Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a343a3a2f34362d3438203d3e20323634373333.roa
File:                     323830333a643238303a343a3a2f34362d3438203d3e20323634373333.roa (raw, json)
Hash identifier:          EnDaAqP5udUtJiouYDVR1Yd7CdnBmDxLdfDTED5KbiU=
Subject key identifier:   66:07:4B:ED:43:07:C9:1D:43:15:0E:57:37:9D:F5:1D:FC:DC:E2:44
Certificate issuer:       /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial:       5D70512A350D0CB8CD48A8E120123B3819BA6731
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a343a3a2f34362d3438203d3e20323634373333.roa
Signing time:             Tue 04 Feb 2025 18:09:46 +0000
ROA not before:           Tue 04 Feb 2025 18:04:46 +0000
ROA not after:            Tue 03 Feb 2026 18:09:46 +0000
asID:                     264733
IP address blocks:        2803:d280:4::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:70:51:2a:35:0d:0c:b8:cd:48:a8:e1:20:12:3b:38:19:ba:67:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
        Validity
            Not Before: Feb  4 18:04:46 2025 GMT
            Not After : Feb  3 18:09:46 2026 GMT
        Subject: CN=66074BED4307C91D43150E57379DF51DFCDCE244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:be:14:69:88:bb:ef:98:97:10:4a:15:f5:a0:
                    85:64:5e:1c:0a:c1:88:9e:45:55:93:f9:29:c2:b8:
                    6f:ae:33:99:76:f8:5f:f2:ab:7e:df:7b:f5:f8:59:
                    b0:6e:f4:0c:ac:bd:54:c9:47:ac:2a:d6:82:55:40:
                    e5:86:f6:9f:21:f6:18:f5:52:04:0e:22:c5:7b:f2:
                    20:eb:16:8b:25:61:3d:f6:28:a3:a0:2d:a4:de:d8:
                    70:c9:31:0b:08:a1:cb:ad:7a:68:16:5e:04:e5:c3:
                    26:62:49:c1:13:06:81:9f:4b:e5:5e:00:e9:0b:3f:
                    a4:86:ff:7c:2b:0b:a4:dd:5d:61:3e:fb:a9:0f:28:
                    10:b6:84:01:d4:fa:61:f1:ea:15:6a:8d:4f:4c:83:
                    76:3e:41:74:3c:bf:e3:d0:46:ff:e5:6f:0f:21:17:
                    49:88:7e:af:67:79:74:95:e8:e1:3c:88:15:b6:a9:
                    36:10:bf:2a:b2:e3:fa:64:83:c8:e4:81:57:ac:31:
                    ef:f6:5a:86:2a:20:80:7d:bf:a4:ed:a3:ed:d6:86:
                    1a:74:f1:6f:b9:b6:72:f9:f0:46:b3:48:d7:e6:11:
                    86:17:5f:6d:f5:6a:bb:47:9c:07:82:d4:52:03:a9:
                    12:6e:9a:15:20:0d:08:94:76:ba:c4:55:1f:0d:fe:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:07:4B:ED:43:07:C9:1D:43:15:0E:57:37:9D:F5:1D:FC:DC:E2:44
            X509v3 Authority Key Identifier:
                keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a343a3a2f34362d3438203d3e20323634373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d280:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         5b:70:aa:bd:9f:0d:58:e8:60:c9:e3:b1:1d:00:5f:03:2c:60:
