Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa
File:                     323830333a613231303a3a2f33322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          dsyRb8WGGTKb0lM5+yhFREsQD756Bh0H47mCDniqNrI=
Subject key identifier:   27:71:6C:82:2C:58:66:20:41:E3:CB:CE:F4:7C:D9:43:59:34:D6:D3
Certificate issuer:       /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial:       30DBAA1C58D72479B94C35DB01B0A166BB36ECCC
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa
Signing time:             Mon 28 Apr 2025 20:20:01 +0000
ROA not before:           Mon 28 Apr 2025 20:15:01 +0000
ROA not after:            Mon 27 Apr 2026 20:20:01 +0000
asID:                     3356
IP address blocks:        2803:a210::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:db:aa:1c:58:d7:24:79:b9:4c:35:db:01:b0:a1:66:bb:36:ec:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
        Validity
            Not Before: Apr 28 20:15:01 2025 GMT
            Not After : Apr 27 20:20:01 2026 GMT
        Subject: CN=27716C822C58662041E3CBCEF47CD9435934D6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:67:3d:c5:28:cc:69:ca:3b:31:7a:67:cd:
                    22:b6:3d:a5:ad:63:b4:37:92:32:e3:b0:42:2f:3b:
                    b6:b8:6e:f0:bb:22:fa:51:a1:a3:f5:b9:ee:19:45:
                    71:80:9d:0c:9c:ba:08:73:44:cd:7f:8c:1c:66:b7:
                    b9:00:82:fe:07:a2:2b:45:3b:3a:e5:da:a9:95:47:
                    5a:8b:3c:96:e2:39:79:a2:0d:38:c5:2c:78:c2:8c:
                    8f:67:05:77:19:f8:d9:3c:ab:14:c9:c5:7b:43:d9:
                    47:50:60:dc:0d:b9:8d:33:ee:cd:0e:1b:db:b0:d2:
                    f0:40:26:1f:5c:1c:95:93:29:b3:32:bf:e9:e2:85:
                    25:37:4f:bd:4f:df:72:c5:36:0c:d2:76:7b:04:65:
                    50:9e:ea:b4:61:5f:5f:cf:7b:1d:e0:c6:a2:b1:44:
                    bc:b2:9d:9d:40:a8:1d:4c:ff:cc:3f:bf:5a:7a:d9:
                    fb:5b:c1:55:bd:95:54:08:08:1b:fe:c1:53:79:81:
                    7e:b9:ca:ba:04:9b:ba:c7:3c:1b:9a:0a:c5:e3:b8:
                    03:52:01:80:84:27:b0:32:49:e3:f8:49:0f:b0:a3:
                    6b:48:7e:0c:27:d2:4b:f8:5c:f1:ae:d9:d7:1b:59:
                    84:9e:a5:86:3f:ec:b5:d3:7f:64:e0:90:c1:84:24:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:71:6C:82:2C:58:66:20:41:E3:CB:CE:F4:7C:D9:43:59:34:D6:D3
            X509v3 Authority Key Identifier:
                keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a210::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:2b:2c:d6:b1:8b:cc:88:f9:4e:19:da:71:7d:54:04:76:
         1d:85:00:b0:c6:85:eb:ba:bf:59:d2:32:5e:5e:47:89:25:44:
