Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/323830303a3939303a3a2f33322d3332203d3e20323632313637.roa
File:                     323830303a3939303a3a2f33322d3332203d3e20323632313637.roa (raw, json)
Hash identifier:          zul00KV+KPu/dOakTUDcREF4my+codRji+f6huBwXGo=
Subject key identifier:   2D:57:A5:1E:81:5F:B7:4D:C0:FE:A7:72:92:3E:FE:C5:81:53:5A:C3
Certificate issuer:       /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial:       2F35632F1ACBBFA7257CE62DE6030A7A7F19A00B
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/323830303a3939303a3a2f33322d3332203d3e20323632313637.roa
Signing time:             Tue 04 Feb 2025 18:31:30 +0000
ROA not before:           Tue 04 Feb 2025 18:26:30 +0000
ROA not after:            Tue 03 Feb 2026 18:31:30 +0000
asID:                     262167
IP address blocks:        2800:990::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 01:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:35:63:2f:1a:cb:bf:a7:25:7c:e6:2d:e6:03:0a:7a:7f:19:a0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
        Validity
            Not Before: Feb  4 18:26:30 2025 GMT
            Not After : Feb  3 18:31:30 2026 GMT
        Subject: CN=2D57A51E815FB74DC0FEA772923EFEC581535AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:ab:73:6c:e7:90:61:94:82:60:40:45:a0:
                    86:e7:05:4b:1b:96:9a:06:df:c1:3e:71:3a:81:d0:
                    f3:eb:86:1f:57:cc:2f:35:35:74:94:15:7c:5b:d8:
                    21:4e:fc:14:47:c0:e0:99:48:38:04:03:2c:aa:9b:
                    2e:4c:81:ec:c3:78:9c:88:b6:9c:43:82:b2:9c:b9:
                    5f:d7:70:1f:6b:c9:27:80:c0:ad:d9:91:52:2e:c2:
                    47:ad:31:06:fa:9d:13:3c:f1:22:10:db:50:86:b4:
                    e9:a8:82:69:74:52:23:b9:31:86:9e:b1:6c:40:76:
                    3d:fe:fe:96:15:aa:97:ed:18:0d:b5:99:52:4f:b4:
                    6f:b9:2c:49:23:99:8d:13:74:60:23:f4:f2:79:a3:
                    9c:f0:a8:88:46:5c:9c:08:5b:e1:07:d3:54:47:12:
                    c2:68:1f:32:a8:21:71:ea:f5:3e:08:c2:2a:67:d7:
                    49:d7:af:61:4b:17:bf:d9:6a:b4:54:67:72:94:26:
                    9d:b3:b4:f5:01:03:e1:f9:28:8b:16:97:1c:34:a4:
                    15:a7:d2:64:97:b8:8b:2c:ac:41:c5:d0:50:0f:06:
                    d0:51:59:4a:4b:1f:79:cf:06:6f:7c:fa:8b:2c:0a:
                    10:03:0f:b4:ed:2d:d7:a9:f0:99:e5:48:b9:d9:c3:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:57:A5:1E:81:5F:B7:4D:C0:FE:A7:72:92:3E:FE:C5:81:53:5A:C3
            X509v3 Authority Key Identifier:
                keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/323830303a3939303a3a2f33322d3332203d3e20323632313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:990::/32

    Signature Algorithm: sha256WithRSAEncryption
         db:2c:92:e5:71:52:b1:de:7a:36:b7:9c:d2:de:50:eb:5d:31:
         43:d5:66:bb:a8:98:4c:1a:9a:2f:dc:57:96:b2:86:5c:57:fd:
         d5:eb:a7:30:22:b9:04:61:e6:e0:a1:dd:e0:c8:1a:1e:5a:bb:
         70:00:03:a6:01:46:3d:1d:88:ed:c8:68:e2:d3:f0:39:07:5a:
         53:de:2c:c1:af:0d:c9:e6:f6:a2:52:d2:0b:e8:58:e7:ab:c8:
         51:23:65:ba:e8:51:5b:0e:8c:95:a7:b7:5b:77:8c:45:b6:f3:
         55:09:de:f8:8e:52:46:64:61:4b:0c:2c:2a:dd:d2:af:92:82:
         52:11:da:55:12:06:52:43:e4:82:88:9c:66:c7:63:47:b5:1b:
         84:1b:59:62:db:63:70:e0:7e:43:92:e0:f1:96:31:01:a6:23:
         f6:48:1d:ea:2b:df:6f:36:aa:c0:c6:f4:ae:19:54:a7:dc:fb:
         d7:1d:62:3c:00:e9:ae:e4:f0:b5:7c:f7:84:12:a2:e9:47:9a:
         60:4f:74:d0:01:9b:4b:b5:f7:d4:7e:81:e1:c7:b5:78:a1:f6:
         c9:e4:df:92:b0:e5:7e:78:55:2c:f0:12:bf:7d:28:d1:71:59:
         7a:ce:15:38:c3:29:19:31:1d:88:c5:09:e8:ab:c0:12:cc:d5:
         25:bb:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:37:04 2025 by rpki-client