Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa
File:                     323830303a3261303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier:          QPtgaZCQ+eeD7spF2h2B5EhHFkVp8uT0WOuLAFM9oYo=
Subject key identifier:   4F:AC:EC:49:99:C3:18:AE:74:CD:9F:37:E5:B9:12:1A:69:D1:15:2F
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       4146AE6D242DC41D9CF43E2B280F3AF331D3C03C
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:11:24 +0000
ROA not before:           Tue 04 Feb 2025 18:06:24 +0000
ROA not after:            Tue 03 Feb 2026 18:11:24 +0000
asID:                     27947
IP address blocks:        2800:2a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:46:ae:6d:24:2d:c4:1d:9c:f4:3e:2b:28:0f:3a:f3:31:d3:c0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:24 2025 GMT
            Not After : Feb  3 18:11:24 2026 GMT
        Subject: CN=4FACEC4999C318AE74CD9F37E5B9121A69D1152F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:54:07:ee:a0:c5:b8:71:f9:49:a5:8b:63:
                    35:9a:e0:3f:6c:1d:74:47:a7:f0:78:0b:e9:c7:0c:
                    f6:6b:a0:ee:79:a0:30:eb:11:a5:87:2d:88:50:43:
                    97:a5:09:66:d6:d2:e4:ea:c7:6f:54:11:51:32:6a:
                    51:05:4e:f4:df:85:af:7a:e1:70:5b:35:63:1d:23:
                    bf:03:fe:0f:b8:7c:a0:ac:62:fa:43:b8:c8:19:30:
                    42:ad:96:1f:95:17:28:e6:ef:94:06:5d:5c:ec:d0:
                    ad:e9:08:af:33:f5:3d:ed:54:84:bb:6a:68:5d:9a:
                    92:fa:30:33:42:65:12:dc:cd:af:e3:13:f5:f4:b7:
                    72:70:b1:a6:de:19:ff:6c:73:5d:50:78:85:9f:8b:
                    14:ca:2c:09:58:8d:92:78:5b:35:25:1a:2b:98:db:
                    57:a5:57:46:d1:06:1f:3a:9a:ef:d1:c8:af:31:ea:
                    1e:02:8a:09:98:60:42:17:cd:c4:8b:80:10:8d:76:
                    a8:bd:57:62:5a:3b:db:ff:3a:1c:2d:57:38:56:5a:
                    0e:25:21:9c:2c:c0:53:60:ea:98:50:71:b9:ab:3b:
                    f2:71:44:88:e2:13:29:73:c4:d0:e6:af:b8:b9:ed:
                    26:69:75:de:0a:48:77:a3:7c:e7:8c:d2:3f:74:46:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:EC:49:99:C3:18:AE:74:CD:9F:37:E5:B9:12:1A:69:D1:15:2F
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:4d:46:21:09:fc:d7:27:4e:44:ec:8c:69:f9:b9:30:ad:
         3d:d0:01:f2:c4:4c:c2:fc:b8:d3:1f:7e:10:13:94:a4:2d:75:
         4f:38:f8:9b:25:b2:1f:47:72:01:08:97:61:a0:39:70:58:d8:
         40:99:c8:42:db:55:56:6e:4a:a4:cc:bd:a8:5e:1f:2d:64:dd:
         07:cf:92:b4:f3:53:a7:37:c7:c8:aa:87:29:6c:be:94:18:2c:
         36:87:7f:ab:de:ed:30:ca:c7:06:a9:9e:cb:93:75:8f:84:a7:
         92:d7:d2:12:da:30:67:12:ce:a6:8f:32:2f:1b:7c:b2:e2:99:
         14:7e:41:3c:4b:da:27:e3:ce:45:f0:b0:f1:a1:ff:f2:26:37:
         f1:ee:1f:9e:f1:93:8f:ca:7f:45:a3:63:ea:3a:3e:53:df:38:
         47:36:2e:0a:f2:b9:15:22:3a:16:5d:34:4f:e7:0e:63:cb:b0:
         0d:97:7f:aa:26:8f:7f:22:99:03:40:cd:e6:e2:cb:c9:98:2e:
         fb:16:94:43:05:2b:44:f2:eb:11:d2:01:08:4b:91:a1:97:45:
         8d:cc:44:a9:d8:da:76:76:69:43:bb:f7:54:9f:32:b6:9c:e1:
         7c:67:c2:d0:9b:0f:1d:b3:09:28:c2:f9:e9:f6:4f:d3:cd:8f:
         97:9c:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:29 2025 by rpki-client