Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/323830333a333935303a3a2f33322d3334203d3e203532323931.roa
File:                     323830333a333935303a3a2f33322d3334203d3e203532323931.roa (raw, json)
Hash identifier:          sQl+Jdk75TC8rTilvhDyi/LCaGx2bc4XbEcdHfeET5k=
Subject key identifier:   7F:C5:EE:FD:EC:FA:25:BD:10:57:12:C0:A8:5F:E2:D1:86:90:23:A8
Certificate issuer:       /CN=409F816F9F6076FF99779C7733845FD803FA035A
Certificate serial:       6988B02780062159911C3BE001E7FD24DD9F3191
Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/323830333a333935303a3a2f33322d3334203d3e203532323931.roa
Signing time:             Fri 25 Apr 2025 12:15:00 +0000
ROA not before:           Fri 25 Apr 2025 12:10:00 +0000
ROA not after:            Fri 24 Apr 2026 12:15:00 +0000
asID:                     52291
IP address blocks:        2803:3950::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:88:b0:27:80:06:21:59:91:1c:3b:e0:01:e7:fd:24:dd:9f:31:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A
        Validity
            Not Before: Apr 25 12:10:00 2025 GMT
            Not After : Apr 24 12:15:00 2026 GMT
        Subject: CN=7FC5EEFDECFA25BD105712C0A85FE2D1869023A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:ef:b1:ba:7d:1c:ff:8e:61:83:a0:16:68:
                    aa:a7:19:07:3b:a7:eb:9f:c6:9b:bf:14:f5:a3:4e:
                    0a:a6:44:8c:e8:75:2c:a7:a3:b0:68:2d:02:9d:2d:
                    80:ee:16:ad:31:dd:bb:14:20:56:67:a2:5a:4b:c5:
                    b8:a7:31:99:eb:f2:47:f0:0e:fd:11:7a:2a:7b:a6:
                    e6:18:57:38:08:1e:3e:79:21:97:53:8e:6f:36:cf:
                    d9:93:91:c5:af:32:8f:d5:da:8c:fe:c5:f0:40:92:
                    46:da:1b:63:eb:7d:0f:fa:ad:2e:af:86:22:de:11:
                    4f:b1:56:60:be:d0:e2:1c:47:43:bf:8b:bf:15:38:
                    f1:19:36:ab:ed:22:0c:99:f4:db:08:b8:d0:5e:a5:
                    99:67:e6:f5:5f:da:8d:da:f2:7c:fd:f4:cc:69:89:
                    b9:aa:9e:de:1b:ff:60:04:e4:5d:02:81:6d:30:06:
                    6a:23:56:dc:49:c3:9f:f2:93:c4:9e:b7:89:30:e5:
                    6b:3e:e3:85:c0:26:8a:62:13:72:6d:36:7d:a8:f8:
                    e7:ae:6c:0b:16:b5:4b:ee:64:10:de:cf:87:e8:c0:
                    98:7b:d4:b6:1d:94:93:86:25:e6:22:50:87:65:37:
                    97:1b:e9:65:27:d5:79:52:59:f3:5a:6e:51:bf:e0:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C5:EE:FD:EC:FA:25:BD:10:57:12:C0:A8:5F:E2:D1:86:90:23:A8
            X509v3 Authority Key Identifier:
                keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/323830333a333935303a3a2f33322d3334203d3e203532323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3950::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:c4:39:6c:3f:74:5c:c2:ca:d3:16:08:74:48:a7:d1:17:42:
         61:a8:3b:db:0f:8b:f1:08:f3:da:45:a1:28:b1:94:60:f2:b5:
         cf:2e:b4:45:5c:32:b4:e7:41:ba:96:95:b0:07:4d:23:c7:1c:
         88:47:5c:41:20:e1:e7:0a:9b:48:4d:15:c2:5e:05:c7:7e:0e:
         ec:c0:14:d4:e1:9a:36:87:bc:bb:d5:ee:17:cc:47:97:3d:6f:
         34:21:20:5e:03:a0:0d:e9:03:31:33:5d:28:b0:ea:f4:99:87:
         52:39:c5:32:c2:b3:e8:e8:1b:c9:f3:18:6e:01:de:ac:54:88:
         70:72:ee:8c:6c:d2:80:c5:3d:1e:b4:16:a8:a1:6c:e0:50:be:
         d5:74:c6:cd:ab:37:c6:e7:8d:4c:ee:3e:d0:0a:7c:f3:76:ea:
         63:f2:07:94:bd:f8:70:bd:5b:80:d6:de:c6:d0:e0:20:23:ae:
         4e:54:4c:db:3f:d2:60:58:36:b9:e1:95:0b:5f:dc:7e:df:ff:
         5a:26:ce:0b:6a:ae:a6:7c:c0:d7:ce:d3:ec:ef:d8:32:de:15:
         df:83:23:a9:87:df:c3:4a:4b:7c:c7:a0:ec:63:5f:cd:90:fd:
         72:04:f4:78:d9:ff:25:25:56:d3:d3:73:db:1f:8c:ff:3f:71:
         a3:fa:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:58 2025 by rpki-client on console.sobornost.net