Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a3a2f33322d3438203d3e20313333383939.roa
File:                     323830303a6363303a3a2f33322d3438203d3e20313333383939.roa (raw, json)
Hash identifier:          d9B1m2PqtORJNdmhNZCwq02UfcrTp5wHmV4XGBKA3Aw=
Subject key identifier:   14:7F:46:C5:CB:B6:E7:9F:82:C5:63:C8:7C:7B:A6:E6:B0:0C:4D:0C
Certificate issuer:       /CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Certificate serial:       13BE3E4CB6ED8C4429CD2D218CD985AF433AD667
Authority key identifier: 2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a3a2f33322d3438203d3e20313333383939.roa
Signing time:             Wed 07 May 2025 20:50:00 +0000
ROA not before:           Wed 07 May 2025 20:45:00 +0000
ROA not after:            Wed 06 May 2026 20:50:00 +0000
asID:                     133899
IP address blocks:        2800:cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:be:3e:4c:b6:ed:8c:44:29:cd:2d:21:8c:d9:85:af:43:3a:d6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
        Validity
            Not Before: May  7 20:45:00 2025 GMT
            Not After : May  6 20:50:00 2026 GMT
        Subject: CN=147F46C5CBB6E79F82C563C87C7BA6E6B00C4D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:b6:ee:eb:fa:21:58:b5:84:90:a6:72:45:
                    0a:b2:0d:03:02:c5:ca:83:94:03:91:a1:3a:dc:28:
                    ad:fc:35:dd:01:16:b5:aa:a4:c5:57:26:5e:01:47:
                    55:5a:0e:74:76:13:8c:ed:5e:4f:64:34:b5:e9:52:
                    c6:15:1c:3a:e7:6a:81:35:c1:ed:ed:f8:51:8a:d3:
                    d2:03:39:e9:d6:5e:36:70:32:19:a0:16:34:a1:e3:
                    2b:fb:91:95:7f:82:bb:b1:dd:66:ec:94:56:98:a5:
                    d1:72:79:94:87:9d:90:ab:a7:e4:a8:c3:60:10:58:
                    2e:7d:ab:25:39:89:13:01:28:cb:df:85:f3:df:4a:
                    01:7a:90:fa:a2:fd:0b:1d:bb:58:6b:39:5e:9f:29:
                    2e:59:3f:b8:26:97:d9:81:12:99:6d:2b:22:65:24:
                    02:56:f7:12:dd:73:af:f5:f6:04:e3:d4:06:dc:4d:
                    22:d6:1d:b6:d6:0a:09:21:e7:eb:54:56:e4:16:75:
                    09:c8:c7:84:50:6b:81:47:c4:30:d9:fe:16:26:63:
                    63:74:f7:f1:80:b7:1a:d6:17:f9:79:d9:6f:93:f4:
                    2b:bb:bd:5e:92:d1:4a:99:1d:25:39:dc:04:51:0a:
                    2a:b2:9f:72:1a:b4:39:df:87:a1:14:a3:33:07:50:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7F:46:C5:CB:B6:E7:9F:82:C5:63:C8:7C:7B:A6:E6:B0:0C:4D:0C
            X509v3 Authority Key Identifier:
                keyid:2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a3a2f33322d3438203d3e20313333383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:b2:51:82:d8:f5:67:47:de:4e:31:be:d9:6d:cf:6b:66:2a:
         ad:44:e6:99:54:6c:c4:8e:15:53:61:ac:5f:fd:8e:cb:b3:4d:
         d1:01:86:5f:77:6c:2f:4b:7f:ae:22:b2:53:90:f7:08:71:c9:
         f8:2d:dd:d3:38:45:45:38:fc:61:99:a7:21:8b:50:e5:61:fc:
         ab:be:d2:f7:26:15:e6:b0:b0:d4:4d:f0:eb:10:a3:8a:bb:12:
         01:e3:38:c2:2b:8a:ed:41:15:bf:24:87:7c:8f:16:d6:3c:fc:
         51:7d:5b:fe:1d:36:fa:dd:bd:86:d8:66:8e:ce:78:b3:38:4c:
         f2:c6:ee:a0:9a:a5:22:09:2b:7e:a8:c4:9e:5c:3d:d4:dd:d9:
         26:f6:5e:f3:7d:c1:9d:dd:18:d1:88:43:52:01:6f:f7:69:7d:
         ca:99:73:06:2b:ba:46:bf:17:30:53:6d:ed:e3:65:e8:82:90:
         0d:b5:e6:a2:ea:0a:fc:06:33:b1:76:de:e9:5d:fe:3f:f5:a8:
         a2:cb:48:b7:b2:63:e9:c7:bd:23:d1:45:1a:c5:e9:34:76:97:
         f5:45:7c:39:a1:2c:b1:6b:56:77:0c:90:19:e9:70:34:49:49:
         2c:74:71:6e:4f:dc:cc:0f:69:77:a4:a8:2b:86:bb:9e:b4:fd:
         1e:cc:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:32:57 2025 by rpki-client