Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          8o3g7bKLH+w/XnpVuQBcV7rpyZRWfTCz1/UewjSP+XQ=
Subject key identifier:   9F:B4:05:62:DD:DA:06:27:09:1F:E3:70:D0:15:01:FB:6C:A2:51:38
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       65DBC03F7F34164BFEEA2EAE35533C47D4C84D38
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 04 Feb 2025 18:30:07 +0000
ROA not before:           Tue 04 Feb 2025 18:25:07 +0000
ROA not after:            Tue 03 Feb 2026 18:30:07 +0000
asID:                     273114
IP address blocks:        2803:790:3000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:db:c0:3f:7f:34:16:4b:fe:ea:2e:ae:35:53:3c:47:d4:c8:4d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Feb  4 18:25:07 2025 GMT
            Not After : Feb  3 18:30:07 2026 GMT
        Subject: CN=9FB40562DDDA0627091FE370D01501FB6CA25138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:f9:95:6c:df:fb:30:a5:94:d0:1f:b7:d2:
                    2c:bc:11:3c:b9:7a:9a:67:1a:45:4f:22:8b:d7:3f:
                    1a:c1:77:99:e3:e4:31:30:de:be:ef:96:77:66:b0:
                    21:96:cb:fb:11:5c:9c:3a:87:16:a3:6c:19:f4:e6:
                    47:01:28:76:ba:96:33:cb:c2:9b:69:fa:93:09:1e:
                    6a:19:0c:9a:7f:ff:cf:7f:7c:b7:f5:2d:ee:aa:44:
                    14:35:5c:a7:ac:b1:5d:42:ce:dd:83:cb:ed:38:7d:
                    89:53:f1:c1:83:cb:34:09:f3:55:8f:bb:05:7b:4e:
                    31:c1:08:54:73:49:49:7d:8f:01:6c:b1:df:5c:f5:
                    98:48:d5:54:c0:7a:20:fd:b6:55:74:1e:69:33:ec:
                    c8:5c:2f:db:51:d6:2d:bb:7c:41:8c:f6:04:a6:54:
                    bb:95:5e:45:a3:22:ab:8c:2e:06:57:31:9a:10:48:
                    92:ad:f1:bc:82:4d:50:ee:56:6d:da:06:50:2b:22:
                    01:a8:30:46:75:35:17:39:30:fc:af:b5:44:b7:c7:
                    9d:23:67:00:64:8c:4a:92:9c:91:fa:7d:38:e8:30:
                    8e:7f:cb:2c:ac:dc:c7:d1:70:9f:6e:59:5c:c8:1c:
                    78:b4:66:5b:a9:71:1a:6a:49:b6:f3:c2:a4:37:aa:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:05:62:DD:DA:06:27:09:1F:E3:70:D0:15:01:FB:6C:A2:51:38
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:c9:6a:50:d5:13:14:59:8d:29:41:35:9e:d6:41:9a:bf:
         9a:4e:25:c7:2e:6a:e7:6d:d8:3b:c3:5b:76:d8:36:83:f4:21:
         9f:59:46:66:11:90:e3:1f:1a:d5:8d:ba:99:77:86:89:8f:1f:
         eb:5a:1d:a0:46:6a:c4:3a:60:e3:dc:df:ee:f6:1f:cd:b1:a6:
         8a:14:77:90:13:7a:dc:02:21:ae:cf:9b:14:2c:04:08:3a:4f:
         57:6d:85:bd:90:1b:58:4e:fe:17:a5:29:b1:f2:23:01:57:70:
         cd:a6:22:2e:8f:cc:24:4b:b9:2c:86:65:f6:51:0f:ea:23:e0:
         e5:25:c6:e9:7e:48:f3:9c:9f:76:4f:cf:29:ea:18:c1:26:6f:
         69:53:ac:0f:f0:ae:4d:f5:39:ca:f9:00:6d:92:51:c1:a9:38:
         6a:66:01:5f:a6:17:91:95:42:63:62:cc:0e:7d:f4:83:c1:ff:
         b1:14:b4:fb:3a:79:33:66:01:97:7d:c8:96:2b:7c:87:fd:c9:
         53:4e:4a:36:9c:80:97:bc:51:bf:9b:99:20:b4:55:f4:cb:61:
         38:a2:99:1d:4a:28:75:25:f9:96:a8:3a:c9:1b:6f:40:9e:be:
         fb:d1:12:fd:c5:61:a4:85:a1:56:d1:e6:8f:9a:b0:f3:b0:3a:
         8d:03:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:12 2025 by rpki-client on console.sobornost.net