Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/323830303a6165303a3a2f33322d3332203d3e20323634363539.roa
File:                     323830303a6165303a3a2f33322d3332203d3e20323634363539.roa (raw, json)
Hash identifier:          f95GQ8kjgfJ8ZGSHUXaucyiAuuImOr1Mii7tVoA/Cy8=
Subject key identifier:   94:83:50:8E:EC:4D:85:BC:A6:9F:12:5E:01:84:13:1A:92:53:3A:97
Certificate issuer:       /CN=2FE17014E75975FCF1540FF846074AB18777F866
Certificate serial:       72E646CFF9A969D30F47050B9154FB6D3471DD1E
Authority key identifier: 2F:E1:70:14:E7:59:75:FC:F1:54:0F:F8:46:07:4A:B1:87:77:F8:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/323830303a6165303a3a2f33322d3332203d3e20323634363539.roa
Signing time:             Thu 22 May 2025 22:00:00 +0000
ROA not before:           Thu 22 May 2025 21:55:00 +0000
ROA not after:            Thu 21 May 2026 22:00:00 +0000
asID:                     264659
IP address blocks:        2800:ae0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e6:46:cf:f9:a9:69:d3:0f:47:05:0b:91:54:fb:6d:34:71:dd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE17014E75975FCF1540FF846074AB18777F866
        Validity
            Not Before: May 22 21:55:00 2025 GMT
            Not After : May 21 22:00:00 2026 GMT
        Subject: CN=9483508EEC4D85BCA69F125E0184131A92533A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:ca:f8:a7:a5:c6:09:be:e1:49:9c:22:e2:
                    05:8d:00:8c:56:21:50:b3:3c:ae:99:74:8e:22:ca:
                    9b:c5:0f:13:d3:37:a7:6f:55:8d:0d:ee:d0:80:26:
                    32:46:d7:43:88:8c:3a:af:9e:c0:b9:41:ab:36:81:
                    6a:e2:89:12:25:ef:98:b4:ed:02:f1:46:52:84:a7:
                    76:b0:68:68:be:e4:79:de:14:82:49:4f:25:05:4a:
                    90:d0:c8:8d:94:bb:ce:0d:25:2b:e9:01:c8:f7:6c:
                    6b:46:29:aa:4d:7c:ae:43:81:65:4c:94:f8:94:fe:
                    bf:77:04:db:4c:ee:77:58:c5:2e:c6:67:74:9e:70:
                    52:dc:af:9c:ca:8d:f1:95:38:b6:ca:46:28:9e:21:
                    af:be:a0:f5:a0:ce:a1:0a:fa:7e:f7:f5:27:52:00:
                    26:ca:2c:43:fe:eb:d3:18:72:69:60:77:28:d1:d1:
                    13:b1:a2:97:dd:74:af:41:ca:2f:ac:fd:02:ff:41:
                    c0:9a:1a:96:10:bf:33:3a:f7:2c:8d:9d:db:bc:bd:
                    e8:d8:08:c0:d4:1c:ca:dd:6a:0f:3f:ea:28:a3:46:
                    c1:a7:41:18:ae:81:59:4d:64:85:ef:cb:82:4e:f7:
                    e7:7b:22:a4:97:ff:c7:56:30:16:cc:38:fc:cf:18:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:50:8E:EC:4D:85:BC:A6:9F:12:5E:01:84:13:1A:92:53:3A:97
            X509v3 Authority Key Identifier:
                keyid:2F:E1:70:14:E7:59:75:FC:F1:54:0F:F8:46:07:4A:B1:87:77:F8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/323830303a6165303a3a2f33322d3332203d3e20323634363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:38:22:e9:d1:93:01:2f:2b:73:80:0e:b9:58:4f:8e:c2:eb:
         59:df:8b:e0:73:1f:84:07:51:29:db:b6:68:fc:eb:30:cd:4f:
         33:ed:23:55:87:0f:16:78:81:9c:ce:d9:84:e5:53:de:06:48:
         02:27:00:d4:76:27:2d:3e:4d:02:96:d9:f1:81:7c:6a:5a:b1:
         5b:be:3d:a8:41:d9:41:40:61:15:3a:d1:6d:28:5f:70:84:e6:
         79:1e:2e:af:ee:ac:1d:a6:fd:a4:c0:67:1c:ca:61:12:19:a8:
         08:5f:74:c5:7a:f4:d3:2b:4c:94:a7:1f:f4:f6:63:3a:40:9b:
         68:42:61:7f:05:be:96:8b:18:51:f8:8a:53:fc:63:4a:07:76:
         db:29:1c:f7:b9:60:1b:58:1f:d1:c4:a7:fa:f8:e0:c5:f3:44:
         23:19:19:d9:6f:f8:6b:8e:7e:3f:d7:27:26:76:48:cf:f8:77:
         25:39:09:7b:52:4c:99:d3:b3:c3:87:d5:dd:da:42:23:cf:9b:
         8f:44:77:fb:48:ef:3b:f5:7d:1d:38:73:b2:38:8b:2d:dd:eb:
         a1:2a:56:c8:f1:58:c6:4e:df:63:9e:4a:23:a3:fa:28:7e:ba:
         c1:50:e8:a9:b0:3a:ec:66:c4:ad:66:53:14:2e:09:73:1a:6b:
         16:1a:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:24:54 2025 by rpki-client