Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a383030303a3a2f33342d3334203d3e20323636373831.roa
File:                     323830333a646632303a383030303a3a2f33342d3334203d3e20323636373831.roa (raw, json)
Hash identifier:          0tcFmm2NIJubpinZ2G4PF2pFBIFOqbpw0aYhFbvgIcg=
Subject key identifier:   70:56:9B:76:18:92:03:37:91:28:C7:12:50:00:9D:31:90:D5:50:B7
Certificate issuer:       /CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
Certificate serial:       7BB4303909A7B7DBDB68B294BC838BD3E1541373
Authority key identifier: 74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a383030303a3a2f33342d3334203d3e20323636373831.roa
Signing time:             Thu 24 Apr 2025 12:15:00 +0000
ROA not before:           Thu 24 Apr 2025 12:10:00 +0000
ROA not after:            Thu 23 Apr 2026 12:15:00 +0000
asID:                     266781
IP address blocks:        2803:df20:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b4:30:39:09:a7:b7:db:db:68:b2:94:bc:83:8b:d3:e1:54:13:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
        Validity
            Not Before: Apr 24 12:10:00 2025 GMT
            Not After : Apr 23 12:15:00 2026 GMT
        Subject: CN=70569B76189203379128C71250009D3190D550B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:a3:9c:e3:db:ca:04:3c:9b:93:ff:0b:a0:
                    79:57:b0:a0:8b:2d:5e:34:5a:48:09:5c:70:5e:13:
                    1a:05:d9:02:62:ef:64:5f:01:74:50:2e:18:88:b0:
                    bc:92:09:5b:8f:21:25:ce:e3:36:6f:f1:74:67:7f:
                    3b:a6:56:6e:23:e0:e2:5e:85:c9:d0:72:83:d3:15:
                    d6:a0:42:52:16:87:32:a2:24:5f:0c:28:3f:43:bf:
                    65:a6:41:98:fe:cd:2c:62:25:0d:d0:de:c9:c5:b7:
                    41:bd:ea:e2:e9:4c:6b:0c:fc:d6:14:43:f0:56:b2:
                    91:7b:af:44:64:66:79:5e:90:b4:40:33:d5:47:76:
                    a5:21:ca:46:73:2f:a4:f3:fc:30:f2:c7:ef:95:2d:
                    04:50:50:83:4f:38:98:6f:68:68:36:73:3b:fc:d2:
                    a1:b0:98:b4:6d:1d:87:f0:de:60:50:4d:27:b8:fb:
                    ee:e0:29:04:83:c0:cc:1c:4c:57:6c:7c:3f:2d:f6:
                    ca:3c:15:d0:a8:21:90:92:40:80:73:ef:16:a0:90:
                    22:b3:e8:97:9d:92:73:f3:1f:51:d0:02:28:df:a8:
                    25:5a:99:48:d8:79:52:91:4f:79:f3:46:ac:b6:16:
                    1f:cd:11:67:c3:25:da:84:3e:1a:f0:d7:c8:13:b4:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:56:9B:76:18:92:03:37:91:28:C7:12:50:00:9D:31:90:D5:50:B7
            X509v3 Authority Key Identifier:
                keyid:74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a383030303a3a2f33342d3334203d3e20323636373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df20:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:af:ab:cd:b2:83:4b:10:ae:7e:dd:12:01:8d:10:03:85:22:
         31:08:80:9a:54:47:5c:8b:05:de:2f:8d:0f:92:94:e2:d4:09:
         00:00:83:de:bb:41:ab:d0:35:0a:1a:cc:f1:ea:31:50:dc:b3:
         1b:71:c4:8c:98:46:08:27:67:1c:d0:70:ec:94:fd:ca:84:29:
         24:d8:eb:26:35:98:d1:9e:98:0c:0a:f6:51:e4:6b:20:9a:d4:
         a7:24:dc:27:85:6a:6b:1f:1c:9d:ee:c0:35:72:f0:ad:f4:5c:
         01:a3:42:fd:f2:ee:e7:38:9c:cf:fe:87:de:c1:6b:87:a4:70:
         81:23:82:9c:7d:72:91:a0:f0:ec:a0:2b:c9:03:b0:75:ba:5e:
         e7:0b:f2:2a:cd:44:e9:a2:6f:7d:2e:1d:65:c8:5f:2d:08:ee:
         9f:11:e7:f6:75:bb:af:fc:30:30:a8:92:6d:1b:2a:08:14:d3:
         be:59:20:b0:44:70:14:24:4b:c8:a6:07:08:3b:45:c8:9d:30:
         ae:53:71:b0:50:1f:04:39:a2:ce:c1:1b:bc:f7:fb:32:ac:db:
         3e:03:27:5e:4f:ae:42:20:8b:23:82:c6:5f:95:31:ef:5e:82:
         a5:da:da:cc:4c:0e:cd:41:6d:9e:a9:94:f6:9c:a9:7f:37:5e:
         9c:02:69:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:25 2025 by rpki-client on console.sobornost.net