         56:0c:49:24:d9:a5:ee:cb:82:66:d6:05:d3:cc:97:09:30:65:
         8b:fd:f2:ac:19:ac:4f:6d:15:cf:c0:e1:e5:b9:d8:36:f2:07:
         f1:97:e9:f8:1c:2f:ee:f5:c0:52:21:85:ed:3d:e6:b8:48:05:
         c4:8c:95:16:9e:44:0f:9d:ba:f2:ac:32:e0:ad:b2:04:96:96:
         b1:7c:b2:ff:12:4b:ad:00:70:c9:ed:99:b1:b4:57:7f:8c:70:
         6d:70:b2:9b:2c:12:fb:53:de:e0:2a:e2:d3:54:c2:b3:de:ad:
         22:f8:37:50:88:74:73:e9:ef:4d:95:45:24:37:73:58:d6:78:
         46:2b:af:27:03:36:a0:ef:c7:97:cf:bc:24:93:3d:49:2b:0e:
         a8:9d:c2:d1:a6:ab:71:8b:19:f3:ab:8c:18:60:1d:49:e8:73:
         4a:d4:13:f9:77:42:47:fe:40:fd:94:96:76:b4:ac:3b:0c:54:
         e6:ae:01:d4:e7:81:bf:8e:10:fe:0e:99:16:c5:b3:a3:3a:f4:
         be:9e:eb:5d:9f:7b:ac:eb:f9:36:bc:f8:c1:3a:50:e7:84:80:
         8d:fd:8a:c6:3e:26:43:6a:f6:82:9a:72:f3:fa:25:38:9f:86:
         c1:34:b5:a5
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUXXBRKjUNDLjNSKjhIBI7OBm6ZzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2RDU1RjAzMTdFMjA0MTQ1RDJDQTIzRTg1MzQ5RkRG
RTBGOTIzRTAeFw0yNTAyMDQxODA0NDZaFw0yNjAyMDMxODA5NDZaMDMxMTAvBgNV
BAMTKDY2MDc0QkVENDMwN0M5MUQ0MzE1MEU1NzM3OURGNTFERkNEQ0UyNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGvhRpiLvvmJcQShX1oIVkXhwK
wYieRVWT+SnCuG+uM5l2+F/yq37fe/X4WbBu9AysvVTJR6wq1oJVQOWG9p8h9hj1
UgQOIsV78iDrFoslYT32KKOgLaTe2HDJMQsIocutemgWXgTlwyZiScETBoGfS+Ve
AOkLP6SG/3wrC6TdXWE++6kPKBC2hAHU+mHx6hVqjU9Mg3Y+QXQ8v+PQRv/lbw8h
F0mIfq9neXSV6OE8iBW2qTYQvyqy4/pkg8jkgVesMe/2WoYqIIB9v6Tto+3Whhp0
8W+5tnL58EazSNfmEYYXX231artHnAeC1FIDqRJumhUgDQiUdrrEVR8N/jfpAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUZgdL7UMHyR1DFQ5XN531Hfzc4kQwHwYDVR0j
BBgwFoAUR21V8DF+IEFF0soj6FNJ/f4Pkj4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NkUzRjFDNkI1RkM4MTQ5NzMyNkQxNTQ0MkFDRDBCNjZF
Njk0NzY5QjQ2QTE2OTMyRjQ3QkQ3NEMzNEQwRjk5LzAvNDc2RDU1RjAzMTdFMjA0
MTQ1RDJDQTIzRTg1MzQ5RkRGRTBGOTIzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzZENTVGMDMxN0UyMDQxNDVE
MkNBMjNFODUzNDlGREZFMEY5MjNFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODZFM0YxQzZCNUZDODE0OTczMjZEMTU0NDJBQ0QwQjY2RTY5NDc2OUI0
NkExNjkzMkY0N0JENzRDMzREMEY5OS8wLzMyMzgzMDMzM2E2NDMyMzgzMDNhMzQz
YTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjM2MzQzNzMzMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIo
A9KAAAQwDQYJKoZIhvcNAQELBQADggEBAFtwqr2fDVjoYMnjsR0AXwMsYFYMSSTZ
pe7LgmbWBdPMlwkwZYv98qwZrE9tFc/A4eW52DbyB/GX6fgcL+71wFIhhe095rhI
BcSMlRaeRA+duvKsMuCtsgSWlrF8sv8SS60AcMntmbG0V3+McG1wspssEvtT3uAq
4tNUwrPerSL4N1CIdHPp702VRSQ3c1jWeEYrrycDNqDvx5fPvCSTPUkrDqidwtGm
q3GLGfOrjBhgHUnoc0rUE/l3Qkf+QP2Ulna0rDsMVOauAdTngb+OEP4OmRbFs6M6
9L6e612fe6zr+Ta8+ME6UOeEgI39isY+JkNq9oKacvP6JTifhsE0taU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:24 2025 by rpki-client on console.sobornost.net