Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/323830333a396565303a3a2f33322d3332203d3e20323639393838.roa
File:                     323830333a396565303a3a2f33322d3332203d3e20323639393838.roa (raw, json)
Hash identifier:          9FOxULTAdbFwn2YiI8uSMtsen57iR6H9GDxT88zMA0w=
Subject key identifier:   5A:E5:99:38:23:9E:FB:66:81:99:FE:40:BC:5F:44:6C:5B:DE:64:89
Certificate issuer:       /CN=33AE83F4491BEA105F85ED2DA938440613250424
Certificate serial:       1AF6937F3D0E7F80F0E6A76CA97C768E3093C033
Authority key identifier: 33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/323830333a396565303a3a2f33322d3332203d3e20323639393838.roa
Signing time:             Mon 28 Apr 2025 17:16:23 +0000
ROA not before:           Mon 28 Apr 2025 17:11:23 +0000
ROA not after:            Mon 27 Apr 2026 17:16:23 +0000
asID:                     269988
IP address blocks:        2803:9ee0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f6:93:7f:3d:0e:7f:80:f0:e6:a7:6c:a9:7c:76:8e:30:93:c0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33AE83F4491BEA105F85ED2DA938440613250424
        Validity
            Not Before: Apr 28 17:11:23 2025 GMT
            Not After : Apr 27 17:16:23 2026 GMT
        Subject: CN=5AE59938239EFB668199FE40BC5F446C5BDE6489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:d0:3b:a6:e6:45:b0:c2:74:08:ff:00:e6:
                    94:95:81:af:4d:e6:4e:2f:c6:42:2a:57:1c:8c:50:
                    15:76:54:8e:25:77:44:42:5a:67:75:94:82:18:d4:
                    87:c4:fe:d2:88:cb:5d:97:90:87:67:93:c1:6b:26:
                    50:8d:9b:bc:d6:20:c4:cd:b8:83:43:fb:51:60:76:
                    25:dc:b0:5d:59:95:eb:c8:3b:2e:6f:53:bf:79:3c:
                    a8:d3:b8:5c:46:7e:d6:98:89:6a:d2:c0:a0:49:90:
                    5c:54:cc:c0:f8:f9:9b:fb:41:c2:c2:a7:53:09:31:
                    93:13:cb:3b:e5:fe:68:ff:b9:bd:89:0b:bf:4b:3f:
                    81:f6:7a:eb:a5:d1:20:84:47:b1:d0:0a:0d:94:6d:
                    38:cf:df:38:96:4d:03:75:91:a7:79:1d:a9:f9:7b:
                    3e:fc:e7:0d:fc:42:55:09:10:37:55:57:d8:54:0d:
                    dc:a8:35:ee:18:9b:4b:a0:f8:77:d6:a4:bb:fe:f3:
                    0d:25:16:ab:3f:1d:6f:50:1f:c0:42:d6:31:85:9c:
                    83:22:63:9d:5d:fc:14:2d:0e:06:f9:0e:03:da:69:
                    5a:06:08:c2:46:2a:31:30:68:3a:a3:b8:0d:63:83:
                    a0:f3:e6:93:9e:26:c1:2a:3f:f4:c8:43:6f:f7:54:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E5:99:38:23:9E:FB:66:81:99:FE:40:BC:5F:44:6C:5B:DE:64:89
            X509v3 Authority Key Identifier:
                keyid:33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/323830333a396565303a3a2f33322d3332203d3e20323639393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:bf:1d:1d:fe:c6:1c:94:92:8e:3e:0e:83:78:15:7e:9f:9d:
