Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3131393a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          UyoeA2u3jFEiY7FdGcX34SNg8mlMb9TUgfMj36uK99M=
Subject key identifier:   6E:A6:C3:7D:8D:83:7A:1E:6E:61:C2:63:0C:E2:2C:2E:85:09:87:37
Certificate issuer:       /CN=02F630ED71E30A0228F714DB90E8B714460D868C
Certificate serial:       2800E81CBF5D579E17CA402DE1C359B2032D177E
Authority key identifier: 02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 01 Apr 2025 15:50:00 +0000
ROA not before:           Tue 01 Apr 2025 15:45:00 +0000
ROA not after:            Tue 31 Mar 2026 15:50:00 +0000
asID:                     27951
IP address blocks:        2801:119::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:00:e8:1c:bf:5d:57:9e:17:ca:40:2d:e1:c3:59:b2:03:2d:17:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F630ED71E30A0228F714DB90E8B714460D868C
        Validity
            Not Before: Apr  1 15:45:00 2025 GMT
            Not After : Mar 31 15:50:00 2026 GMT
        Subject: CN=6EA6C37D8D837A1E6E61C2630CE22C2E85098737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:f2:f7:10:42:3f:ac:b6:48:3b:58:08:58:
                    5b:77:c1:5e:ae:38:db:f2:27:d7:cf:90:19:2f:39:
                    10:61:45:8d:d2:6b:c7:ad:54:25:6a:b8:8e:98:53:
                    fa:a5:39:fa:f5:d0:40:7b:5e:25:3f:67:c1:43:f0:
                    9b:bb:6b:02:45:a3:5f:6f:85:b5:1a:83:5a:29:64:
                    81:b1:98:16:1b:87:e2:12:30:8d:15:89:96:0e:19:
                    db:75:59:1f:90:37:b6:f3:8a:10:d5:e9:31:89:40:
                    da:98:a5:5f:5e:db:b1:fc:a7:7e:ae:a5:7b:72:28:
                    50:7a:26:d4:65:4a:7b:28:bf:ba:77:19:a0:6d:7d:
                    5d:0f:12:51:99:22:12:5c:a5:ef:d1:1d:ab:25:d1:
                    53:70:ef:32:b8:94:22:0b:68:4a:ac:4d:9a:6e:00:
                    a6:9b:d2:72:14:8f:7b:0a:f2:56:77:b1:e8:14:d0:
                    95:ea:ec:49:44:b6:ff:ea:75:a7:f2:2f:bb:06:f1:
                    74:1e:f5:8f:6f:0e:41:da:c2:aa:a3:33:97:36:41:
                    c4:b0:6d:e0:03:47:21:f3:39:98:14:a8:07:1d:6c:
                    96:58:3e:bc:e4:23:10:71:4c:b7:2f:41:58:f9:9f:
                    28:39:c7:2c:06:bd:35:bb:a2:3b:71:f0:86:2d:c0:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A6:C3:7D:8D:83:7A:1E:6E:61:C2:63:0C:E2:2C:2E:85:09:87:37
            X509v3 Authority Key Identifier:
                keyid:02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:119::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:1a:5c:6c:e0:02:91:97:02:6e:6e:d9:a2:33:e6:72:18:
         e3:80:8e:91:fc:16:c4:49:66:76:f9:52:a0:f6:f3:2b:9e:af:
