Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa
File:                     323830303a6231303a3a2f34382d3438203d3e203237383834.roa (raw, json)
Hash identifier:          oIW65vk3QVF4PdMI0RTP2SUGBq4YQ3cogBoFUDPpplY=
Subject key identifier:   AF:27:13:DE:8A:B1:BA:D9:43:69:CD:34:87:C3:0A:19:22:7B:AC:3C
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       34A7C9F6B1AD1E34ED3921182280DE284E6F8B65
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa
Signing time:             Thu 26 Dec 2024 21:35:00 +0000
ROA not before:           Thu 26 Dec 2024 21:30:00 +0000
ROA not after:            Thu 25 Dec 2025 21:35:00 +0000
asID:                     27884
IP address blocks:        2800:b10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 10 Feb 2025 03:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a7:c9:f6:b1:ad:1e:34:ed:39:21:18:22:80:de:28:4e:6f:8b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Dec 26 21:30:00 2024 GMT
            Not After : Dec 25 21:35:00 2025 GMT
        Subject: CN=AF2713DE8AB1BAD94369CD3487C30A19227BAC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:64:a3:54:13:1d:36:56:a2:3e:c0:7b:bc:
                    1c:34:7d:59:ca:81:be:ee:a3:27:89:98:fc:21:69:
                    2b:da:08:a7:e3:2e:a6:7a:72:a4:95:c6:af:bb:62:
                    a3:b0:5a:d7:de:ad:cf:fc:02:ba:68:bb:96:63:88:
                    9e:99:62:30:a0:b9:49:49:30:4d:4f:e2:c2:de:65:
                    c3:1f:00:81:25:e0:97:7f:95:5a:b8:8f:54:93:15:
                    b6:2d:42:67:73:ad:62:d7:29:ec:1a:8a:71:44:3c:
                    1c:38:e6:00:eb:04:93:19:7a:5e:7a:09:6e:8a:4a:
                    53:2e:1a:b6:fa:ab:60:ec:b8:ec:eb:99:88:22:8a:
                    d7:1a:b3:b1:39:ae:49:29:bb:7e:3b:12:3a:cd:8e:
                    83:bc:17:1b:af:2f:4e:2f:78:2d:d9:e4:ce:52:9d:
                    ac:12:f1:d6:1d:3c:b1:b0:12:fe:3d:fa:9f:bd:17:
                    52:df:86:74:63:6f:4c:df:73:01:25:8d:6b:41:98:
                    96:60:a1:15:3d:fc:36:3f:bb:07:4e:03:80:59:ed:
                    9b:de:39:c4:03:e0:eb:61:ce:d5:7b:9d:aa:9b:82:
                    47:3b:13:e5:17:cd:b8:6e:25:0d:12:84:3e:49:dc:
                    92:9e:c9:94:ec:6e:8d:37:75:6f:e1:7c:05:eb:8a:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:27:13:DE:8A:B1:BA:D9:43:69:CD:34:87:C3:0A:19:22:7B:AC:3C
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b10::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:66:f5:9e:51:27:1b:0e:2e:0c:42:b8:16:ae:32:f8:7d:5a:
         dc:d3:35:cf:b0:4f:64:3a:34:1c:e2:ea:1d:9a:a3:ef:e0:bf:
         1a:da:0e:7f:e9:36:33:62:15:f0:84:59:88:67:09:2f:70:14:
         ac:c8:dd:e5:af:61:56:77:4e:d5:27:7a:4f:89:5a:01:8f:65:
         34:23:e5:df:5d:aa:24:da:c7:47:f9:51:7b:74:64:ea:e3:73:
         b3:25:12:a3:4d:27:11:57:78:89:b3:ca:d8:3b:83:4c:a1:36:
         8d:25:10:cd:54:1a:a9:39:41:86:d4:bb:a2:3f:95:7e:01:49:
         aa:51:73:4e:b8:fb:be:33:92:a3:61:be:57:d8:f3:da:62:7e:
         18:2c:37:93:5b:c1:a8:7d:5b:ee:65:ee:30:b1:04:4f:fc:16:
         52:3b:12:80:fb:d1:c4:b2:79:40:a4:fe:67:8f:a5:66:f0:22:
         14:29:1c:6f:0d:73:00:59:dd:48:5d:59:59:3a:40:df:f5:c3:
         a7:ba:59:7d:1a:07:c6:33:af:87:b8:92:14:bd:de:c6:96:78:
         08:01:eb:18:51:39:cd:09:3f:50:31:de:11:1c:4a:da:41:8d:
         14:a8:09:50:ca:b3:58:a5:89:de:52:dc:cc:26:b9:90:21:a6:
         5f:37:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:57:15 2025 by rpki-client