         a5:cb:ea:8c:59:83:02:bf:ab:d9:2e:db:76:31:1b:9d:b1:95:
         82:46:f2:2c:95:73:d0:34:64:01:28:fd:3f:35:4d:88:76:c7:
         a7:26:45:57:af:7c:d3:e5:00:e9:2f:80:6f:90:f1:1a:62:95:
         a8:01:90:28:7c:a6:84:44:02:07:89:46:9d:ad:d7:be:8a:fc:
         7e:94:b9:ac:dc:a1:09:47:d7:a4:96:44:f3:bd:19:ed:ed:09:
         6f:00:1c:73:19:f9:14:c0:e1:5a:7a:7c:2f:48:da:4b:b4:c3:
         0e:10:8a:c8:ac:95:71:32:33:04:ec:52:81:ec:88:e2:ed:7a:
         80:55:a5:87:39:c7:a5:76:73:34:46:58:53:d6:b8:73:6d:30:
         33:85:8d:4d:90:d3:32:25:6a:22:59:b4:24:75:f5:4a:2d:21:
         b8:29:ea:da:4f:42:d3:fd:b9:bd:d8:b9:b0:1a:c5:99:f4:35:
         f4:84:21:05:02:ff:ae:9c:3a:11:49:55:88:8d:04:f3:9e:97:
         29:3a:b9:f2:c8:1e:4e:6c:35:cf:f6:45:d0:7e:36:ed:9f:85:
         01:7a:b9:a0:16:bf:3b:e5:73:09:1d:5a:76:c1:bb:b3:d0:c9:
         78:57:21:6f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGvaTfz0Of4Dw5qdsqXx2jjCTwDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNBRTgzRjQ0OTFCRUExMDVGODVFRDJEQTkzODQ0MDYx
MzI1MDQyNDAeFw0yNTA0MjgxNzExMjNaFw0yNjA0MjcxNzE2MjNaMDMxMTAvBgNV
BAMTKDVBRTU5OTM4MjM5RUZCNjY4MTk5RkU0MEJDNUY0NDZDNUJERTY0ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwg9A7puZFsMJ0CP8A5pSVga9N
5k4vxkIqVxyMUBV2VI4ld0RCWmd1lIIY1IfE/tKIy12XkIdnk8FrJlCNm7zWIMTN
uIND+1FgdiXcsF1ZlevIOy5vU795PKjTuFxGftaYiWrSwKBJkFxUzMD4+Zv7QcLC
p1MJMZMTyzvl/mj/ub2JC79LP4H2euul0SCER7HQCg2UbTjP3ziWTQN1kad5Han5
ez785w38QlUJEDdVV9hUDdyoNe4Ym0ug+HfWpLv+8w0lFqs/HW9QH8BC1jGFnIMi
Y51d/BQtDgb5DgPaaVoGCMJGKjEwaDqjuA1jg6Dz5pOeJsEqP/TIQ2/3VKdzAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUWuWZOCOe+2aBmf5AvF9EbFveZIkwHwYDVR0j
BBgwFoAUM66D9Ekb6hBfhe0tqThEBhMlBCQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JDMTE2QTgzMkZBMTY2MDdENjc1Qzc1RjY3RTMwMDQ5
NzA0NTU0MTNGM0Q1QjZERkM2Q0U0MjRDODE2NEM4LzAvMzNBRTgzRjQ0OTFCRUEx
MDVGODVFRDJEQTkzODQ0MDYxMzI1MDQyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0FFODNGNDQ5MUJFQTEwNUY4
NUVEMkRBOTM4NDQwNjEzMjUwNDI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCQzExNkE4MzJGQTE2NjA3RDY3NUM3NUY2N0UzMDA0OTcwNDU1NDEz
RjNENUI2REZDNkNFNDI0QzgxNjRDOC8wLzMyMzgzMDMzM2EzOTY1NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM5MzgzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDnuAw
DQYJKoZIhvcNAQELBQADggEBALe/HR3+xhyUko4+DoN4FX6fnaXL6oxZgwK/q9ku
23YxG52xlYJG8iyVc9A0ZAEo/T81TYh2x6cmRVevfNPlAOkvgG+Q8RpilagBkCh8
poREAgeJRp2t176K/H6UuazcoQlH16SWRPO9Ge3tCW8AHHMZ+RTA4Vp6fC9I2ku0
ww4QisislXEyMwTsUoHsiOLteoBVpYc5x6V2czRGWFPWuHNtMDOFjU2Q0zIlaiJZ
tCR19UotIbgp6tpPQtP9ub3YubAaxZn0NfSEIQUC/66cOhFJVYiNBPOelyk6ufLI
Hk5sNc/2RdB+Nu2fhQF6uaAWvzvlcwkdWnbBu7PQyXhXIW8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:30 2025 by rpki-client on console.sobornost.net