         c4:8a:a4:36:78:ee:02:2c:6a:58:11:1e:e5:4e:e4:5d:fe:8b:
         bb:09:68:a5:74:af:aa:a4:95:9a:6c:96:6c:6b:cf:c8:1c:13:
         2f:54:45:70:90:44:16:f5:24:a5:81:8d:2c:c5:15:f3:fc:be:
         b3:b0:fb:47:19:2d:b8:e3:6f:44:71:28:24:a8:86:d8:ec:b2:
         fd:e6:86:4e:c5:d9:ca:54:af:45:78:15:57:f7:3b:25:06:64:
         d6:79:d2:51:c8:85:9e:3d:49:09:32:38:03:ac:d4:26:90:8a:
         8b:82:e2:36:43:8a:39:22:22:17:18:49:eb:84:12:c4:bc:ab:
         e7:c2:f5:29:af:40:9e:f4:1d:79:33:dd:26:e7:a9:50:45:f2:
         e1:f4:ff:83:dc:0d:fb:0a:a8:5d:dd:96:3b:28:8f:22:a3:25:
         03:7e:4a:84:f4:7e:ef:5f:03:9e:c0:d4:ad:34:da:ee:7b:fc:
         ea:43:5d:71:e9:22:cd:be:3c:1a:b3:67:49:73:60:58:55:03:
         df:76:53:38:8d:bd:e2:fa:05:11:82:26:93:d9:c4:fb:4a:68:
         0d:db:22:d3
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUKADoHL9dV54XykAt4cNZsgMtF34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJGNjMwRUQ3MUUzMEEwMjI4RjcxNERCOTBFOEI3MTQ0
NjBEODY4QzAeFw0yNTA0MDExNTQ1MDBaFw0yNjAzMzExNTUwMDBaMDMxMTAvBgNV
BAMTKDZFQTZDMzdEOEQ4MzdBMUU2RTYxQzI2MzBDRTIyQzJFODUwOTg3MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvIvL3EEI/rLZIO1gIWFt3wV6u
ONvyJ9fPkBkvORBhRY3Sa8etVCVquI6YU/qlOfr10EB7XiU/Z8FD8Ju7awJFo19v
hbUag1opZIGxmBYbh+ISMI0ViZYOGdt1WR+QN7bzihDV6TGJQNqYpV9e27H8p36u
pXtyKFB6JtRlSnsov7p3GaBtfV0PElGZIhJcpe/RHasl0VNw7zK4lCILaEqsTZpu
AKab0nIUj3sK8lZ3segU0JXq7ElEtv/qdafyL7sG8XQe9Y9vDkHawqqjM5c2QcSw
beADRyHzOZgUqAcdbJZYPrzkIxBxTLcvQVj5nyg5xywGvTW7ojtx8IYtwPAFAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUbqbDfY2Deh5uYcJjDOIsLoUJhzcwHwYDVR0j
BBgwFoAUAvYw7XHjCgIo9xTbkOi3FEYNhowwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDQ1Qjg0QjcyODNCNUNDQUQwOTgwQUQ1QUM5MTQ0Q0I3
OEY5RjgxNUVBNzVCMjE5NDcwQTYzNDgxNTRFRTUxLzAvMDJGNjMwRUQ3MUUzMEEw
MjI4RjcxNERCOTBFOEI3MTQ0NjBEODY4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMkY2MzBFRDcxRTMwQTAyMjhG
NzE0REI5MEU4QjcxNDQ2MEQ4NjhDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ0NUI4NEI3MjgzQjVDQ0FEMDk4MEFENUFDOTE0NENCNzhGOUY4MTVF
QTc1QjIxOTQ3MEE2MzQ4MTU0RUU1MS8wLzMyMzgzMDMxM2EzMTMxMzkzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM3MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEBGQAAMA0G
CSqGSIb3DQEBCwUAA4IBAQA63BpcbOACkZcCbm7ZojPmchjjgI6R/BbESWZ2+VKg
9vMrnq/EiqQ2eO4CLGpYER7lTuRd/ou7CWildK+qpJWabJZsa8/IHBMvVEVwkEQW
9SSlgY0sxRXz/L6zsPtHGS24429EcSgkqIbY7LL95oZOxdnKVK9FeBVX9zslBmTW
edJRyIWePUkJMjgDrNQmkIqLguI2Q4o5IiIXGEnrhBLEvKvnwvUpr0Ce9B15M90m
56lQRfLh9P+D3A37Cqhd3ZY7KI8ioyUDfkqE9H7vXwOewNStNNrue/zqQ11x6SLN
vjwas2dJc2BYVQPfdlM4jb3i+gURgiaT2cT7SmgN2yLT
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:00 2025 by rpki-client on console.sobornost.net