Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/323830333a356364303a3a2f33322d3332203d3e20323734303333.roa
File:                     323830333a356364303a3a2f33322d3332203d3e20323734303333.roa (raw, json)
Hash identifier:          irj+K2PUlIjn7hG5+YlbmBAAET6vnCetSYpTESRrXX4=
Subject key identifier:   9B:51:34:9C:55:46:15:72:F5:B3:D3:9F:44:87:F3:9E:AB:38:3A:88
Certificate issuer:       /CN=5E68D9D36A3D299DDDD317AA2508CD25165A8452
Certificate serial:       4C8C6272E921E66943E2A822D8AE9A8279BFCD21
Authority key identifier: 5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/323830333a356364303a3a2f33322d3332203d3e20323734303333.roa
Signing time:             Thu 24 Apr 2025 15:50:00 +0000
ROA not before:           Thu 24 Apr 2025 15:45:00 +0000
ROA not after:            Thu 23 Apr 2026 15:50:00 +0000
asID:                     274033
IP address blocks:        2803:5cd0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8c:62:72:e9:21:e6:69:43:e2:a8:22:d8:ae:9a:82:79:bf:cd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E68D9D36A3D299DDDD317AA2508CD25165A8452
        Validity
            Not Before: Apr 24 15:45:00 2025 GMT
            Not After : Apr 23 15:50:00 2026 GMT
        Subject: CN=9B51349C55461572F5B3D39F4487F39EAB383A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8c:4e:69:cd:59:5e:65:07:99:af:a4:9c:e1:
                    b0:97:f1:a0:bb:8a:e4:1d:81:0e:2c:f5:6b:e9:7b:
                    de:91:db:59:61:a1:04:c9:c1:b8:bc:b9:fb:0d:dd:
                    2b:c4:07:9f:a3:60:ef:46:a3:39:78:5d:b2:d9:13:
                    93:79:98:d0:ad:bb:86:68:d0:d0:59:a9:e0:c2:f5:
                    3a:d7:1c:dd:15:a8:f5:d1:58:30:58:24:1a:5d:8d:
                    ae:5a:66:df:00:62:53:21:25:a2:35:52:33:81:66:
                    fb:ce:55:1b:24:d0:3c:84:36:a3:df:68:6b:24:67:
                    dc:c4:2f:97:aa:c4:d8:68:82:84:db:97:02:79:77:
                    ff:23:d2:b6:46:eb:e9:92:2b:45:2d:79:cd:b5:be:
                    c0:2c:89:50:93:fa:9c:3b:d3:dd:fc:8b:c5:e5:af:
                    c3:ab:ea:ee:b5:11:f0:5d:ce:12:d0:7b:ec:54:16:
                    fe:5a:2c:3b:12:65:5b:1f:20:17:0a:d7:37:db:fd:
                    43:96:f3:78:95:f5:c8:49:c0:43:7d:75:5d:b5:22:
                    7c:59:3d:5b:c4:0e:28:ae:51:96:f6:93:53:34:08:
                    69:da:34:23:c3:c4:35:0c:14:a2:f4:7e:65:27:f0:
                    bf:85:c4:0d:b9:c3:2e:7a:6f:50:66:60:7e:e1:1a:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:51:34:9C:55:46:15:72:F5:B3:D3:9F:44:87:F3:9E:AB:38:3A:88
            X509v3 Authority Key Identifier:
                keyid:5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/323830333a356364303a3a2f33322d3332203d3e20323734303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:33:5e:cb:f1:f1:13:1a:ff:45:c8:d8:5b:4d:5b:27:86:18:
