Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          IP4GbEDmj4nHTaQDdhaDexFAeAOoZmaIWeyAe+cu1Sk=
Subject key identifier:   68:8D:37:5E:47:C7:5A:3B:EC:8A:1B:1F:F7:03:D0:D1:1D:EE:E9:21
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       3CE2AAD20804DA91020D848C360681775E9796A1
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 04 Feb 2025 18:30:08 +0000
ROA not before:           Tue 04 Feb 2025 18:25:08 +0000
ROA not after:            Tue 03 Feb 2026 18:30:08 +0000
asID:                     273114
IP address blocks:        2803:790:4000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e2:aa:d2:08:04:da:91:02:0d:84:8c:36:06:81:77:5e:97:96:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Feb  4 18:25:08 2025 GMT
            Not After : Feb  3 18:30:08 2026 GMT
        Subject: CN=688D375E47C75A3BEC8A1B1FF703D0D11DEEE921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:bf:e9:f2:f9:61:95:69:34:c9:25:c6:f2:
                    13:e1:db:81:10:15:d4:39:8d:14:63:99:a3:38:bf:
                    b6:23:3d:74:6a:d4:24:8e:09:27:3e:7b:b7:85:a3:
                    0a:cb:ab:3b:2b:7c:2f:e5:a4:ad:1f:7a:99:73:2c:
                    b8:e6:d1:c7:13:86:de:fa:1d:f1:c5:a3:da:03:d4:
                    da:40:bf:fa:43:f4:32:f5:5e:ea:bc:fe:48:ba:2f:
                    28:a9:68:ae:c5:a2:28:a2:fd:f7:05:b9:42:21:43:
                    c6:c6:53:22:74:08:3f:ac:99:87:30:a6:3a:51:22:
                    b9:48:e3:12:8b:0b:79:ef:0e:23:77:ea:3f:ea:99:
                    f0:bf:e5:bb:3e:b2:45:48:11:a9:b9:28:8d:6c:f2:
                    cc:1f:6e:f1:a1:8c:23:f0:5d:fe:d7:9d:2a:6e:76:
                    4f:21:e8:d5:cd:a0:df:01:ee:21:e1:5b:23:32:18:
                    ba:18:8b:68:23:db:ae:82:3c:10:39:d9:c0:a3:8d:
                    ef:06:e2:4b:9a:69:84:c4:5f:53:99:c8:6c:97:0a:
                    f6:c4:d1:21:21:75:16:27:8e:fd:22:a1:db:e8:18:
                    56:83:e7:a1:f3:22:8e:83:03:60:7a:be:ba:2b:63:
                    b9:21:60:b0:4a:2b:e0:a5:98:f7:95:d1:64:d7:74:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8D:37:5E:47:C7:5A:3B:EC:8A:1B:1F:F7:03:D0:D1:1D:EE:E9:21
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:32:15:82:10:d0:93:f9:fe:2e:db:25:cd:e6:a3:bf:ec:c7:
         4a:61:85:58:07:54:c1:3e:e5:15:ff:a7:cb:cf:df:6f:a2:5e:
         09:de:6b:1f:04:09:0d:80:00:cb:28:0b:5b:29:1e:96:8d:38:
         21:24:87:03:1e:1f:c6:61:86:0f:c2:ca:b0:3e:dc:20:c2:ec:
         13:f3:fb:03:65:e6:22:09:4a:ae:42:8d:9f:6e:c3:78:8e:36:
         49:61:9d:45:f7:10:fd:cd:d1:02:e9:63:64:c5:71:40:47:a9:
         cc:59:26:d6:19:7e:fe:3a:48:48:fd:8b:69:f4:eb:33:51:4c:
         71:cd:17:87:18:bb:aa:ad:0f:7e:a3:df:fb:d1:48:ed:7d:a2:
         0b:4f:a1:ff:56:5a:f7:e0:02:66:8e:5a:7e:09:e8:24:9e:26:
         ee:88:6c:9b:9e:f8:f5:d7:66:5c:2b:cd:81:fb:ee:78:88:39:
         07:c0:a2:3b:e0:02:ef:ce:e5:5b:d3:65:ff:03:d7:4c:1d:3b:
         92:a1:a5:db:f2:49:4f:94:08:49:bb:cf:12:d3:0b:03:c0:00:
         a3:18:89:8e:ea:fc:d4:de:ec:50:17:53:7f:c5:86:62:b1:5f:
         52:13:c8:57:24:37:88:77:dc:83:72:74:3b:e4:ed:83:5c:b9:
         bd:ff:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:12 2025 by rpki-client on console.sobornost.net