Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa
File:                     323830303a613032303a3a2f33322d3332203d3e203237383931.roa (raw, json)
Hash identifier:          fIpAE3sRkmwACKQ8HoLdpnLGQvOEhwUaWUNgwRoWRBw=
Subject key identifier:   E3:2C:08:92:91:C6:68:5B:B7:C6:CF:54:8C:90:A3:D6:5B:0B:15:8C
Certificate issuer:       /CN=3C181C58C943704D75823C9900C54516564C54BF
Certificate serial:       293E0F22AD0DC2D99911969F9F1396F60EA53C85
Authority key identifier: 3C:18:1C:58:C9:43:70:4D:75:82:3C:99:00:C5:45:16:56:4C:54:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa
Signing time:             Tue 04 Feb 2025 18:07:50 +0000
ROA not before:           Tue 04 Feb 2025 18:02:50 +0000
ROA not after:            Tue 03 Feb 2026 18:07:50 +0000
asID:                     27891
IP address blocks:        2800:a020::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3C181C58C943704D75823C9900C54516564C54BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3C181C58C943704D75823C9900C54516564C54BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3e:0f:22:ad:0d:c2:d9:99:11:96:9f:9f:13:96:f6:0e:a5:3c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C181C58C943704D75823C9900C54516564C54BF
        Validity
            Not Before: Feb  4 18:02:50 2025 GMT
            Not After : Feb  3 18:07:50 2026 GMT
        Subject: CN=E32C089291C6685BB7C6CF548C90A3D65B0B158C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:c3:9c:0f:93:9a:cf:a3:f1:82:80:05:4f:
                    c9:be:57:31:d7:77:a0:ac:e3:0e:eb:fd:0b:ac:77:
                    8c:19:50:69:78:05:1d:50:f0:b7:19:a1:5b:ff:99:
                    e2:68:a5:fa:b8:b9:ce:64:3d:68:fb:85:b6:9c:37:
                    f7:de:c1:34:7b:e3:38:f7:96:7d:0a:6e:39:ef:ad:
                    0d:d6:f2:6b:8b:07:4b:44:3d:7a:eb:50:63:80:36:
                    e2:4e:db:a1:52:fc:ee:c9:61:0a:c2:25:0f:7f:6b:
                    a5:68:06:2b:95:be:22:54:4b:67:e6:6d:ca:c7:0d:
                    97:10:16:bc:da:62:34:4f:1c:20:8f:7f:a0:bc:2b:
                    bf:3a:ba:c6:9f:d0:c4:32:8c:93:df:d0:75:cb:4c:
                    a2:38:63:ad:cb:b7:e4:46:39:ff:0a:42:53:46:a3:
                    36:5a:de:5d:b1:69:a5:98:f6:cf:31:ab:36:5c:22:
                    6d:68:f7:da:ed:cb:24:03:8e:a2:9f:c2:12:51:9f:
                    ad:63:5f:85:60:86:a2:9d:89:a4:be:b5:25:cb:90:
                    e1:5b:2f:dc:4d:b7:64:a4:39:de:83:71:02:32:3e:
                    66:3e:50:6b:25:62:42:44:ff:c5:5c:7e:e4:32:b9:
                    b0:0d:8d:09:a3:db:4b:a4:17:6e:d9:eb:fd:cd:c9:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:08:92:91:C6:68:5B:B7:C6:CF:54:8C:90:A3:D6:5B:0B:15:8C
            X509v3 Authority Key Identifier:
                keyid:3C:18:1C:58:C9:43:70:4D:75:82:3C:99:00:C5:45:16:56:4C:54:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3C181C58C943704D75823C9900C54516564C54BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a020::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:7f:97:39:a3:db:56:99:da:14:9a:97:4f:c6:44:77:60:
         94:47:fb:4f:6d:9c:6f:1d:b3:cc:c5:43:a5:25:b5:6b:f0:79:
         2c:f9:a3:bf:f1:45:5e:a3:ae:be:77:61:44:10:a9:c3:29:bd:
         7e:74:fd:d9:89:51:31:a2:35:7f:2a:06:e6:cf:92:9f:be:97:
         40:dd:29:2d:ef:29:4a:6b:2b:81:4b:9a:a6:46:7d:dc:7b:ad:
         e5:76:13:13:f0:9c:d9:de:6d:8c:b4:02:4d:ab:77:73:88:86:
         da:6a:aa:14:65:4f:ed:6a:4a:28:61:95:99:ed:89:73:46:00:
         a6:4e:e8:40:39:73:62:65:df:2a:b8:31:30:77:d7:1d:a5:e9:
         54:75:e8:ef:58:83:17:44:17:60:2f:61:79:d7:a7:4d:2e:e8:
         43:05:e5:a3:47:00:6b:9f:68:6c:de:be:1d:40:51:27:d1:8d:
         5c:a3:5c:cd:0b:70:5c:05:e3:b4:31:a1:47:09:19:b1:e9:ac:
         f8:08:f5:28:b2:c6:cc:48:ac:80:54:10:8e:d2:71:7c:90:b1:
         30:b7:c7:29:21:4e:14:f4:97:6b:b5:d4:72:04:5f:62:11:be:
         23:97:72:91:46:11:fa:e3:2b:f2:02:e0:bf:73:a8:ca:10:ed:
         56:07:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:17 2025 by rpki-client