Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa
File:                     323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa (raw, json)
Hash identifier:          y/4wjK/Jt/iTK3j0hy466LuR/ZFqVp1vtHyk877IFds=
Subject key identifier:   30:05:1C:F5:5A:53:31:4E:E5:53:CD:8C:99:1E:B3:D0:9A:7E:F0:F8
Certificate issuer:       /CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595
Certificate serial:       4E4129FA364F742CE8D64E15BBBF66DE83DD87F9
Authority key identifier: C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa
Signing time:             Fri 25 Apr 2025 04:16:03 +0000
ROA not before:           Fri 25 Apr 2025 04:11:03 +0000
ROA not after:            Fri 24 Apr 2026 04:16:03 +0000
asID:                     272946
IP address blocks:        2803:4990:1300::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:41:29:fa:36:4f:74:2c:e8:d6:4e:15:bb:bf:66:de:83:dd:87:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595
        Validity
            Not Before: Apr 25 04:11:03 2025 GMT
            Not After : Apr 24 04:16:03 2026 GMT
        Subject: CN=30051CF55A53314EE553CD8C991EB3D09A7EF0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:d2:5c:e1:14:fe:e1:77:84:34:6f:1f:dc:
                    ea:20:b7:08:ad:c5:ee:21:d4:11:8e:01:be:58:0d:
                    d2:82:b1:f4:7e:81:eb:20:1b:b1:5b:5b:1b:3a:2e:
                    39:de:1c:21:52:c2:84:a3:f0:9b:ac:b4:ce:9e:7c:
                    18:5d:a9:cb:90:e3:ec:e5:ef:de:ac:39:c5:47:75:
                    ba:4c:25:86:96:b7:d9:0a:8d:80:ce:f1:8c:48:ea:
                    3c:87:98:8a:88:e9:80:80:4f:a5:5e:b2:bf:b4:d0:
                    71:24:a0:0a:02:e9:d1:e6:3f:91:2c:4a:91:0f:e2:
                    14:da:60:fc:a6:7d:b7:f0:1c:8b:66:28:32:19:c1:
                    ae:df:fb:69:e3:73:8f:02:99:a1:6e:01:41:48:c8:
                    6f:f7:6b:04:4e:3b:cd:a2:e6:71:e1:fd:4c:cb:e1:
                    5b:c0:91:e7:21:52:d1:cf:62:fe:59:1e:e3:a7:e9:
                    1b:67:e2:05:99:61:5c:75:75:82:80:cc:9b:08:ef:
                    e0:37:83:14:09:61:60:8b:ff:ff:29:7a:62:5d:ee:
                    b6:29:35:4a:03:8d:ec:6c:3d:ec:bb:c8:d5:ff:f5:
                    34:f4:82:ef:fd:d2:e3:ca:7e:26:82:4d:8f:67:d3:
                    f5:f5:d3:48:51:ff:4b:0a:c6:b3:ea:6a:0d:d1:d1:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:1C:F5:5A:53:31:4E:E5:53:CD:8C:99:1E:B3:D0:9A:7E:F0:F8
            X509v3 Authority Key Identifier:
                keyid:C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4990:1300::/41

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:7b:05:05:d5:23:6b:e6:ed:22:77:04:30:96:a4:ef:b4:
         82:fd:a8:34:18:ba:32:bd:9e:0b:4f:a4:0d:90:e1:a8:86:cc:
         f0:8d:31:e2:70:fe:e6:d0:b6:12:15:73:ce:db:bf:4d:74:db:
         29:e4:12:e6:76:cb:7b:9a:c2:1a:40:63:97:37:c6:8a:5d:b0:
         1b:5a:8f:cc:db:85:81:0f:0e:1d:0c:39:ea:58:32:d8:d3:93:
         65:40:bd:bc:51:25:b2:e4:ae:ea:e1:19:2b:fe:72:93:b9:fd:
         c0:14:dc:ab:f5:0d:34:c0:b3:d7:e1:5a:5b:08:f7:53:b2:fa:
         c0:04:34:b9:e5:0b:03:8f:1f:b8:3d:78:1c:28:f1:a5:37:a5:
         51:39:6d:7f:03:78:1f:c2:a7:65:84:4c:01:ee:5a:ed:7e:d7:
         f2:0e:80:9d:24:d5:b9:af:37:aa:5d:73:f7:4c:fc:c9:8d:c2:
         75:28:30:a1:19:64:c5:7a:24:d0:2f:24:46:b0:16:57:19:20:
         47:cf:61:a3:12:7d:fd:ed:f1:e8:67:e1:e7:d5:a7:90:3d:4b:
         70:ed:48:2b:bb:63:6a:77:d2:1f:10:40:e8:23:a7:ed:bd:f8:
         0e:d2:c7:49:35:a0:f4:f3:fb:10:22:60:87:92:2f:86:31:9f:
         57:3a:2b:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:15 2025 by rpki-client on console.sobornost.net