Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
File:                     323830303a3561303a3a2f33322d3335203d3e203237373932.roa (raw, json)
Hash identifier:          fMY9aGGR1i+J3ji8OBR1VAd6K1Ks5NePPEASVBvqcOc=
Subject key identifier:   71:B1:2C:B3:6A:C2:5A:83:4B:80:32:92:1A:06:6D:5C:AB:CA:C7:E8
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       05FF41D5D8976AFA4C0D2010A6394641566127DF
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
Signing time:             Tue 04 Feb 2025 18:19:49 +0000
ROA not before:           Tue 04 Feb 2025 18:14:49 +0000
ROA not after:            Tue 03 Feb 2026 18:19:49 +0000
asID:                     27792
IP address blocks:        2800:5a0::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ff:41:d5:d8:97:6a:fa:4c:0d:20:10:a6:39:46:41:56:61:27:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Feb  4 18:14:49 2025 GMT
            Not After : Feb  3 18:19:49 2026 GMT
        Subject: CN=71B12CB36AC25A834B8032921A066D5CABCAC7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:b6:15:d8:c9:d1:3f:8d:cc:dd:fe:42:6e:
                    ab:9d:a7:dd:9a:4d:5b:59:50:f3:87:65:af:cf:e2:
                    04:e4:57:90:f0:9c:b6:12:01:b7:82:7d:8d:53:60:
                    a3:f0:85:6a:2d:06:84:a8:c6:35:2a:8e:7a:77:f0:
                    c5:b8:0a:46:a9:1c:ea:8f:77:27:bd:7c:54:f1:68:
                    60:b3:79:b0:36:23:fc:9b:10:1d:1a:1f:6a:f2:ff:
                    c7:f3:ab:76:a0:7d:49:ac:d4:88:91:05:cf:36:f3:
                    bf:01:34:29:ee:c1:06:5f:d8:8f:c4:41:e3:cb:26:
                    52:58:24:20:9f:87:2b:90:73:e8:1b:33:4f:25:d0:
                    19:a0:c0:d8:1d:b9:a4:44:11:38:8e:45:f6:0a:2a:
                    f5:78:db:f5:04:88:20:90:f1:b5:47:45:93:39:5b:
                    ad:97:9e:60:e0:8d:7d:ef:0f:8a:d5:db:c9:4e:fe:
                    e5:96:be:fc:23:42:85:e7:69:9d:40:33:6e:01:62:
                    9d:d2:44:9b:c5:da:fd:8a:f5:73:39:91:56:e1:e1:
                    42:03:fb:55:ef:01:a7:bf:18:71:79:ea:e4:51:f1:
                    03:8a:f3:05:01:36:e5:dd:49:c4:70:3c:49:1d:a4:
                    b0:4b:66:09:8e:51:7b:06:70:09:c7:fb:d8:f5:b8:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B1:2C:B3:6A:C2:5A:83:4B:80:32:92:1A:06:6D:5C:AB:CA:C7:E8
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:ef:dd:e1:59:4b:05:dc:26:29:35:aa:9c:53:c1:55:ec:b6:
         19:09:a3:39:c9:24:dc:ef:d9:9c:1f:e5:62:bc:69:82:f3:cd:
         01:ca:c1:61:85:ca:d2:55:a8:b9:62:94:bb:d6:99:b9:0a:e8:
         ed:f7:b7:ca:f3:67:0c:0d:a1:f0:69:6b:f8:ef:ae:25:3f:0d:
