Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a613030303a3a2f33352d3634203d3e203634313230.roa
File:                     323830333a653464303a613030303a3a2f33352d3634203d3e203634313230.roa (raw, json)
Hash identifier:          oy6Jap5M9bhQg9XAuvwN7Kr2wxkS53WVK0MbPOTtv1I=
Subject key identifier:   C5:84:1E:AC:29:9C:0D:44:23:1F:73:9E:94:02:95:F2:13:6A:1F:55
Certificate issuer:       /CN=D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14
Certificate serial:       28C7A7B6A8373E780A6DDC10671EEF0BFD3D75FC
Authority key identifier: D4:8C:B8:1C:EF:C9:0A:3A:EB:DF:CD:F3:EF:4C:2A:FD:3F:1D:9F:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a613030303a3a2f33352d3634203d3e203634313230.roa
Signing time:             Wed 09 Apr 2025 04:40:00 +0000
ROA not before:           Wed 09 Apr 2025 04:35:00 +0000
ROA not after:            Wed 08 Apr 2026 04:40:00 +0000
asID:                     64120
IP address blocks:        2803:e4d0:a000::/35 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c7:a7:b6:a8:37:3e:78:0a:6d:dc:10:67:1e:ef:0b:fd:3d:75:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14
        Validity
            Not Before: Apr  9 04:35:00 2025 GMT
            Not After : Apr  8 04:40:00 2026 GMT
        Subject: CN=C5841EAC299C0D44231F739E940295F2136A1F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:76:c5:0c:54:55:64:b1:2f:21:3b:96:79:cf:
                    ff:81:fe:a6:40:5c:24:b8:3c:a3:d7:39:37:e2:15:
                    38:1e:6f:9a:eb:80:03:78:60:8c:ff:94:92:d5:38:
                    87:b2:6c:5a:c7:2d:bb:7e:84:32:28:6f:e1:20:2f:
                    c4:d8:0c:e2:39:f1:9d:2e:12:23:17:ea:e5:da:88:
                    bc:4d:4b:00:30:d1:c1:17:9d:57:7e:ab:92:33:1b:
                    f8:53:cf:52:00:c0:49:02:1d:32:cb:c0:76:a7:fc:
                    bc:c5:39:99:ef:fe:d9:50:bc:88:6b:53:b1:7c:79:
                    9e:14:fd:87:7a:3a:8c:e3:e7:00:fc:ba:7b:e1:d1:
                    b6:b1:7b:06:b1:49:52:74:5b:51:4c:d6:1f:44:e9:
                    64:73:4f:b6:c6:82:27:1a:fa:36:2a:a0:c9:db:10:
                    8b:d0:e9:44:c1:b8:25:1f:d7:f8:97:2d:6b:5e:57:
                    24:df:13:9a:b9:32:66:b9:a0:92:77:40:f7:f0:d1:
                    25:bd:aa:3e:a5:b7:6c:6d:2f:a5:b8:9b:ee:b2:db:
                    62:31:b8:10:81:10:3b:84:14:11:d0:85:79:21:38:
                    71:fb:17:ff:ea:2f:b3:8b:59:a1:38:6b:49:7e:ce:
                    ac:b8:6e:d1:2d:85:7f:49:84:8c:77:5a:e1:81:a4:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:84:1E:AC:29:9C:0D:44:23:1F:73:9E:94:02:95:F2:13:6A:1F:55
            X509v3 Authority Key Identifier:
                keyid:D4:8C:B8:1C:EF:C9:0A:3A:EB:DF:CD:F3:EF:4C:2A:FD:3F:1D:9F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a613030303a3a2f33352d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e4d0:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:43:fb:3c:8a:f4:ea:30:3a:c4:95:b9:ae:88:cd:4c:9e:
         c0:29:06:02:3b:2d:6b:38:28:08:3a:da:37:c8:26:63:40:af:
         5f:ce:86:3d:43:91:c3:ad:4f:34:ff:9e:fd:b8:5e:93:12:eb:
         df:2e:81:e1:fc:0e:80:e8:1c:57:ef:c3:9d:d1:10:0f:1e:cf:
         3e:d5:d6:bb:cd:72:ae:36:94:79:9d:d0:eb:56:71:a9:7f:82:
         60:17:83:2d:47:cf:38:99:43:57:f8:eb:c4:d4:fc:16:cb:ac:
         70:1b:d8:77:a2:60:59:b7:e5:0c:99:79:db:3e:26:4a:82:9e:
         99:57:d3:e7:9b:c3:47:23:86:86:43:04:7c:66:11:c0:65:57:
         56:d1:2e:c3:91:8e:3d:af:5d:8a:88:58:b7:28:84:ca:dc:b4:
         3c:bb:1a:c4:05:81:bd:d7:97:19:e8:ec:de:e8:08:1a:1c:56:
         14:c0:0d:a4:1a:d9:10:68:3c:1f:42:eb:03:b3:fd:e1:c8:fc:
         d6:70:9b:57:0a:eb:df:75:bb:ed:f2:c0:61:e7:83:a8:68:03:
         e9:f7:86:b3:df:5f:88:8f:fe:31:8e:6c:2e:04:6a:ae:54:be:
         08:ac:a3:e9:a3:77:54:6d:27:6f:51:db:d3:d5:60:a4:1c:f1:
         49:51:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:25 2025 by rpki-client on console.sobornost.net