Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/323830333a383161303a3a2f33322d3332203d3e20323637363930.roa
File:                     323830333a383161303a3a2f33322d3332203d3e20323637363930.roa (raw, json)
Hash identifier:          eDgKomjAWcPIcBYhKoaBtsk42EwMseaFWSTHW5DNYis=
Subject key identifier:   60:1A:19:83:20:7A:6C:A9:55:D2:F7:54:72:5E:4E:36:73:C7:22:8C
Certificate issuer:       /CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
Certificate serial:       37501D8E8B554049C856EF6CA05A315A321E0DDB
Authority key identifier: 58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/323830333a383161303a3a2f33322d3332203d3e20323637363930.roa
Signing time:             Tue 22 Apr 2025 18:30:00 +0000
ROA not before:           Tue 22 Apr 2025 18:25:00 +0000
ROA not after:            Tue 21 Apr 2026 18:30:00 +0000
asID:                     267690
IP address blocks:        2803:81a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:50:1d:8e:8b:55:40:49:c8:56:ef:6c:a0:5a:31:5a:32:1e:0d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
        Validity
            Not Before: Apr 22 18:25:00 2025 GMT
            Not After : Apr 21 18:30:00 2026 GMT
        Subject: CN=601A1983207A6CA955D2F754725E4E3673C7228C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:ac:71:12:13:76:31:f6:55:4a:e9:9c:20:
                    8e:2b:6f:72:16:9c:ca:af:98:8e:76:bf:e6:89:8f:
                    64:3e:0b:a5:5c:34:6d:74:d8:ea:d0:58:63:94:92:
                    ab:63:cf:54:c4:f2:8e:77:7f:43:f4:e4:74:22:2a:
                    99:2f:73:03:af:cc:73:bc:6d:6a:33:67:b8:d4:bd:
                    0f:28:71:b9:47:00:3f:df:e7:d1:1c:1f:ea:2d:3a:
                    2e:20:31:b0:ab:ff:78:97:3e:c9:ab:46:b8:9a:1f:
                    0b:e9:12:b9:c0:c9:58:2d:d4:a9:a3:06:6e:a5:92:
                    88:73:9d:d4:b1:aa:8a:08:ce:55:5b:40:ea:dc:50:
                    c7:0e:07:b2:5d:2b:e3:1c:48:04:99:7f:8e:04:82:
                    bf:6e:b9:00:c6:0c:72:0d:26:4b:2b:8e:b6:ec:95:
                    cf:9d:7a:47:85:f1:24:66:60:66:89:86:c7:1d:20:
                    23:9f:77:44:26:a3:c6:22:71:c4:43:c3:83:4a:15:
                    76:14:46:7e:dc:9f:a9:b3:59:48:aa:0d:10:49:d3:
                    29:03:87:d8:f1:84:76:64:3d:e5:d3:e6:d2:c6:ff:
                    a6:f3:84:cc:8e:15:5c:74:de:85:dd:f6:8e:4c:52:
                    24:d1:c3:57:e3:ba:ab:ae:6f:da:b5:2a:af:ff:6e:
                    0e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1A:19:83:20:7A:6C:A9:55:D2:F7:54:72:5E:4E:36:73:C7:22:8C
            X509v3 Authority Key Identifier:
                keyid:58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/323830333a383161303a3a2f33322d3332203d3e20323637363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:81a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:62:71:a4:87:b5:78:3d:f1:bc:29:56:1c:4a:f3:22:3f:c4:
         88:74:3d:b3:e7:df:a7:45:a3:60:6c:8e:50:e1:e3:f8:a1:b5:
         fc:83:6b:aa:ed:aa:32:cb:c6:a7:2a:11:2c:1b:60:7d:07:75:
         10:7d:43:38:18:31:05:dd:33:30:88:e5:22:6b:a1:e5:1c:bb:
         f8:2a:3f:9c:c0:f5:0e:54:ec:3a:b5:32:98:78:8b:ab:92:5c:
         15:02:91:95:9e:a2:1b:3f:fd:a5:f0:55:0c:e9:40:55:9c:2b:
         9e:62:62:f8:ce:2c:b7:35:d3:7e:dd:48:69:98:fe:22:f4:da:
         82:f2:37:c9:f3:69:d1:8a:ae:e7:ed:5f:d7:e4:05:c8:8b:24:
         8a:f7:64:fb:7c:90:2e:98:71:9c:7b:68:99:63:74:19:9a:a9:
         e5:2a:b9:a5:46:49:94:d9:89:2b:4b:be:0b:28:df:d6:fa:49:
         8c:88:dd:f4:b2:fa:70:54:fe:ae:e5:c0:9c:4d:f2:54:5d:8a:
         43:fc:8d:1b:54:3f:c1:6a:35:9a:e9:2d:49:5f:2a:e4:62:5d:
         ea:65:58:ff:ec:b9:a4:fc:bb:90:b3:69:45:cd:e1:11:ad:ff:
         ef:08:05:1c:e6:c2:d5:d3:e7:ff:eb:52:61:8e:de:12:17:2f:
         97:69:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:09 2025 by rpki-client on console.sobornost.net