Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31313a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a31313a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          oDKIPb9/fKNiRR56xBqoUKav/N4az6qkr+rvsdI1yUI=
Subject key identifier:   E2:02:06:94:A4:84:27:FA:93:7D:3B:F2:2E:B2:75:1C:84:E9:A8:B7
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       15ADE16FCB4A51B3E9C5A4AC1F3077E5879DF731
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31313a3a2f34382d3438203d3e203138363738.roa
Signing time:             Wed 11 Jun 2025 21:40:00 +0000
ROA not before:           Wed 11 Jun 2025 21:35:00 +0000
ROA not after:            Wed 10 Jun 2026 21:40:00 +0000
asID:                     18678
IP address blocks:        2800:310:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 21:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ad:e1:6f:cb:4a:51:b3:e9:c5:a4:ac:1f:30:77:e5:87:9d:f7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jun 11 21:35:00 2025 GMT
            Not After : Jun 10 21:40:00 2026 GMT
        Subject: CN=E2020694A48427FA937D3BF22EB2751C84E9A8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:74:0e:1f:11:f6:1a:f7:d0:5c:70:12:a5:
                    c9:f1:de:d1:6e:9e:c2:f7:c9:82:8e:67:c3:da:72:
                    32:a0:10:82:e1:f2:9b:88:f3:cf:18:16:bd:87:19:
                    1e:21:88:b7:53:b7:c8:69:9e:2c:3a:7c:15:74:82:
                    63:1f:46:f5:ff:64:a4:e4:c5:70:1e:c6:14:d6:df:
                    2d:ca:98:50:4c:7a:3f:ad:5b:49:37:bc:30:29:5b:
                    8d:05:09:d7:0e:0c:3b:48:0d:65:9d:ac:29:03:5d:
                    00:af:f4:f2:a3:4b:19:5c:e3:24:25:c6:32:c7:c5:
                    e7:21:f7:f5:d7:78:cf:91:26:32:b0:66:b3:77:9a:
                    c6:90:94:15:81:98:14:a0:76:98:1a:1b:8e:2e:57:
                    3f:19:01:84:3f:56:78:23:d3:ab:25:84:62:72:ee:
                    18:fe:c6:8f:50:3b:76:6a:36:fd:47:d3:11:32:07:
                    39:ba:a2:03:f8:51:d6:14:1c:bf:eb:12:a8:01:a6:
                    ff:a8:95:bc:77:8d:1f:57:ce:9d:58:8e:00:50:ef:
                    8f:64:ca:7e:d4:0c:66:f4:bb:d1:f6:1b:f9:1f:89:
                    01:d7:d0:48:a0:7d:8d:7e:02:b2:2f:f6:79:df:84:
                    21:83:0c:ff:82:de:2c:48:77:a3:83:f8:7a:61:da:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:02:06:94:A4:84:27:FA:93:7D:3B:F2:2E:B2:75:1C:84:E9:A8:B7
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31313a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:9a:3e:b6:d4:3f:df:be:8a:57:cb:81:69:dc:55:8d:d8:7c:
         c2:56:4d:16:7f:01:ff:11:43:46:7d:c1:05:4f:21:df:dc:bb:
         bd:78:93:b0:f7:1c:2a:10:50:85:a0:b8:48:7d:62:47:34:60:
         4e:2b:55:44:9b:ff:51:d4:6d:37:c7:f9:fd:dc:c7:4b:4a:07:
         fd:9f:c2:80:a4:75:1a:26:50:31:ba:87:f9:d9:d1:49:35:a0:
         0c:6f:81:d5:91:38:58:41:49:04:5d:d8:b5:ef:00:b7:1e:77:
         5d:7a:39:dc:f7:a2:66:ea:ab:e0:11:31:8e:19:b5:8b:1e:9d:
         6b:5e:ce:a1:39:fc:69:14:30:6b:3d:e0:64:b5:3b:b3:82:1d:
         89:93:eb:cf:6c:7f:bb:9b:41:7d:90:25:9a:43:de:c5:e2:81:
         72:db:bc:f4:52:e6:88:32:2f:77:2c:02:1d:d6:db:87:22:ba:
         c1:3d:3c:96:d9:b3:63:78:de:47:1c:2c:3e:b5:f6:03:25:63:
         cd:69:26:01:c9:b6:ba:3a:ec:4e:7b:31:8d:45:fe:dd:55:2c:
         e4:70:e9:3a:3c:3a:20:42:d4:c3:1d:a9:3d:94:10:71:02:59:
         dc:cd:61:41:54:2e:03:10:6d:5d:2f:8c:54:34:ca:ff:f0:fc:
         95:a6:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:14:18 2025 by rpki-client