Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3438203d3e20323639393138.roa
File:                     323830333a646438303a3a2f33322d3438203d3e20323639393138.roa (raw, json)
Hash identifier:          BO6rVgCmucUMkY192F5XNmjKueaTWFCwL6LVvXv1siQ=
Subject key identifier:   5C:76:25:12:C9:A8:EA:69:84:33:3B:E0:8F:B4:37:C7:07:17:A3:6F
Certificate issuer:       /CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
Certificate serial:       4A39B6F1240C4CEA455E71EF6228F9A2314F2AB5
Authority key identifier: D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3438203d3e20323639393138.roa
Signing time:             Thu 24 Apr 2025 15:00:00 +0000
ROA not before:           Thu 24 Apr 2025 14:55:00 +0000
ROA not after:            Thu 23 Apr 2026 15:00:00 +0000
asID:                     269918
IP address blocks:        2803:dd80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:39:b6:f1:24:0c:4c:ea:45:5e:71:ef:62:28:f9:a2:31:4f:2a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
        Validity
            Not Before: Apr 24 14:55:00 2025 GMT
            Not After : Apr 23 15:00:00 2026 GMT
        Subject: CN=5C762512C9A8EA6984333BE08FB437C70717A36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:99:90:e9:46:53:23:5a:2f:1a:be:43:27:89:
                    d8:5e:66:31:84:f0:fa:8c:71:4a:2c:f0:19:e1:75:
                    c5:23:db:36:49:d7:3c:87:32:ff:40:e3:5b:20:72:
                    30:f6:79:f1:80:34:3b:b8:ef:42:df:3d:9c:fb:52:
                    18:f1:61:41:3e:a4:d2:28:cf:49:de:d8:a3:fb:52:
                    bc:80:ec:39:56:a7:5f:63:18:b0:95:96:df:dd:81:
                    cf:3c:32:9d:89:38:6e:48:4d:dd:d1:de:8c:a0:e0:
                    62:30:ab:cc:ba:50:ad:62:9a:8d:3b:a7:9a:f1:0c:
                    9f:bc:b6:c3:97:51:65:75:09:b3:bb:5e:8d:9b:ae:
                    09:0b:ef:2a:e8:27:23:f4:c3:82:4d:79:89:1f:97:
                    dc:49:bc:76:38:14:56:15:94:0d:60:2f:f1:ed:e5:
                    b6:e9:c9:2e:71:84:8d:b6:21:8c:7c:60:c2:1c:96:
                    95:0e:54:50:d0:65:d2:a6:a6:e1:6c:9d:a3:75:99:
                    8a:5e:a9:7c:2e:2c:6f:4b:99:29:12:99:39:1c:76:
                    0d:98:05:53:1f:ff:05:07:71:39:4e:f9:19:1d:1b:
                    b1:e6:00:f5:03:a7:32:2b:d3:ad:da:f0:47:bc:0a:
                    1e:19:4e:de:de:e4:1b:b5:68:23:ca:e0:70:7f:33:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:76:25:12:C9:A8:EA:69:84:33:3B:E0:8F:B4:37:C7:07:17:A3:6F
            X509v3 Authority Key Identifier:
                keyid:D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3438203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:91:9f:81:aa:61:4a:64:bf:90:03:3f:58:bf:2c:b7:c1:50:
         52:7d:6a:18:97:15:8a:ea:68:8e:eb:12:df:70:d8:61:7b:4e:
         a0:a5:4a:b7:aa:56:29:e1:7e:22:da:e4:87:5f:a9:bb:47:e3:
         97:24:04:59:67:9e:01:e9:28:0d:b7:03:d9:a4:48:68:24:e4:
         58:dd:00:9c:e2:d7:f2:45:f1:98:00:5b:59:c8:a0:77:16:c7:
         9e:79:16:e7:64:54:fa:40:0b:61:d8:1d:f0:1c:56:d5:14:07:
         66:84:b9:38:72:3c:91:45:cd:0b:a4:1c:25:f9:28:e0:9a:ff:
         20:eb:fe:7e:89:c9:d1:6a:4a:88:c6:70:18:df:53:da:84:90:
         03:51:76:08:50:ff:87:dd:d8:d7:d4:08:11:1e:38:4e:56:e6:
         96:86:94:3e:10:2b:37:1e:77:05:ad:d5:c8:62:ce:48:8c:39:
         a2:de:30:1f:89:35:a5:4a:2c:1f:7f:79:7d:db:37:08:8f:81:
         05:38:37:3d:bc:be:7e:0c:7e:08:30:7a:f1:dd:4e:02:c2:12:
         8c:e7:94:8b:e6:c7:ed:fc:80:ec:d6:56:69:b6:61:5e:69:1b:
         99:d4:c8:a3:ea:09:18:25:ee:bd:84:9a:88:6d:d2:e5:22:b4:
         24:01:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:55 2025 by rpki-client on console.sobornost.net