Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/323830333a633230303a3a2f33322d3438203d3e203232343131.roa
File:                     323830333a633230303a3a2f33322d3438203d3e203232343131.roa (raw, json)
Hash identifier:          Y6TLcetTZrjXS2rheBa9AA7seywg8bAWzKJskV7BSF8=
Subject key identifier:   6D:2D:67:69:3A:88:BB:FF:F2:96:2E:9A:C7:64:C1:CA:5A:31:6A:4C
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       7C496E42753C34258C742630F68EC051BE91A764
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/323830333a633230303a3a2f33322d3438203d3e203232343131.roa
Signing time:             Tue 04 Feb 2025 18:00:49 +0000
ROA not before:           Tue 04 Feb 2025 17:55:49 +0000
ROA not after:            Tue 03 Feb 2026 18:00:49 +0000
asID:                     22411
IP address blocks:        2803:c200::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:49:6e:42:75:3c:34:25:8c:74:26:30:f6:8e:c0:51:be:91:a7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Feb  4 17:55:49 2025 GMT
            Not After : Feb  3 18:00:49 2026 GMT
        Subject: CN=6D2D67693A88BBFFF2962E9AC764C1CA5A316A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:ca:7f:49:dc:46:94:d5:db:5b:1f:63:35:
                    81:7e:06:9b:a9:d5:c1:d7:d8:d1:46:ea:3a:20:3a:
                    44:77:92:04:5d:7c:55:72:ff:32:a7:ef:ac:5f:cf:
                    9f:6f:0d:21:bd:5c:aa:42:12:5f:10:6f:15:10:05:
                    54:12:74:45:b1:63:af:a8:30:e2:bb:8c:62:a5:70:
                    31:11:bb:53:bd:b8:f9:32:13:75:f3:0f:2b:66:cf:
                    4e:e4:36:32:ec:52:db:d3:fe:04:8c:da:5f:3b:40:
                    8e:33:e8:02:28:d5:22:63:5f:55:b7:c5:15:b9:2b:
                    d5:d6:48:e5:e8:57:d3:44:c4:2f:d8:96:01:98:a0:
                    63:b9:59:7d:84:59:48:c8:a8:ad:0d:7d:bb:e0:87:
                    b3:de:e6:84:f4:09:22:da:e6:40:f9:a4:79:a8:83:
                    32:0e:d6:60:08:8d:80:19:ab:36:c9:b8:8a:22:c2:
                    9e:48:c0:84:ab:84:7a:e6:b3:82:d4:ef:9c:72:b9:
                    35:a2:db:67:75:71:67:66:5f:d1:46:81:27:e7:ac:
                    b5:bb:3e:65:32:fc:4a:7a:5b:93:65:bf:8d:53:6e:
                    c3:c2:bf:5f:53:71:e0:53:2c:cf:d8:1f:05:8e:d7:
                    ee:4f:29:8b:90:f3:8c:b9:cf:2a:6d:43:a5:d9:81:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2D:67:69:3A:88:BB:FF:F2:96:2E:9A:C7:64:C1:CA:5A:31:6A:4C
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/323830333a633230303a3a2f33322d3438203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c200::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:e3:2e:0d:3c:b6:5d:cc:6c:85:57:db:44:6b:99:af:0c:ac:
         a8:6a:73:6d:09:f1:f6:4a:d8:38:08:97:da:85:75:0b:30:1f:
