4:a0:c6:45:3c:8b:92:b1:6b:98:0c:e5:f4:60:
         69:90:35:35:3e:df:53:08:4a:09:a7:49:c7:d9:57:34:28:18:
         3b:5b:70:ca:27:16:e2:75:f2:58:a4:69:79:ef:23:0b:4f:d2:
         4e:a2:42:1f:fd:2a:4a:c9:f3:b7:ed:7c:a4:fb:26:9d:6e:17:
         80:11:ea:65:70:5a:a6:28:09:ac:4a:3f:ce:19:53:1e:9a:d5:
         f6:40:a8:0e:01:2b:f7:99:ac:53:cf:44:32:03:af:54:c6:54:
         9f:e7:f6:d2:55:da:28:21:44:19:8a:d5:41:cf:87:b7:d0:9a:
         e1:ce:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 20:06:41 2025 by rpki-client