Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a383030303a3a2f33352d3634203d3e203634313230.roa
File:                     323830333a653464303a383030303a3a2f33352d3634203d3e203634313230.roa (raw, json)
Hash identifier:          LyTrEEpGioODeEmvqshVJH19c1OdDgq43Pd92Pr9dJg=
Subject key identifier:   DA:CD:3C:DC:4F:48:96:22:C1:7E:D9:9C:78:E0:D2:0B:70:6A:04:E1
Certificate issuer:       /CN=D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14
Certificate serial:       04410C7C0B6DCA58150786A3BD9F78E2E648A59D
Authority key identifier: D4:8C:B8:1C:EF:C9:0A:3A:EB:DF:CD:F3:EF:4C:2A:FD:3F:1D:9F:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a383030303a3a2f33352d3634203d3e203634313230.roa
Signing time:             Wed 09 Apr 2025 04:40:00 +0000
ROA not before:           Wed 09 Apr 2025 04:35:00 +0000
ROA not after:            Wed 08 Apr 2026 04:40:00 +0000
asID:                     64120
IP address blocks:        2803:e4d0:8000::/35 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:41:0c:7c:0b:6d:ca:58:15:07:86:a3:bd:9f:78:e2:e6:48:a5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14
        Validity
            Not Before: Apr  9 04:35:00 2025 GMT
            Not After : Apr  8 04:40:00 2026 GMT
        Subject: CN=DACD3CDC4F489622C17ED99C78E0D20B706A04E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:38:21:d5:7b:1f:ed:84:9a:65:41:cf:c2:
                    dc:5f:3e:0f:e6:4f:e0:86:3b:85:50:de:7d:2c:8f:
                    a5:a0:c2:67:a8:f6:2e:f4:55:6e:0d:5b:f0:0c:df:
                    87:1c:97:14:e7:c4:17:25:c8:b4:bb:ff:e9:98:f1:
                    09:e3:a4:ae:c4:2a:1b:c0:55:a7:b3:c6:f8:87:aa:
                    a5:e8:31:fd:d8:ff:7b:1a:c6:5e:03:fb:ea:fb:5c:
                    d5:1f:98:fd:e4:58:dd:d5:94:ca:4b:95:ac:e6:d1:
                    71:19:e5:2d:d6:af:fa:c0:d7:84:f7:4e:be:bf:09:
                    09:a2:67:05:36:11:6b:27:0e:a5:53:08:1c:30:8f:
                    c8:6a:c6:09:3b:0d:7f:19:55:0b:32:0e:4a:47:e3:
                    04:87:a3:25:ce:aa:0e:35:15:e2:d2:d9:58:ee:55:
                    06:e0:eb:0e:a5:09:34:8d:29:04:bd:31:5d:66:b1:
                    76:4f:73:e8:5c:c5:3c:e7:c5:ed:f2:ed:07:a6:38:
                    16:83:f0:ad:25:6f:9e:20:4e:cb:83:1e:9d:65:a8:
                    14:b7:0d:0d:b8:91:7a:df:c8:55:9d:0d:96:78:d9:
                    6d:ed:2f:ea:ce:f5:8c:1f:7e:f4:6b:05:94:15:61:
                    16:dc:93:a9:0e:60:50:b4:14:6c:00:55:60:cb:b9:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CD:3C:DC:4F:48:96:22:C1:7E:D9:9C:78:E0:D2:0B:70:6A:04:E1
            X509v3 Authority Key Identifier:
                keyid:D4:8C:B8:1C:EF:C9:0A:3A:EB:DF:CD:F3:EF:4C:2A:FD:3F:1D:9F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a383030303a3a2f33352d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e4d0:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:19:b5:98:f3:4f:e4:29:92:08:63:f8:31:3f:bb:77:3f:
         87:a7:3f:80:fb:8e:42:26:d6:36:bd:8c:f3:19:88:36:b2:f0:
         04:a9:14:0b:fe:20:46:31:54:85:bd:a9:91:31:b1:63:3d:ce:
         fb:99:9b:4f:fe:62:df:60:96:e2:10:90:e4:31:48:9c:59:75:
         7c:09:8d:60:37:45:49:12:c9:e0:05:20:6c:00:ec:cf:3e:fd:
         e4:66:ed:c6:93:b1:87:f3:3b:8f:ad:41:9c:33:ac:0a:12:ce:
         a8:b2:60:e0:99:12:d6:47:14:08:b7:3f:43:e7:26:90:62:ef:
         26:73:30:41:17:10:fd:72:1c:aa:66:d2:1d:81:89:77:3d:9e:
         8b:bd:72:ef:a4:1f:37:15:4c:e7:bc:6b:57:de:1b:1a:3d:c6:
         f1:8f:7d:7f:f7:9b:fa:32:8b:8b:74:51:fa:a4:f0:8a:24:97:
         e1:50:0e:52:f7:4e:bd:b6:12:08:3c:22:14:d7:57:f6:77:a7:
         b9:a1:bf:04:e6:b2:da:e8:b9:88:ce:00:ab:d4:64:7d:9c:c2:
         2c:bd:de:42:01:54:7a:04:ac:47:7e:40:b3:01:94:f5:12:5b:
         3b:db:40:30:8c:13:48:1d:92:5b:2d:aa:f8:ae:a9:42:1d:70:
         7a:c1:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:25 2025 by rpki-client on console.sobornost.net