Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa
File:                     323830333a6335303a3a2f33322d3332203d3e20323733313339.roa (raw, json)
Hash identifier:          E7Exp7xyM6MbyJ24EQRuCygT1jNxq3YxJFSiRMdMe1o=
Subject key identifier:   AD:36:2B:15:26:3D:C6:B3:A6:A0:EB:14:74:86:B5:D5:DD:65:53:BA
Certificate issuer:       /CN=162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9
Certificate serial:       39436D898A15599F995E70A127FC009C6CB72282
Authority key identifier: 16:25:68:E5:3E:E1:CC:63:AF:A6:BB:CE:7B:AD:8F:CB:84:8C:DD:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa
Signing time:             Thu 10 Apr 2025 15:14:26 +0000
ROA not before:           Thu 10 Apr 2025 15:09:26 +0000
ROA not after:            Thu 09 Apr 2026 15:14:26 +0000
asID:                     273139
IP address blocks:        2803:c50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:6d:89:8a:15:59:9f:99:5e:70:a1:27:fc:00:9c:6c:b7:22:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9
        Validity
            Not Before: Apr 10 15:09:26 2025 GMT
            Not After : Apr  9 15:14:26 2026 GMT
        Subject: CN=AD362B15263DC6B3A6A0EB147486B5D5DD6553BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:f4:b7:41:92:8a:19:f6:a1:2c:c8:ff:87:
                    94:f0:a5:fd:20:1a:08:a2:3d:d0:6c:3d:71:16:ce:
                    02:d0:af:fb:fe:b6:8b:fc:80:f8:28:a7:36:86:ca:
                    de:6c:ec:eb:ba:bf:d2:46:a0:1f:bd:6b:20:c2:87:
                    a4:27:ab:ad:0a:68:1e:01:91:5b:85:e4:a3:82:a1:
                    8c:4c:8a:38:94:11:2e:65:a2:c9:ff:8c:7c:32:a1:
                    4c:49:ef:bf:63:a3:d9:89:fe:30:ba:12:67:90:3e:
                    80:34:98:fb:04:52:25:4e:3d:a9:f8:63:b9:77:63:
                    2e:ae:71:1e:23:24:40:4e:32:1c:f3:96:be:f1:14:
                    8f:75:18:8a:44:f8:1e:8e:37:88:30:f3:f8:f9:10:
                    af:77:1e:03:e1:22:0e:4a:c4:56:8f:24:35:09:d8:
                    af:a1:f2:2c:7b:42:6f:6b:8c:f6:0c:99:4f:c0:ed:
                    5b:6e:8d:6b:9a:e1:2a:f6:6e:41:aa:d4:a8:81:84:
                    18:c5:07:d4:cb:4d:8d:2e:23:81:f8:22:85:16:21:
                    14:f1:f7:0f:8e:03:08:a0:b4:02:d8:2b:db:b6:49:
                    3c:3a:3c:02:5d:4f:00:55:30:f4:ca:9b:ca:f5:e7:
                    c9:39:fb:63:7e:ff:d2:de:62:0f:e9:25:00:8f:99:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:2B:15:26:3D:C6:B3:A6:A0:EB:14:74:86:B5:D5:DD:65:53:BA
            X509v3 Authority Key Identifier:
                keyid:16:25:68:E5:3E:E1:CC:63:AF:A6:BB:CE:7B:AD:8F:CB:84:8C:DD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:64:75:41:50:cc:98:7a:18:90:89:6d:08:d8:ae:2e:7b:
         83:92:28:28:6a:fb:a5:1b:a4:15:93:a8:f3:20:bc:4f:7c:3c:
         c8:33:d4:e3:a0:20:0c:7e:9f:c0:cf:fe:14:27:52:9e:6a:71:
         1d:f2:3d:25:9a:8b:89:29:ed:77:7a:2e:ed:67:83:10:6c:a1:
         b8:95:35:c4:e0:15:6e:86:8f:d6:28:a9:30:18:27:84:e4:9a:
         91:26:b1:81:b5:f8:e8:c6:af:d0:47:4c:bb:59:71:92:1f:44:
         10:c0:78:40:1b:a9:0c:2f:00:6d:5e:7d:19:e6:80:1f:b7:c7:
         95:64:7b:a2:a6:74:ac:5b:d1:96:d7:27:f6:69:b2:bc:97:88:
         98:f6:e7:16:83:8a:c2:11:a6:8b:cb:2d:76:17:0b:78:8b:67:
         61:c7:e0:9b:6b:51:7f:c9:0a:9c:2b:25:cf:36:b4:72:60:e2:
         d9:cc:cf:48:bd:e0:b0:7d:2e:ad:1b:5a:f0:2d:ce:57:33:44:
         4e:b0:74:02:be:5d:1b:7d:17:e0:1d:94:0f:cf:ab:8e:cb:47:
         de:fd:bc:da:20:47:ec:e4:f3:d9:fa:45:d6:7d:a5:36:2f:a9:
         08:cf:b0:3c:75:94:0c:cf:f7:4c:f5:bb:b3:6d:06:2b:cf:34:
         6e:5b:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:13 2025 by rpki-client on console.sobornost.net