Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3133393a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a3133393a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          I3pbwriz+d9dy+ah5UPAscZd0vR4nXWmTUw2v54+5po=
Subject key identifier:   BB:C2:ED:E8:97:51:85:D5:E5:A1:6C:57:5A:2A:53:28:A6:26:3D:06
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5A2009A178E455B2F43382FF96D857A902E1AE5E
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3133393a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 31 Jul 2025 13:55:00 +0000
ROA not before:           Thu 31 Jul 2025 13:50:00 +0000
ROA not after:            Thu 30 Jul 2026 13:55:00 +0000
asID:                     18678
IP address blocks:        2800:310:139::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:20:09:a1:78:e4:55:b2:f4:33:82:ff:96:d8:57:a9:02:e1:ae:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jul 31 13:50:00 2025 GMT
            Not After : Jul 30 13:55:00 2026 GMT
        Subject: CN=BBC2EDE8975185D5E5A16C575A2A5328A6263D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:6e:25:9c:20:d6:9d:1f:95:1d:fe:fd:e1:
                    cb:0e:c8:a9:c9:b1:61:4a:9e:d4:d0:7b:81:52:43:
                    b2:42:21:79:8d:7a:bf:c1:cd:c5:ce:e6:5a:82:1a:
                    71:b3:24:f4:b0:d0:9f:d6:42:05:39:de:d5:db:f2:
                    05:eb:a9:43:d0:0b:8c:39:c0:b6:5e:af:5b:59:6c:
                    4e:7f:88:79:2d:d6:63:1f:03:cc:0b:00:fa:90:77:
                    34:13:ea:7b:fa:29:e1:d1:f9:48:8f:31:38:e8:25:
                    57:fc:a8:e6:bf:a1:4f:55:17:d7:46:79:c2:5c:e2:
                    db:da:d9:f3:e2:ff:b5:2d:a3:ca:15:51:4b:44:96:
                    42:25:be:81:38:d9:fb:ea:61:3a:96:5f:6b:cd:53:
                    42:5d:da:74:00:ae:1d:d5:55:7b:68:ec:f4:3d:19:
                    9f:d4:47:ae:fa:f6:50:98:1f:72:37:46:49:71:5f:
                    28:48:3b:e2:01:e7:ac:b4:9f:cf:b6:70:aa:f4:a0:
                    bf:9d:e1:26:bb:56:d7:30:ab:a2:5c:c6:d1:5f:5f:
                    44:80:3e:44:5e:b4:8b:82:c4:58:34:79:22:56:85:
                    aa:77:ab:5a:1a:c5:96:7f:75:8d:a2:0d:0c:b0:55:
                    d5:7a:1c:21:1b:8f:1e:e8:5e:a2:97:89:37:45:0a:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C2:ED:E8:97:51:85:D5:E5:A1:6C:57:5A:2A:53:28:A6:26:3D:06
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3133393a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:139::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:63:3a:da:54:b8:18:59:2c:82:9a:d2:50:44:3d:5b:81:
         91:29:4d:f9:07:ed:ea:2f:92:8f:d1:71:89:a9:5a:4c:d3:7f:
         e7:58:73:37:7c:bb:67:a8:3b:8d:29:7c:eb:76:3d:ef:73:76:
         58:97:78:6d:54:ed:84:b6:45:18:1f:b0:83:b2:c5:6c:dd:ae:
         51:00:56:69:34:1d:bb:04:75:b4:55:4d:43:cb:c6:8e:ed:29:
         01:9f:94:83:8f:73:10:e8:5c:fe:9b:cc:aa:1b:d9:96:05:ef:
         ad:79:fe:31:da:a3:97:61:51:d6:cc:4b:92:56:1d:a9:60:d1:
         f9:a6:02:15:b9:ab:9f:2c:bd:08:d2:70:ba:e4:bc:b2:c8:ef:
         08:d0:14:6d:d0:46:c7:80:8f:a2:c5:9a:a1:ac:85:24:98:cd:
         f4:a4:01:72:4d:50:48:de:43:6c:19:f3:85:27:11:79:ec:f5:
         50:43:df:c6:c0:99:ee:14:9a:50:05:d5:01:ca:c3:32:08:06:
         12:c7:9b:d3:f2:8d:ff:93:a7:2e:72:ed:5f:76:55:c7:09:78:
         cc:10:a2:47:e1:e1:24:fe:a3:af:f8:92:66:52:a3:9f:cb:4d:
         ef:8d:06:3d:27:f0:89:b4:f0:9a:c0:e9:a4:16:7b:44:42:ad:
         33:fc:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:41:37 2025 by rpki-client