Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/323830303a3238303a343030313a3a2f34382d3634203d3e203230393430.roa
File:                     323830303a3238303a343030313a3a2f34382d3634203d3e203230393430.roa (raw, json)
Hash identifier:          Ak3aiIjbHstdY8wf0OR2sAtyBePoMtwQHUEGnMrNtJg=
Subject key identifier:   75:13:CE:FF:31:C3:6E:10:DB:78:1F:40:6C:F7:06:7E:B4:5A:99:71
Certificate issuer:       /CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
Certificate serial:       59AC9B189E4FE18E614B0DA63776C61C1338D41A
Authority key identifier: 83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/323830303a3238303a343030313a3a2f34382d3634203d3e203230393430.roa
Signing time:             Tue 04 Feb 2025 18:42:56 +0000
ROA not before:           Tue 04 Feb 2025 18:37:56 +0000
ROA not after:            Tue 03 Feb 2026 18:42:56 +0000
asID:                     20940
IP address blocks:        2800:280:4001::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ac:9b:18:9e:4f:e1:8e:61:4b:0d:a6:37:76:c6:1c:13:38:d4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
        Validity
            Not Before: Feb  4 18:37:56 2025 GMT
            Not After : Feb  3 18:42:56 2026 GMT
        Subject: CN=7513CEFF31C36E10DB781F406CF7067EB45A9971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:2a:a8:b0:22:31:24:9c:b7:29:cf:e4:62:
                    ec:b1:c8:c3:49:28:99:ca:90:d2:7e:e7:3b:8c:ee:
                    97:d7:18:a8:45:be:71:8b:a4:bb:74:d9:ee:b2:94:
                    e5:06:b2:66:76:fe:6b:8a:64:e9:ec:7d:cb:4e:d9:
                    2f:fe:81:e1:de:ab:17:14:67:a4:4e:fb:43:4f:3f:
                    a4:27:b1:d8:9a:da:ec:7c:d9:e9:2d:a7:3f:f7:b8:
                    80:09:bc:3c:61:d9:72:c4:5b:e6:4a:3b:78:e4:43:
                    64:53:86:f6:1a:76:d6:c7:b9:b8:b0:4b:10:24:8c:
                    0c:68:db:81:ca:dc:f4:86:21:8e:89:9e:14:7c:cc:
                    32:56:ec:7b:5a:d2:9c:e2:2d:30:06:6c:a0:91:18:
                    73:f6:fd:4b:fc:cd:e2:e4:42:c1:1c:6e:ad:66:2a:
                    78:94:22:bf:b8:4a:c8:15:93:32:b5:6f:5c:9a:a1:
                    b4:c6:12:01:a0:df:3d:2c:53:52:47:c2:c4:e1:b7:
                    f2:1a:ea:a0:26:70:f7:5e:76:da:56:31:99:ce:47:
                    e0:b0:7c:63:ad:8d:63:28:bd:e8:09:56:0a:e0:3c:
                    5d:1f:1b:17:a2:d3:ea:89:6a:16:e1:78:05:5f:28:
                    75:19:8b:55:96:2d:26:f5:c8:d4:16:e2:c3:40:1a:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:CE:FF:31:C3:6E:10:DB:78:1F:40:6C:F7:06:7E:B4:5A:99:71
            X509v3 Authority Key Identifier:
                keyid:83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/323830303a3238303a343030313a3a2f34382d3634203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:280:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:e5:46:cd:12:f3:7a:4f:f1:88:16:77:87:97:a7:d3:e0:08:
         a0:89:35:62:7d:89:3b:89:87:ce:31:39:76:4d:26:f9:11:21:
         6d:13:19:42:8f:ef:8c:01:e1:1e:ea:66:d2:e2:63:7e:69:d0:
         50:9d:33:00:28:9b:c0:a0:87:08:1b:f4:55:e2:e1:38:ba:66:
         b0:43:27:cd:d6:7c:94:1f:83:e1:64:26:26:90:d6:e7:4b:71:
         3e:c6:85:7a:36:cd:ea:35:bb:c3:cb:65:86:4f:b3:bd:e4:00:
         5e:5f:c9:36:46:80:bd:77:23:18:69:f5:73:cd:2f:57:81:3c:
         2a:cb:b5:ef:88:13:4f:a4:9d:27:d6:76:06:b5:3a:07:81:f9:
         82:7e:58:55:19:cb:b5:88:1d:09:60:f3:f5:23:d4:85:90:f4:
         0c:7a:f2:84:16:95:65:77:e8:d8:4d:fa:da:d4:42:cd:b6:9a:
         7c:87:d2:ba:1c:ee:79:57:77:00:46:70:b2:57:4b:87:3a:7d:
         76:d4:46:0f:10:bb:d7:3b:47:58:8f:e5:0e:51:e0:1e:5e:8a:
         34:7b:5e:e7:80:3f:91:eb:a8:c1:bf:76:e6:45:6b:7b:90:c0:
         94:4e:2c:6c:38:ae:ba:53:ec:5a:4b:9e:43:d9:90:0b:f7:cf:
         52:28:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:51 2025 by rpki-client