Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131343a3a2f34382d3438203d3e20323632353839.roa
File:                     323830303a3635303a3131343a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          JZBbEnQgW8KBnFsEYfWbah3PDLa6g+3EFcBToJMNIAY=
Subject key identifier:   C7:F1:05:5B:07:D9:82:FD:4C:67:4E:3C:69:3F:F7:E9:A8:DF:4E:FF
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       7A5C78403F075598BF4DCF7A856600290C604DC3
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131343a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Wed 18 Jun 2025 14:22:42 +0000
ROA not before:           Wed 18 Jun 2025 14:17:42 +0000
ROA not after:            Wed 17 Jun 2026 14:22:42 +0000
asID:                     262589
IP address blocks:        2800:650:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 03:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5c:78:40:3f:07:55:98:bf:4d:cf:7a:85:66:00:29:0c:60:4d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jun 18 14:17:42 2025 GMT
            Not After : Jun 17 14:22:42 2026 GMT
        Subject: CN=C7F1055B07D982FD4C674E3C693FF7E9A8DF4EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:cd:7f:6b:ba:4d:07:20:bb:07:35:ef:8a:
                    2c:74:eb:65:ca:27:d0:ac:b0:fa:d7:a5:c0:d9:89:
                    d0:c7:8d:d2:a3:96:db:cc:d2:84:9c:4f:0d:e8:12:
                    d1:8a:37:51:0a:38:1e:d4:04:a4:0d:af:ce:6a:f8:
                    52:d9:c6:44:76:6d:ed:b3:71:6e:21:57:f1:41:88:
                    bb:6f:8b:a6:c4:c8:e1:7f:91:45:b2:ac:d9:c3:69:
                    ec:b7:e4:73:7f:71:84:b7:a0:69:9a:8b:08:d6:da:
                    69:e9:98:59:a6:e0:7e:38:fa:4a:f8:f3:d6:87:06:
                    65:d5:11:01:cf:f1:46:71:a6:c3:70:6b:76:f9:28:
                    a9:f3:e9:a1:fc:81:e2:f6:0d:5a:11:f5:54:dd:88:
                    b6:f9:e3:55:13:d7:45:07:85:2d:29:d8:2c:3d:5a:
                    ab:51:9c:81:06:5e:87:c8:26:72:88:34:53:d5:d0:
                    d4:e0:7e:8a:8a:01:3e:6f:d9:39:cf:83:4a:5f:34:
                    b4:d7:84:22:b7:36:3d:41:02:76:9d:eb:62:61:ec:
                    78:ec:6e:85:0d:e3:61:f4:49:1c:25:2e:ee:08:07:
                    37:23:04:4f:b7:3e:fd:1f:4b:53:79:4e:80:ec:14:
                    85:2e:3a:07:a3:f5:74:eb:97:b6:57:f7:ac:86:85:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F1:05:5B:07:D9:82:FD:4C:67:4E:3C:69:3F:F7:E9:A8:DF:4E:FF
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131343a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:49:14:6d:07:42:8a:15:8c:55:f0:3c:20:56:21:4a:df:3d:
         71:1a:b9:99:b1:89:73:dd:f3:86:6c:7a:3c:2f:2f:82:ea:f4:
         8c:e4:a9:f3:dc:ed:e2:8a:62:db:a8:c9:6a:b1:ba:71:df:cd:
         ba:83:d6:96:09:9b:0d:00:a8:b8:6a:29:cc:c3:e9:fc:2f:62:
         43:63:a7:11:e9:a2:91:c3:5c:79:cd:ba:dd:30:d2:d3:6f:1b:
         8e:ad:0b:18:42:cc:09:fa:d8:5b:08:f1:99:f4:ce:b1:7d:4e:
         74:ce:c5:f2:7c:e9:f3:07:55:04:58:08:86:4b:e6:aa:1e:47:
         fb:fa:14:e4:91:f3:d4:d5:65:59:ba:af:3f:2e:ba:97:27:a9:
         8b:7e:7b:4f:07:bb:f9:32:b6:e3:8a:22:0d:6a:f2:39:24:e4:
         10:db:27:6e:33:d6:07:92:ab:90:ab:25:f7:a6:a4:df:e0:10:
         c1:49:dd:1a:19:1f:aa:42:e3:61:18:93:0f:4e:aa:b4:8a:e2:
         87:fd:9d:87:78:0b:6f:14:fc:b0:af:88:da:3f:d1:e1:da:74:
         52:9c:02:75:99:ad:9c:22:dd:80:f4:62:9f:91:16:e0:7e:ec:
         ea:7a:7c:96:83:eb:bf:da:f2:d0:08:82:72:22:a7:dc:94:71:
         8b:da:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:23:00 2025 by rpki-client