Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3634203d3e203631353533.roa
File:                     323830313a3136383a313a3a2f34382d3634203d3e203631353533.roa (raw, json)
Hash identifier:          2JoNtTXEEFciLTvmJu+A2tFQMvyJaYh7s80fKHl1SXg=
Subject key identifier:   EA:4F:68:C5:F8:CC:E1:4B:A3:A7:B5:2D:34:B9:08:2F:AC:AC:F6:03
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       22D84693195F4F0CB523520405C8CB91A2BC4C6F
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3634203d3e203631353533.roa
Signing time:             Tue 15 Apr 2025 13:14:56 +0000
ROA not before:           Tue 15 Apr 2025 13:09:56 +0000
ROA not after:            Tue 14 Apr 2026 13:14:56 +0000
asID:                     61553
IP address blocks:        2801:168:1::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d8:46:93:19:5f:4f:0c:b5:23:52:04:05:c8:cb:91:a2:bc:4c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Apr 15 13:09:56 2025 GMT
            Not After : Apr 14 13:14:56 2026 GMT
        Subject: CN=EA4F68C5F8CCE14BA3A7B52D34B9082FACACF603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:36:e6:6f:0c:3f:2e:ba:ea:53:8d:36:3f:
                    31:65:80:9a:c2:9f:3a:41:3b:dd:29:25:ff:b0:17:
                    00:26:64:59:1d:6c:77:46:f1:07:7c:bd:18:7d:93:
                    06:85:e0:9d:f4:d7:c8:5d:52:f5:24:51:11:5f:11:
                    a0:ee:59:17:c6:6b:f6:3c:4b:38:3c:86:2f:b1:3e:
                    2a:66:00:71:f6:c1:d0:2e:9b:13:43:75:fd:44:a6:
                    03:68:7a:be:11:58:b0:bf:ae:c1:98:16:3e:62:e5:
                    a1:13:f9:49:e4:6e:02:6b:28:bb:38:48:c7:97:83:
                    ac:1e:60:38:a7:d5:99:be:3e:92:0c:99:9c:47:42:
                    57:fc:a7:c2:04:9b:b9:d6:b6:07:90:90:4b:42:3d:
                    b1:2a:fa:f7:77:a9:33:d4:b3:62:b9:e9:dd:cf:45:
                    d9:dd:06:1d:51:35:ec:16:24:bb:7f:30:02:d0:39:
                    c6:b8:9b:03:a5:69:5b:ba:2e:97:30:b1:c6:bd:a8:
                    78:91:c8:a8:86:71:2c:7e:88:b3:6b:5b:26:f8:e0:
                    00:2f:ac:06:fa:69:85:71:84:e6:f2:31:a3:4d:c9:
                    c3:ee:50:42:e9:da:cd:b4:a3:bb:5c:1d:3e:6c:ae:
                    16:67:d6:e6:5d:4a:2a:24:01:4a:88:d3:14:90:48:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4F:68:C5:F8:CC:E1:4B:A3:A7:B5:2D:34:B9:08:2F:AC:AC:F6:03
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3634203d3e203631353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:168:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:b7:0e:c0:86:79:4b:03:e5:ae:b1:99:27:51:da:30:3e:
         e7:a9:bd:05:86:fc:28:70:2d:41:6b:f1:4f:09:1d:9b:bb:5c:
         16:28:f4:13:d9:8b:23:ed:bd:d0:fa:de:7d:9c:4c:44:57:86:
         f1:6b:e6:be:59:4d:76:ed:eb:b7:12:d4:08:30:90:1f:a2:d0:
         cc:57:eb:d6:c9:51:c2:97:3f:98:3e:bb:8a:3d:fc:37:88:d9:
         22:17:71:22:39:89:fa:59:fb:33:82:39:de:85:70:6d:37:80:
         b8:ca:f8:1e:54:4d:99:44:7c:f5:b9:ca:4f:85:b0:8a:f2:8a:
         07:5c:38:49:c9:81:c1:db:37:87:9d:c5:34:55:6f:93:48:5d:
         b6:20:b6:fb:7e:d2:8a:4d:e4:a4:4f:55:ed:c3:7e:71:97:1e:
         a7:ac:3a:3b:bd:7d:51:c3:17:90:e1:fc:c4:37:72:e5:46:92:
         b2:d8:db:ee:d1:69:64:bc:91:2b:f3:55:90:71:03:a0:25:61:
         83:31:97:8f:94:e9:01:af:ef:53:61:df:45:2f:10:a3:9f:a7:
         8e:b7:a2:53:07:58:81:fb:04:e2:1d:1f:62:60:ce:88:96:ff:
         a0:0d:3d:56:d4:31:f2:ca:b9:d1:86:57:1e:f1:be:fe:f7:56:
         ef:9c:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:12 2025 by rpki-client on console.sobornost.net