         a2:e4:3d:c7:9c:32:41:c4:eb:d2:df:81:26:68:62:13:ce:75:
         f2:f0:6e:84:d0:d9:00:a6:d1:61:26:d5:80:e5:fd:97:e6:21:
         53:73:8f:0a:cc:5f:f3:f5:4a:2a:5c:11:f4:e5:7d:62:bf:65:
         ec:e2:55:aa:b7:53:03:d1:15:8d:12:f5:47:98:36:19:b8:17:
         45:c8:18:4d:23:50:a9:8b:6d:a5:62:57:d6:8f:ad:4f:18:72:
         0c:fa:58:c3:f4:dd:a0:21:72:92:1f:96:89:4e:30:f6:9d:13:
         ea:45:a9:10:27:6c:92:8e:1a:da:77:51:92:6a:82:86:de:d6:
         bd:03:ed:f0:ac:fa:a6:dc:8f:ad:dd:43:0b:a9:91:74:9c:23:
         89:87:01:f5:5a:25:00:fa:e4:64:c3:12:ba:e1:8e:cb:ba:f3:
         68:8d:28:68:a0:c4:9b:0f:8e:5c:ed:c0:5f:e1:e0:3e:8f:43:
         33:49:f6:62:6d:60:ef:c0:57:76:f7:36:78:a5:a4:c5:2d:2a:
         13:a2:fa:d5:8c:b7:0b:d2:31:30:ed:9a:92:93:89:75:41:3a:
         44:54:92:0b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfEluQnU8NCWMdCYw9o7AUb6Rp2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0QTE4RDIzOEY3MEZDQTc2MDhFMENGOTFGMDQ0MzAy
Rjg4NkE3ODAeFw0yNTAyMDQxNzU1NDlaFw0yNjAyMDMxODAwNDlaMDMxMTAvBgNV
BAMTKDZEMkQ2NzY5M0E4OEJCRkZGMjk2MkU5QUM3NjRDMUNBNUEzMTZBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCsp/SdxGlNXbWx9jNYF+Bpup
1cHX2NFG6jogOkR3kgRdfFVy/zKn76xfz59vDSG9XKpCEl8QbxUQBVQSdEWxY6+o
MOK7jGKlcDERu1O9uPkyE3XzDytmz07kNjLsUtvT/gSM2l87QI4z6AIo1SJjX1W3
xRW5K9XWSOXoV9NExC/YlgGYoGO5WX2EWUjIqK0Nfbvgh7Pe5oT0CSLa5kD5pHmo
gzIO1mAIjYAZqzbJuIoiwp5IwISrhHrms4LU75xyuTWi22d1cWdmX9FGgSfnrLW7
PmUy/Ep6W5Nlv41TbsPCv19TceBTLM/YHwWO1+5PKYuQ84y5zyptQ6XZgQv1AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUbS1naTqIu//yli6ax2TByloxakwwHwYDVR0j
BBgwFoAUr0oY0jj3D8p2CODPkfBEMC+IangwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MTZCMkY3RDY2QTYzM0IzQ0U4QzI2NUVGQjREQzYzNjFG
NjgxM0EzRkM5MjkzMzNGREVCQUQ3RUUxNjZCQkIzLzAvQUY0QTE4RDIzOEY3MEZD
QTc2MDhFMENGOTFGMDQ0MzAyRjg4NkE3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjRBMThEMjM4RjcwRkNBNzYw
OEUwQ0Y5MUYwNDQzMDJGODg2QTc4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODE2QjJGN0Q2NkE2MzNCM0NFOEMyNjVFRkI0REM2MzYxRjY4MTNBM0ZD
OTI5MzMzRkRFQkFEN0VFMTY2QkJCMy8wLzMyMzgzMDMzM2E2MzMyMzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzIzNDMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA8IAMA0G
CSqGSIb3DQEBCwUAA4IBAQA84y4NPLZdzGyFV9tEa5mvDKyoanNtCfH2Stg4CJfa
hXULMB+i5D3HnDJBxOvS34EmaGITznXy8G6E0NkAptFhJtWA5f2X5iFTc48KzF/z
9UoqXBH05X1iv2Xs4lWqt1MD0RWNEvVHmDYZuBdFyBhNI1Cpi22lYlfWj61PGHIM
+ljD9N2gIXKSH5aJTjD2nRPqRakQJ2ySjhrad1GSaoKG3ta9A+3wrPqm3I+t3UML
qZF0nCOJhwH1WiUA+uRkwxK64Y7LuvNojShooMSbD45c7cBf4eA+j0MzSfZibWDv
wFd29zZ4paTFLSoTovrVjLcL0jEw7ZqSk4l1QTpEVJIL
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:14 2025 by rpki-client on console.sobornost.net