Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3634203d3e20323732383531.roa
File:                     323830333a383239303a3a2f33322d3634203d3e20323732383531.roa (raw, json)
Hash identifier:          eL+znP8d5o/rg6xhQJq0G796fqib9eJPpWPraExWLfg=
Subject key identifier:   44:F4:72:A2:38:93:D0:1A:BE:12:A2:F2:93:53:55:84:C4:B6:C9:73
Certificate issuer:       /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
Certificate serial:       677E393147CEA75E137D1BF12AF8CF0C64002AC1
Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3634203d3e20323732383531.roa
Signing time:             Tue 04 Feb 2025 18:04:40 +0000
ROA not before:           Tue 04 Feb 2025 17:59:40 +0000
ROA not after:            Tue 03 Feb 2026 18:04:40 +0000
asID:                     272851
IP address blocks:        2803:8290::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7e:39:31:47:ce:a7:5e:13:7d:1b:f1:2a:f8:cf:0c:64:00:2a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
        Validity
            Not Before: Feb  4 17:59:40 2025 GMT
            Not After : Feb  3 18:04:40 2026 GMT
        Subject: CN=44F472A23893D01ABE12A2F293535584C4B6C973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:c3:ac:6c:7a:80:8f:5a:61:a1:5e:94:08:
                    e3:99:5b:a7:ca:8a:20:51:50:24:c9:47:89:32:47:
                    40:65:ff:6f:e8:09:f8:29:ca:19:49:f6:fd:8e:f6:
                    29:15:ba:3b:6d:04:8d:c0:f8:a8:cd:89:d4:08:19:
                    aa:76:91:b1:51:da:a9:16:67:49:01:db:af:3c:38:
                    15:b7:c3:01:03:af:5d:71:27:08:b1:47:fb:35:ff:
                    a0:30:85:9b:65:f5:d6:48:a0:7a:0f:12:23:e9:b1:
                    44:b0:a6:c8:14:e2:b4:57:a7:16:76:b1:75:ef:84:
                    31:ba:39:5a:9a:0c:46:aa:be:19:17:64:10:fe:f3:
                    75:c1:6a:37:18:00:6d:3b:78:9c:ce:31:f3:2c:c9:
                    0f:09:5f:c3:d4:f6:a9:d0:0e:ae:de:f2:3b:f0:0a:
                    7c:0f:6f:50:dd:37:a2:6d:2a:cd:11:9d:08:50:61:
                    da:77:51:b3:e6:12:de:7b:f6:29:28:91:e7:45:00:
                    3e:bd:9a:39:d1:01:94:cf:95:b7:61:58:94:a0:99:
                    b3:d3:46:50:3d:9c:46:b6:1a:bb:ca:10:9f:b3:d1:
                    6c:95:07:90:7f:1e:54:5a:2b:cc:58:37:40:8b:6a:
                    65:dd:b5:0a:2c:91:59:8d:27:11:42:b3:dd:9b:d9:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F4:72:A2:38:93:D0:1A:BE:12:A2:F2:93:53:55:84:C4:B6:C9:73
            X509v3 Authority Key Identifier:
                keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3634203d3e20323732383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8290::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:03:64:5a:c5:3b:e1:5d:59:00:c7:40:c9:3c:70:b9:02:13:
         ba:ce:5e:5d:26:54:18:7d:a7:1d:a9:4c:6a:d1:88:27:43:f6:
         6b:9e:03:63:2a:5a:f5:2c:3d:41:a5:37:54:02:c0:4c:03:f1:
         4d:3b:20:8b:c1:af:38:49:b1:df:5e:b9:ea:62:9d:5b:8f:e1:
         db:04:4b:6d:ac:33:98:ff:51:e5:56:44:40:e9:75:37:fe:5a:
         6e:b6:70:6e:b0:23:0a:de:14:66:f3:10:55:79:1f:24:6c:9c:
         dd:49:fc:91:7b:30:14:41:e6:77:96:13:1c:0c:9a:10:2e:77:
         ed:7b:97:93:09:8f:04:22:fc:28:3c:79:93:d0:90:48:9f:c1:
         e6:fe:5c:96:9b:b1:d2:13:7c:0f:b8:1e:98:d9:a4:18:9c:e8:
         cb:38:d5:af:1b:35:ef:6b:62:15:6a:ea:a0:06:70:20:3f:e6:
         03:05:de:9c:7d:2b:2a:c7:ff:ac:a9:77:51:51:ce:cc:2b:0b:
         7d:e6:46:56:2f:2e:00:e0:69:3d:f2:a0:26:fa:97:86:4c:df:
         48:e9:50:32:df:9a:aa:2e:7d:8a:63:11:8b:86:48:49:9a:4f:
         05:fe:ee:39:93:0e:70:1c:db:f3:bb:8a:d4:d7:06:01:08:f0:
         43:b0:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:25 2025 by rpki-client on console.sobornost.net