         bc:39:3c:90:25:48:6d:69:44:b5:ac:be:eb:89:b2:e6:a9:06:
         32:1c:5c:85:2a:7b:05:56:6b:73:89:8d:c3:55:ae:c1:e2:be:
         0f:6c:95:93:10:46:67:68:19:ef:50:bc:1e:e4:b4:ff:76:06:
         0d:fe:f3:b9:f0:a1:f1:1f:85:5e:15:f5:ba:88:31:77:29:2e:
         23:e0:d2:67:2a:e5:90:8d:03:37:6a:7e:4f:15:97:3b:35:87:
         c2:e7:21:81:50:9a:17:67:29:c0:35:ee:65:93:e6:4f:c9:52:
         be:26:2a:9e:06:65:ce:3a:f5:13:f2:6e:02:bd:ad:9b:35:df:
         6a:dc:b7:3f:d8:4a:f3:4e:22:4f:f2:93:d8:1b:60:44:e4:97:
         b8:e4:d1:e9:4a:ed:a7:ea:b9:a6:ad:07:94:d4:f3:e4:32:62:
         35:e0:f1:ae:e8:0b:94:2a:1b:0d:df:85:f8:2e:f7:08:19:01:
         b7:d5:c5:20:11:7b:43:6f:f4:f0:ba:9a:47:eb:39:c5:0a:dc:
         4e:f2:03:f6:03:bc:f9:bc:0a:9d:9b:35:37:1f:b5:ec:46:50:
         92:9a:e4:8d:e6:f9:e5:6a:35:ad:85:d6:14:3a:24:3a:ad:dd:
         ea:76:56:ba
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUTIxicukh5mlD4qgi2K6agnm/zSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU2OEQ5RDM2QTNEMjk5RERERDMxN0FBMjUwOENEMjUx
NjVBODQ1MjAeFw0yNTA0MjQxNTQ1MDBaFw0yNjA0MjMxNTUwMDBaMDMxMTAvBgNV
BAMTKDlCNTEzNDlDNTU0NjE1NzJGNUIzRDM5RjQ0ODdGMzlFQUIzODNBODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4jE5pzVleZQeZr6Sc4bCX8aC7
iuQdgQ4s9Wvpe96R21lhoQTJwbi8ufsN3SvEB5+jYO9Gozl4XbLZE5N5mNCtu4Zo
0NBZqeDC9TrXHN0VqPXRWDBYJBpdja5aZt8AYlMhJaI1UjOBZvvOVRsk0DyENqPf
aGskZ9zEL5eqxNhogoTblwJ5d/8j0rZG6+mSK0Utec21vsAsiVCT+pw70938i8Xl
r8Or6u61EfBdzhLQe+xUFv5aLDsSZVsfIBcK1zfb/UOW83iV9chJwEN9dV21InxZ
PVvEDiiuUZb2k1M0CGnaNCPDxDUMFKL0fmUn8L+FxA25wy56b1BmYH7hGqrrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUm1E0nFVGFXL1s9OfRIfznqs4OogwHwYDVR0j
BBgwFoAUXmjZ02o9KZ3d0xeqJQjNJRZahFIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REUwNjU3OEY1OTI0RTgyNUQ4QzFFQkREQTI0MkYwNjgw
MEE5QTlGMkJCNERGQjIzREQzOTg2MjE3OEM0N0NBLzAvNUU2OEQ5RDM2QTNEMjk5
RERERDMxN0FBMjUwOENEMjUxNjVBODQ1Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTY4RDlEMzZBM0QyOTlERERE
MzE3QUEyNTA4Q0QyNTE2NUE4NDUyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRFMDY1NzhGNTkyNEU4MjVEOEMxRUJEREEyNDJGMDY4MDBBOUE5RjJC
QjRERkIyM0REMzk4NjIxNzhDNDdDQS8wLzMyMzgzMDMzM2EzNTYzNjQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczNDMwMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDXNAw
DQYJKoZIhvcNAQELBQADggEBAAczXsvx8RMa/0XI2FtNWyeGGLw5PJAlSG1pRLWs
vuuJsuapBjIcXIUqewVWa3OJjcNVrsHivg9slZMQRmdoGe9QvB7ktP92Bg3+87nw
ofEfhV4V9bqIMXcpLiPg0mcq5ZCNAzdqfk8Vlzs1h8LnIYFQmhdnKcA17mWT5k/J
Ur4mKp4GZc469RPybgK9rZs132rctz/YSvNOIk/yk9gbYETkl7jk0elK7afquaat
B5TU8+QyYjXg8a7oC5QqGw3fhfgu9wgZAbfVxSARe0Nv9PC6mkfrOcUK3E7yA/YD
vPm8Cp2bNTcftexGUJKa5I3m+eVqNa2F1hQ6JDqt3ep2Vro=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:13 2025 by rpki-client on console.sobornost.net