Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
File:                     323830333a646434303a3a2f33322d3438203d3e20323634363738.roa (raw, json)
Hash identifier:          /b1eDm9Y7oRs94nAbEpcwT2yuvjJ7z2cgJyZkJI4aOM=
Subject key identifier:   BA:FE:0D:E2:2B:D7:D6:45:7C:A7:02:4D:DD:7C:AD:DC:06:4E:DB:09
Certificate issuer:       /CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Certificate serial:       71DB03510DA479E9197F447B88020643FA5565CD
Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
Signing time:             Tue 04 Feb 2025 18:30:47 +0000
ROA not before:           Tue 04 Feb 2025 18:25:47 +0000
ROA not after:            Tue 03 Feb 2026 18:30:47 +0000
asID:                     264678
IP address blocks:        2803:dd40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:db:03:51:0d:a4:79:e9:19:7f:44:7b:88:02:06:43:fa:55:65:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C
        Validity
            Not Before: Feb  4 18:25:47 2025 GMT
            Not After : Feb  3 18:30:47 2026 GMT
        Subject: CN=BAFE0DE22BD7D6457CA7024DDD7CADDC064EDB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7d:5b:11:49:40:41:d9:11:1f:13:c9:18:81:
                    0b:15:a1:a3:c4:34:ab:28:d0:fe:17:ca:d6:64:bc:
                    9f:18:f1:bc:8c:3d:47:81:ce:6c:c3:fb:89:f3:2c:
                    f3:15:13:0e:d9:5e:16:15:20:59:18:18:a1:5b:97:
                    20:01:26:b6:3b:be:77:fb:11:db:af:d3:40:0b:52:
                    4a:2d:7d:96:e8:ab:98:b3:e7:da:60:ab:66:d5:d7:
                    25:d9:cd:d9:55:ce:dc:06:8d:61:55:41:5c:fc:41:
                    2c:22:cb:e4:12:ab:b3:b1:27:5e:e9:bd:b4:51:67:
                    9c:93:a5:ab:91:cd:0c:69:f0:fe:ff:57:9a:4f:8f:
                    33:a4:79:87:14:fb:27:ed:9d:a7:dc:e3:ed:5e:55:
                    2c:95:9e:c1:cd:23:41:4b:8c:a2:29:9b:6d:5a:42:
                    27:09:22:aa:51:47:dd:4e:f0:3a:22:8e:a3:21:69:
                    3f:b1:f0:27:c8:dd:48:cd:92:e8:7e:d6:1c:a2:1e:
                    2b:62:35:79:23:80:16:89:7f:0a:e8:60:34:7d:e0:
                    c3:9c:58:14:cf:58:aa:d3:a4:a7:a3:d7:f0:34:e6:
                    58:5a:5c:68:c7:4c:ba:56:bc:7a:fa:85:f6:d6:13:
                    b1:7d:15:c0:e5:67:1a:bc:78:ab:1d:2d:82:cc:10:
                    b5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:0D:E2:2B:D7:D6:45:7C:A7:02:4D:DD:7C:AD:DC:06:4E:DB:09
            X509v3 Authority Key Identifier:
                keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:82:1b:cd:c0:d0:95:54:61:76:41:51:32:89:c8:35:7d:
         d1:37:4a:6a:81:ec:69:cd:c3:c6:23:c7:1d:59:12:f0:6f:e0:
         df:65:20:4f:50:99:49:45:e8:e7:af:30:f0:23:9d:56:d3:58:
         47:42:5a:40:8a:e4:cf:31:0a:04:90:3f:48:b0:9b:13:fb:ce:
         5e:90:94:f7:92:60:cc:b2:62:53:a3:d7:b6:55:64:0c:df:94:
         0b:9b:d3:32:48:de:a0:15:26:ce:ec:a4:3d:c4:9f:cd:95:3a:
         8f:00:d7:61:df:3c:0e:c5:6c:5e:f7:c1:ef:f4:5a:f1:0f:48:
         1e:21:ec:5d:2e:37:5d:85:c4:3f:fe:69:67:1f:13:2e:84:2f:
         59:d4:78:dd:2f:bd:35:94:4e:22:af:70:4c:40:85:10:d6:ac:
         87:39:fb:33:dd:ed:b5:37:09:fe:bc:f0:4b:0c:24:68:51:be:
         23:de:ea:81:c1:ed:ee:87:3a:38:fb:a9:e1:16:c7:43:e8:88:
         36:a6:b7:98:c0:ea:d5:9c:7a:91:36:a0:aa:31:90:65:21:26:
         ca:7b:dc:fa:62:6d:c3:8b:35:eb:17:d7:70:3c:26:4f:93:58:
         67:9b:f6:08:9e:41:38:95:ab:52:2c:1a:9c:72:29:1c:ca:1f:
         9b:28:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:10 2025 by rpki-client on console.sobornost.net