Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/323830363a3332623a3a2f33322d3438203d3e203238333837.roa
File:                     323830363a3332623a3a2f33322d3438203d3e203238333837.roa (raw, json)
Hash identifier:          tluS5jcx+Ndd9bg+oDMShpPXkYihIflYPnrtB93z/P4=
Subject key identifier:   E8:CD:7A:20:68:B5:31:46:CC:EC:54:F0:5F:44:D6:C6:62:CD:FA:3A
Certificate issuer:       /CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
Certificate serial:       303A3CD73F780D1C1FA9E59B0A0FDD7A8FD54353
Authority key identifier: A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/323830363a3332623a3a2f33322d3438203d3e203238333837.roa
Signing time:             Wed 09 Apr 2025 16:14:20 +0000
ROA not before:           Wed 09 Apr 2025 16:09:20 +0000
ROA not after:            Wed 08 Apr 2026 16:14:20 +0000
asID:                     28387
IP address blocks:        2806:32b::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3a:3c:d7:3f:78:0d:1c:1f:a9:e5:9b:0a:0f:dd:7a:8f:d5:43:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
        Validity
            Not Before: Apr  9 16:09:20 2025 GMT
            Not After : Apr  8 16:14:20 2026 GMT
        Subject: CN=E8CD7A2068B53146CCEC54F05F44D6C662CDFA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:2c:f5:64:07:cc:73:57:ed:d6:17:95:9f:
                    0e:50:96:e8:f1:df:da:7b:b2:3a:b3:d7:95:0e:bc:
                    e9:06:98:c4:01:b2:1a:db:b7:47:75:cf:b3:c1:ef:
                    7e:a6:4d:2f:c6:c3:bd:e3:7d:a8:98:ad:9b:45:14:
                    ec:67:b9:bf:78:ef:db:43:ce:a8:81:d0:68:55:df:
                    e1:88:fb:6a:c4:00:34:3e:0c:8e:32:1d:b7:47:9c:
                    55:01:b6:a1:ba:73:30:6b:60:a1:01:5e:9a:a3:08:
                    ab:ed:48:ad:43:bd:0d:49:e6:59:f2:d5:18:e8:81:
                    e2:26:c1:32:af:08:20:d0:80:ca:fa:eb:e5:64:7d:
                    87:e4:48:3a:39:52:47:02:2f:1b:3d:65:78:d5:0b:
                    d4:29:cd:67:f3:9e:d2:75:71:d0:d8:52:dd:2c:c5:
                    6a:11:05:21:51:0e:f9:59:87:da:7c:21:6f:bb:8c:
                    ca:29:77:2e:bc:58:ee:69:81:00:67:f5:e6:22:bd:
                    8a:5a:f3:60:01:b1:fa:7d:69:af:28:66:82:ed:ef:
                    39:0c:53:96:ef:eb:17:9c:03:14:4d:57:f2:bb:66:
                    1e:5b:e7:36:dd:0b:c1:82:95:96:a5:aa:17:fd:ed:
                    58:3e:b5:de:1c:f0:40:71:9e:69:78:dd:e8:df:e1:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CD:7A:20:68:B5:31:46:CC:EC:54:F0:5F:44:D6:C6:62:CD:FA:3A
            X509v3 Authority Key Identifier:
                keyid:A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/323830363a3332623a3a2f33322d3438203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32b::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:20:98:95:91:3e:90:35:db:17:cd:29:70:98:24:0e:e0:83:
         4d:3a:7c:d3:ab:04:6d:d6:5a:6a:92:ec:17:d8:3e:bb:3f:59:
         1c:49:ae:a6:71:bd:d6:9f:82:18:93:74:40:4d:68:72:5e:ed:
         8c:e5:3a:24:96:7a:d5:01:0f:ed:62:c5:3c:c7:de:ea:de:6f:
         a5:3f:e8:56:fb:45:4e:e3:41:84:dd:43:40:f9:9b:f1:43:af:
         2e:ea:52:07:da:2b:de:e7:3f:a4:e3:f6:d3:5e:4a:c8:6f:fe:
         a8:86:38:51:b3:bf:b2:23:ab:d4:ea:ed:0f:fc:23:33:5a:a2:
         2f:b1:b2:1f:8a:8c:bb:92:51:64:9e:00:90:d8:c7:a8:5d:58:
         46:72:ba:7d:c9:92:99:15:99:0f:81:7f:36:10:ee:d5:73:c6:
         00:d5:71:3d:4e:4e:4c:43:b7:b3:21:b9:ee:4c:22:ee:81:47:
         9c:b3:e7:d9:fc:12:e6:72:ac:45:e2:d9:0b:a5:45:30:b6:d4:
         12:55:42:3f:eb:78:f6:b2:bf:3d:63:c3:a6:8d:20:7d:50:78:
         33:e3:09:f4:6a:f8:08:ed:64:65:f0:45:69:a2:5b:84:e3:76:
         d2:e8:ba:94:9b:dd:9e:80:1d:c2:3c:75:b8:f7:25:b8:ed:6e:
         26:74:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:35 2025 by rpki-client on console.sobornost.net