Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/323830333a376432303a3a2f33322d3438203d3e20323639373530.roa
File:                     323830333a376432303a3a2f33322d3438203d3e20323639373530.roa (raw, json)
Hash identifier:          p3ZVGeWEf7ba+yYuoV0uVek8LchO+2b3/FaE1rJn9mE=
Subject key identifier:   C0:08:A1:A3:96:67:FD:68:E0:E0:1B:94:86:53:A2:04:B0:4E:CC:82
Certificate issuer:       /CN=75812974A06BBC586C8B2B8774FD236214956CF8
Certificate serial:       44700352A8443C4AB16D12883516086D46019983
Authority key identifier: 75:81:29:74:A0:6B:BC:58:6C:8B:2B:87:74:FD:23:62:14:95:6C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/323830333a376432303a3a2f33322d3438203d3e20323639373530.roa
Signing time:             Tue 22 Apr 2025 18:15:45 +0000
ROA not before:           Tue 22 Apr 2025 18:10:45 +0000
ROA not after:            Tue 21 Apr 2026 18:15:45 +0000
asID:                     269750
IP address blocks:        2803:7d20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:03:52:a8:44:3c:4a:b1:6d:12:88:35:16:08:6d:46:01:99:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75812974A06BBC586C8B2B8774FD236214956CF8
        Validity
            Not Before: Apr 22 18:10:45 2025 GMT
            Not After : Apr 21 18:15:45 2026 GMT
        Subject: CN=C008A1A39667FD68E0E01B948653A204B04ECC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:0a:b7:45:8f:58:aa:30:95:0d:f9:66:a5:
                    d8:0d:8b:64:f8:6c:c4:ab:4c:4c:ee:bb:3f:24:d5:
                    99:a3:c2:3c:36:7b:fe:37:16:e6:05:fa:b6:1a:e1:
                    d9:7d:c8:b7:98:65:98:eb:c9:33:b0:6e:08:d9:a5:
                    88:6c:f2:80:fc:3b:dc:c1:75:1c:59:19:ba:d7:ef:
                    bd:06:18:41:ae:cc:51:87:24:34:1a:82:90:6d:c3:
                    e3:f9:34:96:cb:4c:88:0a:10:0a:54:de:f7:32:be:
                    01:af:50:17:5a:d3:a9:41:88:19:4f:69:b8:6c:2a:
                    1d:a3:ec:40:f4:f5:4d:b0:90:5b:36:d2:03:44:d0:
                    50:62:7d:4b:74:b9:37:04:12:b2:00:42:66:dc:21:
                    28:54:c3:04:c9:7e:10:f6:e8:92:c7:34:0f:81:75:
                    50:95:22:9d:78:a5:3c:1f:28:ef:4a:56:2a:66:50:
                    61:c3:4f:e8:32:91:43:a0:51:43:3c:67:d9:3a:ed:
                    c8:9f:b7:75:2f:b7:68:83:26:61:d5:fa:84:f3:8e:
                    9d:b0:4f:e3:e6:d5:c1:68:9b:bb:51:2c:5a:92:08:
                    71:a5:1f:61:5d:01:18:61:ab:b9:fd:36:e1:df:12:
                    d4:35:2a:af:d9:cf:f7:c3:1f:31:73:1b:c0:b6:54:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:08:A1:A3:96:67:FD:68:E0:E0:1B:94:86:53:A2:04:B0:4E:CC:82
            X509v3 Authority Key Identifier:
                keyid:75:81:29:74:A0:6B:BC:58:6C:8B:2B:87:74:FD:23:62:14:95:6C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/323830333a376432303a3a2f33322d3438203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:86:d8:fc:9b:0e:8f:05:79:c5:54:9a:70:d6:73:84:77:ff:
         4d:21:28:d8:47:91:5d:4c:b3:11:00:88:11:48:5e:05:ce:93:
         f0:b2:88:45:4a:e3:83:e3:ef:52:7a:f6:e8:05:7c:d1:24:5e:
         d7:33:ca:f0:48:7a:22:eb:db:5c:b9:0e:e5:fe:13:32:d9:8f:
         0b:67:bb:da:54:60:9d:fc:fe:25:9a:ac:cf:1c:2c:4d:54:cf:
         2d:68:f2:da:fd:f9:5a:08:c9:eb:d3:ef:a2:2b:39:fc:f8:7e:
         8d:9e:89:b1:18:c8:26:63:a2:6c:8f:ae:d8:4a:32:a3:6d:d6:
         63:1b:73:48:28:44:7c:d3:66:17:40:32:21:c1:4a:ba:d5:33:
         3d:63:9b:0b:34:89:51:94:7a:bc:60:59:07:5c:e7:d6:68:73:
         6f:f8:fd:0c:b0:83:4e:ed:61:32:06:8b:a2:d6:85:03:9c:32:
         9c:2e:07:01:40:85:53:5f:e2:cd:38:3d:3b:6a:ee:82:f4:23:
         6e:e8:c4:1f:29:52:c7:a8:5d:9c:2e:4a:11:ea:69:b4:4d:d2:
         87:45:9b:4f:1f:16:27:bf:d4:e3:f1:14:2f:55:46:c2:80:36:
         9d:ba:46:c0:10:38:ba:df:4c:29:d5:9b:f4:29:7b:72:5e:b8:
         15:c7:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net