         3e:5d:14:ac:4d:9c:af:65:94:56:2f:0e:58:0c:11:63:e5:22:
         c4:2c:7f:36:11:5b:16:66:04:d2:96:7c:8c:d0:20:ea:6a:f9:
         1c:dc:92:cc:f2:d0:a3:e2:c6:c7:cd:ab:bf:bf:7e:c4:9a:fb:
         68:ba:2d:10:55:56:6e:7a:ed:b6:6a:81:77:b5:c5:ba:54:f0:
         db:02:60:0b:5b:63:8f:98:b9:e8:04:b7:31:db:a7:f2:d4:c9:
         3e:18:d5:9e:44:e1:75:9b:05:ab:b3:68:71:b9:46:19:86:9a:
         d7:60:2f:5c:9c:20:94:d4:18:01:08:72:52:d9:9a:34:6b:22:
         d2:7e:80:77:a1:a0:35:4d:bf:7a:49:44:42:98:e3:84:7d:c7:
         02:a6:9a:6a:d0:00:de:54:28:6e:a9:52:70:cb:3d:c2:a7:c8:
         52:81:84:12:02:98:09:27:1a:5c:ab:90:89:82:62:00:69:2d:
         4e:98:02:40
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUBf9B1diXavpMDSAQpjlGQVZhJ98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzRjlBNkJEMTQ5QkIyQ0I3NjI3RjNCMkU1Qjc0MjlD
NTVCN0JGNjAeFw0yNTAyMDQxODE0NDlaFw0yNjAyMDMxODE5NDlaMDMxMTAvBgNV
BAMTKDcxQjEyQ0IzNkFDMjVBODM0QjgwMzI5MjFBMDY2RDVDQUJDQUM3RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkobYV2MnRP43M3f5Cbqudp92a
TVtZUPOHZa/P4gTkV5DwnLYSAbeCfY1TYKPwhWotBoSoxjUqjnp38MW4CkapHOqP
dye9fFTxaGCzebA2I/ybEB0aH2ry/8fzq3agfUms1IiRBc82878BNCnuwQZf2I/E
QePLJlJYJCCfhyuQc+gbM08l0BmgwNgduaREETiORfYKKvV42/UEiCCQ8bVHRZM5
W62XnmDgjX3vD4rV28lO/uWWvvwjQoXnaZ1AM24BYp3SRJvF2v2K9XM5kVbh4UID
+1XvAae/GHF56uRR8QOK8wUBNuXdScRwPEkdpLBLZgmOUXsGcAnH+9j1uDcTAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUcbEss2rCWoNLgDKSGgZtXKvKx+gwHwYDVR0j
BBgwFoAUrz+aa9FJuyy3Yn87Llt0KcVbe/YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNUU1MkI3QjJFMzlCMUJFRkQ5MkY2REE1RTBDNUU2NDE0
Mzk2QkQ4QzEzMzVFMjM0MDYyQzI5Rjc2QTM4RjNBLzAvQUYzRjlBNkJEMTQ5QkIy
Q0I3NjI3RjNCMkU1Qjc0MjlDNTVCN0JGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjNGOUE2QkQxNDlCQjJDQjc2
MjdGM0IyRTVCNzQyOUM1NUI3QkY2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjVFNTJCN0IyRTM5QjFCRUZEOTJGNkRBNUUwQzVFNjQxNDM5NkJEOEMx
MzM1RTIzNDA2MkMyOUY3NkEzOEYzQS8wLzMyMzgzMDMwM2EzNTYxMzAzYTNhMmYz
MzMyMmQzMzM1MjAzZDNlMjAzMjM3MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAFoDANBgkq
hkiG9w0BAQsFAAOCAQEAEe/d4VlLBdwmKTWqnFPBVey2GQmjOckk3O/ZnB/lYrxp
gvPNAcrBYYXK0lWouWKUu9aZuQro7fe3yvNnDA2h8Glr+O+uJT8NPl0UrE2cr2WU
Vi8OWAwRY+UixCx/NhFbFmYE0pZ8jNAg6mr5HNySzPLQo+LGx82rv79+xJr7aLot
EFVWbnrttmqBd7XFulTw2wJgC1tjj5i56AS3Mdun8tTJPhjVnkThdZsFq7NocblG
GYaa12AvXJwglNQYAQhyUtmaNGsi0n6Ad6GgNU2/eklEQpjjhH3HAqaaatAA3lQo
bqlScMs9wqfIUoGEEgKYCScaXKuQiYJiAGktTpgCQA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:05 2025 by rpki-client