Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/323830333a396435303a3a2f33322d3438203d3e20323733383731.roa
File:                     323830333a396435303a3a2f33322d3438203d3e20323733383731.roa (raw, json)
Hash identifier:          1Pd1B/Nf+b4sCJCqvDCM+sL+AjjWr9njnLQMS6cZd7c=
Subject key identifier:   B4:C4:DD:F0:30:A9:07:64:EF:DB:29:65:83:8A:62:E0:BC:3C:28:BE
Certificate issuer:       /CN=9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97
Certificate serial:       6786B905225FC9810C8C1BE4FF7652BC85221997
Authority key identifier: 9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/323830333a396435303a3a2f33322d3438203d3e20323733383731.roa
Signing time:             Tue 01 Apr 2025 21:55:00 +0000
ROA not before:           Tue 01 Apr 2025 21:50:00 +0000
ROA not after:            Tue 31 Mar 2026 21:55:00 +0000
asID:                     273871
IP address blocks:        2803:9d50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:86:b9:05:22:5f:c9:81:0c:8c:1b:e4:ff:76:52:bc:85:22:19:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97
        Validity
            Not Before: Apr  1 21:50:00 2025 GMT
            Not After : Mar 31 21:55:00 2026 GMT
        Subject: CN=B4C4DDF030A90764EFDB2965838A62E0BC3C28BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:cc:16:ad:a7:73:9c:d4:95:c8:f6:3c:69:
                    c6:0f:e9:f3:35:bb:a3:a1:e9:78:ab:28:0c:d7:e4:
                    07:c8:4d:b0:98:90:87:93:ad:7a:e6:b3:3f:f9:4f:
                    df:18:f1:58:bb:8c:5a:46:e9:60:85:ba:85:9a:d7:
                    fb:23:f6:38:9b:ba:67:42:bc:91:4b:ed:3f:c3:e7:
                    81:0d:ce:be:78:ac:81:b0:fd:5b:ec:b0:c3:dd:43:
                    c3:b0:87:07:1f:4e:85:f0:c4:40:0d:b1:f8:03:16:
                    9a:44:86:48:c3:4d:64:93:ba:6e:89:2a:54:22:cc:
                    f4:d1:dd:74:cc:b8:e6:7a:e6:6b:80:e4:47:f1:56:
                    58:56:94:bf:ad:c5:9a:79:9c:b4:10:0a:0d:34:09:
                    8a:a4:e0:e6:45:ac:08:ea:f5:dc:a9:2e:8e:71:48:
                    4a:7f:b1:bc:09:1f:2f:b5:c4:49:d5:6d:04:46:3d:
                    09:2f:ca:da:35:e6:59:9a:ef:0a:d6:53:66:89:30:
                    5e:3f:fd:92:a0:6e:3d:91:2b:12:3b:6a:e6:2c:3b:
                    9b:0b:bb:0d:65:af:c2:b0:7a:50:38:e8:95:9b:f2:
                    f4:78:19:f5:35:85:a4:c1:7a:7b:e6:6d:f6:13:1d:
                    3b:b1:0b:0d:b1:4f:da:87:7a:dc:e4:29:0e:2e:7e:
                    ee:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C4:DD:F0:30:A9:07:64:EF:DB:29:65:83:8A:62:E0:BC:3C:28:BE
            X509v3 Authority Key Identifier:
                keyid:9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/323830333a396435303a3a2f33322d3438203d3e20323733383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:0c:78:da:b6:2b:6b:39:ae:0d:4a:cb:cb:9c:88:74:9d:63:
         29:c5:84:d2:27:ee:29:1d:50:6d:62:39:c1:ac:e8:c5:19:ec:
         58:e4:4f:13:94:e3:fe:9d:03:aa:6d:b0:a4:f6:72:04:d5:a1:
         47:2b:30:bb:6b:a6:89:0e:78:02:05:46:39:43:bd:ec:78:96:
         8f:97:31:e3:ef:03:8f:9e:51:fc:3d:64:9a:9d:a3:a8:9a:60:
         af:ed:e8:d5:9d:b2:85:71:43:87:c3:c8:d0:21:d8:be:81:c6:
         19:b4:0c:6b:6b:03:30:f5:b7:30:78:63:3b:ff:a6:13:a1:ce:
         71:13:ee:17:2e:7e:e0:71:ca:21:92:d9:06:e8:f4:62:56:29:
         0a:f8:10:28:f1:8c:ef:13:a4:15:7a:6c:96:de:5e:59:34:f5:
         14:6d:95:a8:73:54:f1:2b:62:08:be:e7:62:4b:6e:e3:6a:1b:
         ae:d0:be:12:70:3a:b5:82:fe:be:4c:8c:91:01:3e:be:86:f6:
         14:7e:29:f2:cc:ce:03:a7:fa:55:cc:4c:0c:bc:f7:57:6a:ae:
         97:d8:b2:77:83:c0:fd:0a:13:07:91:3d:6e:89:15:23:8a:37:
         6f:46:76:f4:51:e3:67:41:86:b8:ea:27:db:f6:23:ce:27:db:
         96:42:fd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:13 2025 by rpki-client on console.sobornost.net