         e8:ad:2c:67:b1:17:c6:40:33:7b:fb:76:9f:5c:1d:88:7c:39:
         ae:e0:9e:e4:81:2d:f7:eb:bf:04:aa:dc:db:a4:d2:87:5b:2f:
         2f:54:4f:67:80:34:10:da:7b:ae:88:49:ec:6a:cf:f3:66:85:
         c0:ae:4e:18:e4:be:96:7a:7c:a5:64:60:15:23:f2:f7:fd:e5:
         e8:30:73:06:87:62:e9:c9:46:60:c7:4d:25:15:88:74:af:9b:
         79:08:4c:c4:d7:f2:0c:e3:5d:05:03:d3:14:6a:54:78:02:f2:
         fa:b9:3d:b0:e5:56:c6:bf:79:bc:d0:67:50:ef:d9:42:a9:8f:
         4f:05:e1:59:f0:a9:ee:c6:5a:86:fe:9a:ca:c3:61:96:22:51:
         11:72:91:8e:cd:cc:35:0f:27:bb:92:ce:78:8e:e3:bd:6c:a6:
         07:f3:b2:51:68:3e:f4:ee:24:50:33:94:62:74:8b:88:e7:f9:
         3f:9d:8e:5d:00:2d:2b:4e:fd:d0:94:35:1e:ee:6a:ee:3b:03:
         5c:bd:aa:81:a7:da:fd:26:5c:ec:5e:52:94:ab:5b:ef:38:29:
         9c:31:65:9e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUMNuqHFjXJHm5TDXbAbChZrs27MwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1NjQ0REY1M0NEQjYwODlCNzg1N0NERTUyMDFCMDZE
M0Y2QjFEQjAeFw0yNTA0MjgyMDE1MDFaFw0yNjA0MjcyMDIwMDFaMDMxMTAvBgNV
BAMTKDI3NzE2QzgyMkM1ODY2MjA0MUUzQ0JDRUY0N0NEOTQzNTkzNEQ2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMmc9xSjMaco7MXpnzSK2PaWt
Y7Q3kjLjsEIvO7a4bvC7IvpRoaP1ue4ZRXGAnQycughzRM1/jBxmt7kAgv4HoitF
Ozrl2qmVR1qLPJbiOXmiDTjFLHjCjI9nBXcZ+Nk8qxTJxXtD2UdQYNwNuY0z7s0O
G9uw0vBAJh9cHJWTKbMyv+nihSU3T71P33LFNgzSdnsEZVCe6rRhX1/Pex3gxqKx
RLyynZ1AqB1M/8w/v1p62ftbwVW9lVQICBv+wVN5gX65yroEm7rHPBuaCsXjuANS
AYCEJ7AySeP4SQ+wo2tIfgwn0kv4XPGu2dcbWYSepYY/7LXTf2TgkMGEJCGtAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUJ3FsgixYZiBB48vO9HzZQ1k01tMwHwYDVR0j
BBgwFoAUL1ZE31PNtgibeFfN5SAbBtP2sdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81N0EwNDM4REQwRUE1RjUzMzc3N0E5RDgzMTY5NEQ3M0I4
NjgzN0YwRjVDODUyNzcwMDAyMjUwQjAzOENEREVELzAvMkY1NjQ0REY1M0NEQjYw
ODlCNzg1N0NERTUyMDFCMDZEM0Y2QjFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjU2NDRERjUzQ0RCNjA4OUI3
ODU3Q0RFNTIwMUIwNkQzRjZCMURCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTdBMDQzOEREMEVBNUY1MzM3NzdBOUQ4MzE2OTRENzNCODY4MzdGMEY1
Qzg1Mjc3MDAwMjI1MEIwMzhDRERFRC8wLzMyMzgzMDMzM2E2MTMyMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMzMzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOiEDANBgkq
hkiG9w0BAQsFAAOCAQEACg4rLNaxi8yI+U4Z2nF9VAR2HYUAsMaF67q/WdIyXl5H
iSVE6K0sZ7EXxkAze/t2n1wdiHw5ruCe5IEt9+u/BKrc26TSh1svL1RPZ4A0ENp7
rohJ7GrP82aFwK5OGOS+lnp8pWRgFSPy9/3l6DBzBodi6clGYMdNJRWIdK+beQhM
xNfyDONdBQPTFGpUeALy+rk9sOVWxr95vNBnUO/ZQqmPTwXhWfCp7sZahv6aysNh
liJREXKRjs3MNQ8nu5LOeI7jvWymB/OyUWg+9O4kUDOUYnSLiOf5P52OXQAtK079
0JQ1Hu5q7jsDXL2qgafa/SZc7F5SlKtb7zgpnDFlng==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:36 2025 by rpki-client on console.sobornost.net