Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323733383832.roa
File:                     323830333a613231303a3a2f33322d3332203d3e20323733383832.roa (raw, json)
Hash identifier:          CUTGCnMTKm+pVkl+LYAUnVmG9JR6KGLpUXel7cRf/Tw=
Subject key identifier:   C2:31:07:06:1B:F2:E3:31:24:8D:26:68:BA:F3:5A:A0:5F:E5:46:69
Certificate issuer:       /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial:       2150FEC12B738BA328CFBBD88238B29066AC7CE8
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323733383832.roa
Signing time:             Fri 11 Apr 2025 20:55:00 +0000
ROA not before:           Fri 11 Apr 2025 20:50:00 +0000
ROA not after:            Fri 10 Apr 2026 20:55:00 +0000
asID:                     273882
IP address blocks:        2803:a210::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:50:fe:c1:2b:73:8b:a3:28:cf:bb:d8:82:38:b2:90:66:ac:7c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
        Validity
            Not Before: Apr 11 20:50:00 2025 GMT
            Not After : Apr 10 20:55:00 2026 GMT
        Subject: CN=C23107061BF2E331248D2668BAF35AA05FE54669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:3d:9c:3f:61:50:82:ab:2b:68:75:ac:d2:
                    49:68:4d:31:a9:89:cb:78:75:8a:3c:d8:30:a6:c6:
                    05:3b:6e:42:2b:2a:c0:e9:49:5a:7b:25:5a:dd:be:
                    48:9f:77:f7:a1:21:f6:59:61:5f:a4:19:14:7d:92:
                    2f:b5:4c:6f:4d:f6:f4:a8:ce:9a:a3:b4:24:b6:b2:
                    dc:65:16:7d:03:fd:3a:cf:00:01:72:6f:a5:c1:88:
                    3b:ad:6a:06:ac:5c:93:42:4b:0c:06:ee:07:a2:64:
                    98:df:c2:f1:37:4b:cc:28:3c:8a:ba:21:37:d2:bb:
                    ee:1f:8d:57:f8:e1:31:78:f1:23:e7:2a:c0:cc:78:
                    a0:d8:6a:6f:8f:08:bf:0a:08:4a:80:b4:b7:b7:dc:
                    69:0a:68:dc:72:6e:34:3e:b7:28:a6:ee:d2:67:7b:
                    6f:a1:f2:3a:f8:14:2b:e3:ce:84:21:93:0c:6f:cb:
                    2d:c7:43:53:99:78:05:28:48:ac:b4:f0:fd:06:2b:
                    e6:a2:0c:00:9b:ef:db:c7:d2:d0:0f:83:da:a7:e0:
                    f6:8b:bb:83:93:b9:89:de:f1:8b:c9:d2:fd:bc:ca:
                    cc:6c:e6:c7:3b:0f:5a:52:35:2a:44:ab:2d:b0:28:
                    24:51:6f:90:d1:82:11:b6:ef:4c:ac:47:1b:82:2b:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:07:06:1B:F2:E3:31:24:8D:26:68:BA:F3:5A:A0:5F:E5:46:69
            X509v3 Authority Key Identifier:
                keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323733383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a210::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:77:ea:9d:e4:7a:43:a8:b6:fe:c3:5d:bd:2c:f2:c6:f4:3c:
         f5:66:87:c9:ff:83:51:b2:32:19:55:0c:8c:97:0d:23:e4:d5:
         25:24:aa:bd:a2:52:59:91:de:9e:d9:e2:a6:de:3c:61:54:8b:
         48:47:49:0f:6a:ad:8b:37:87:3a:86:01:f2:93:fa:62:89:a3:
         73:39:88:e1:d3:31:9e:2a:4a:43:ac:59:3e:56:4c:0a:72:8d:
         ca:44:9f:4c:47:8f:1d:13:b5:44:73:44:af:bf:69:59:39:6f:
         45:15:02:93:21:ac:22:71:25:ca:f8:91:a0:52:98:80:c8:2c:
         84:8c:21:57:e5:9c:aa:ba:75:db:df:0b:fc:eb:bc:12:6f:ab:
         16:3c:90:11:d2:c3:84:e8:c8:0d:15:e0:ef:4f:f1:b7:04:11:
         40:62:b5:84:db:5b:9f:75:12:9f:cf:2e:ff:28:a9:7d:0c:5e:
         67:55:12:93:c1:b3:90:5d:34:f4:8d:cb:f0:11:da:ea:48:ec:
         94:0b:4b:8c:14:eb:77:03:fc:10:78:ce:80:13:b4:80:c4:06:
         7e:3c:62:18:fb:dc:78:56:e1:96:cd:97:13:9b:b8:4d:3d:33:
         ad:2d:82:20:2b:0a:d4:12:ab:ef:78:88:32:fe:9a:5b:9c:a8:
         a5:4c:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:36 2025 by rpki-client on console.sobornost.net