Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430373a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6430373a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          oHKJPor2KUB7sDJksNl6B7Jpisaju7GMQs10bpQeNS4=
Subject key identifier:   36:84:07:68:F3:70:E3:9F:84:9B:75:79:A0:CB:DA:73:DC:0E:C7:5E
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5FB7AA9249F47BDA247F6ACBA9B0527FA36AF1FA
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430373a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 20 Jun 2025 16:30:00 +0000
ROA not before:           Fri 20 Jun 2025 16:25:00 +0000
ROA not after:            Fri 19 Jun 2026 16:30:00 +0000
asID:                     18678
IP address blocks:        2800:310:d07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b7:aa:92:49:f4:7b:da:24:7f:6a:cb:a9:b0:52:7f:a3:6a:f1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jun 20 16:25:00 2025 GMT
            Not After : Jun 19 16:30:00 2026 GMT
        Subject: CN=36840768F370E39F849B7579A0CBDA73DC0EC75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:86:aa:08:24:1a:a0:06:27:24:1e:73:6b:
                    a0:df:73:ab:b3:20:2f:2e:d9:46:f1:87:6b:b0:4b:
                    f1:81:be:8f:20:55:85:61:30:42:65:7b:f6:7e:70:
                    27:fd:a1:d9:dd:84:fb:e1:76:c5:c6:c9:a8:96:d4:
                    99:86:d9:fa:97:79:53:07:2a:69:e0:b2:44:96:4c:
                    00:fe:72:ec:41:6f:50:9e:95:c9:ba:81:2b:d2:8a:
                    1e:89:fb:3b:48:aa:7b:43:2b:47:49:82:41:f8:81:
                    e5:36:cf:40:16:d0:a3:c6:85:a3:0e:77:c1:28:8b:
                    16:02:66:15:c8:f2:2e:e7:7d:d2:ce:8a:da:7c:de:
                    77:dc:e0:e9:44:9d:a9:65:03:76:b5:d9:51:44:76:
                    6b:e6:5a:e3:3f:03:94:e1:e9:6f:fd:b7:b5:ca:92:
                    91:d5:e8:c7:fe:7a:04:26:2a:ea:a8:96:a0:20:8f:
                    14:4d:03:8f:d0:16:00:5e:16:4e:2e:f6:64:97:57:
                    cd:a8:8f:34:51:91:1a:f9:ad:8e:4e:c7:24:57:72:
                    f7:c6:c3:d2:1f:61:af:b1:6e:e6:90:42:74:5d:08:
                    53:53:b5:e7:c4:a2:c3:57:82:26:ce:0c:c0:2f:79:
                    6f:a6:f7:0b:62:ec:9f:3b:08:0b:ed:46:a6:73:03:
                    05:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:84:07:68:F3:70:E3:9F:84:9B:75:79:A0:CB:DA:73:DC:0E:C7:5E
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430373a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:d07::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:6f:24:2b:e3:6b:3f:53:2a:4a:d9:09:54:aa:90:60:dd:72:
         ca:b7:17:42:7e:5d:77:4a:e3:21:6c:eb:f0:85:06:7a:fb:b7:
         70:db:dc:9a:75:dd:ed:66:e5:17:40:2e:ee:96:a7:6e:2b:7f:
         1a:51:34:3a:4a:87:04:20:50:f1:70:cd:d6:4c:f2:1a:a6:b6:
         51:a8:f3:41:57:93:8c:ad:78:e5:3a:bb:e3:9c:57:f4:10:2a:
         62:31:b6:76:1b:cc:65:56:73:9f:92:9f:96:bf:b0:a4:b0:43:
         3b:f1:e7:27:f3:ee:3c:f8:e2:89:5f:b6:a0:be:13:c7:8a:5c:
         c4:27:ce:a2:1d:76:24:78:42:46:05:a1:3a:29:f5:19:0a:83:
         d6:ee:be:4f:e1:e3:e4:60:01:32:8f:4a:24:8b:f9:b0:bb:55:
         85:8f:b7:1e:14:22:0d:42:66:e4:a3:62:6c:c3:85:5c:69:7f:
         b9:37:64:e3:f4:30:80:ef:70:a5:c9:c8:ea:28:c2:5f:12:5b:
         7d:c5:3b:75:ca:7f:8e:a6:52:87:df:ab:5e:a1:ee:00:c8:c1:
         27:4e:6c:28:22:ea:b7:76:3a:a4:79:45:97:9d:0c:e2:da:90:
         de:22:f6:75:84:c6:3c:9f:eb:b3:3d:d1:3c:a2:bc:49:10:6d:
         31:14:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 18:04:15 2025 by rpki-client