Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a3a2f33302d3438203d3e203138373437.roa
File:                     323830323a3a2f33302d3438203d3e203138373437.roa (raw, json)
Hash identifier:          q3r81SUpaQOn8vbSiZ5FFGPdumhLmLod627ePForcFA=
Subject key identifier:   2F:66:CC:A1:4D:E6:08:16:E1:27:CB:FF:11:F0:6E:E6:2E:A3:44:6B
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       5520B15B8C3C545BAD4FCE3E071BC8FBAB75070C
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a3a2f33302d3438203d3e203138373437.roa
Signing time:             Wed 07 May 2025 17:17:56 +0000
ROA not before:           Wed 07 May 2025 17:12:56 +0000
ROA not after:            Wed 06 May 2026 17:17:56 +0000
asID:                     18747
IP address blocks:        2802::/30 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:20:b1:5b:8c:3c:54:5b:ad:4f:ce:3e:07:1b:c8:fb:ab:75:07:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: May  7 17:12:56 2025 GMT
            Not After : May  6 17:17:56 2026 GMT
        Subject: CN=2F66CCA14DE60816E127CBFF11F06EE62EA3446B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:45:5c:c9:a9:d3:53:d2:1e:89:c4:98:8b:
                    3f:be:47:1f:19:fc:ea:78:2b:89:7f:bf:b9:0e:6d:
                    cc:6c:74:75:de:eb:4b:8b:e5:df:2c:b6:b0:3b:a2:
                    9e:c9:b0:ab:27:0e:80:0e:0f:84:a6:18:91:e4:7a:
                    3a:ef:44:0b:45:49:dc:b1:40:06:58:fe:14:f0:17:
                    ce:ad:46:32:dd:69:60:e3:ff:17:49:06:0e:38:63:
                    27:cc:eb:a4:d5:99:eb:72:fa:69:fd:a4:4c:92:46:
                    8b:c2:24:3c:06:cd:a9:8e:65:5b:3c:d7:d2:24:46:
                    a2:71:13:e8:95:31:12:aa:90:0c:17:ae:d7:45:75:
                    1a:e7:37:82:f8:19:81:7f:c1:0b:4f:28:3f:68:aa:
                    15:7f:f8:7a:65:e6:c5:35:96:b6:78:e6:86:e1:d3:
                    43:44:00:66:13:de:3c:0e:e7:3d:2d:37:22:25:88:
                    c6:93:54:ad:2d:6f:bb:b4:1c:b0:9b:a5:30:c5:0c:
                    42:e8:e2:19:9f:d3:5f:19:5d:b7:a4:d3:0b:44:73:
                    d7:ee:c5:34:df:8f:52:59:1a:bf:e2:7b:97:92:80:
                    65:06:d2:a7:42:86:36:6e:bb:09:16:72:4e:7b:2c:
                    65:07:79:f7:ad:c9:55:72:ff:ca:81:5c:15:4b:4d:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:66:CC:A1:4D:E6:08:16:E1:27:CB:FF:11:F0:6E:E6:2E:A3:44:6B
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a3a2f33302d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2802::/30

    Signature Algorithm: sha256WithRSAEncryption
         80:57:0d:1d:25:ac:2a:50:bd:3f:b0:cd:b4:99:f9:ab:2a:49:
         44:a8:4b:58:0f:72:fc:f1:a0:03:53:0a:65:69:cc:fa:bf:b4:
         7f:4a:27:24:6f:63:61:56:41:9d:cf:53:04:13:9f:74:37:29:
         4a:f4:9f:30:c8:c1:fc:09:84:15:35:c5:9b:39:de:41:42:d1:
         1d:87:b3:12:08:25:a8:3e:59:e6:30:80:c9:b7:c7:67:2e:ab:
         de:52:b6:d0:e0:66:cf:fa:d7:6e:d5:69:c6:79:4d:f9:41:a1:
         ad:13:10:c7:0f:e8:20:5b:c4:b5:9b:d5:29:18:43:01:92:1d:
         de:a8:7e:22:7d:77:22:7f:63:00:f1:1c:47:f7:4f:37:c1:51:
         f1:14:ee:fb:86:ca:0a:90:80:99:19:c6:c2:c9:2f:9e:de:61:
         33:cf:0b:b5:81:42:22:35:29:25:0a:f1:2e:29:5c:3c:6e:9a:
         46:f5:39:92:b4:ba:e9:8b:56:a4:f1:9d:55:c4:ae:53:9e:dd:
         3c:d3:21:da:82:4e:3b:3b:d6:18:ec:6a:fc:37:38:05:33:21:
         42:4e:9b:b3:21:f9:a7:f5:62:6e:8c:22:28:73:31:92:4d:9d:
         84:1a:a5:00:88:70:04:52:e5:33:08:df:d7:2f:38:99:87:21:
         e1:47:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:54:59 2025 by rpki-client