Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/323830333a363864303a3a2f33322d3332203d3e20323733393838.roa
File:                     323830333a363864303a3a2f33322d3332203d3e20323733393838.roa (raw, json)
Hash identifier:          OPr7P6e4S+Xq4XNeLE3D55U81EPHfKK1m3d8m6s8sY4=
Subject key identifier:   7D:D0:96:D6:3F:54:1E:0F:81:31:8D:11:84:57:C8:82:C7:E8:A4:6D
Certificate issuer:       /CN=F8E0714A6741D7B50C762705420EEF87759C9B4E
Certificate serial:       0EF395E326A68575B8428D9E1CF3F45CB5230806
Authority key identifier: F8:E0:71:4A:67:41:D7:B5:0C:76:27:05:42:0E:EF:87:75:9C:9B:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/323830333a363864303a3a2f33322d3332203d3e20323733393838.roa
Signing time:             Mon 21 Apr 2025 03:25:00 +0000
ROA not before:           Mon 21 Apr 2025 03:20:00 +0000
ROA not after:            Mon 20 Apr 2026 03:25:00 +0000
asID:                     273988
IP address blocks:        2803:68d0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f3:95:e3:26:a6:85:75:b8:42:8d:9e:1c:f3:f4:5c:b5:23:08:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E0714A6741D7B50C762705420EEF87759C9B4E
        Validity
            Not Before: Apr 21 03:20:00 2025 GMT
            Not After : Apr 20 03:25:00 2026 GMT
        Subject: CN=7DD096D63F541E0F81318D118457C882C7E8A46D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:02:b3:48:a4:34:f0:ef:d7:05:50:36:b6:49:
                    10:2b:04:8f:08:56:5a:1f:7b:eb:d3:8b:e7:5e:54:
                    db:12:be:00:39:0b:be:d1:77:23:55:8a:4f:ac:ec:
                    07:bc:76:f4:65:bb:e0:74:76:47:84:50:98:ed:52:
                    d1:cd:ca:20:8d:65:b7:90:52:62:50:f3:b0:c9:6d:
                    d6:6f:4d:94:b1:bc:d0:a8:90:d6:df:ce:37:33:2d:
                    ab:4a:92:39:bb:c4:c5:3f:dc:b0:0d:da:0a:42:88:
                    15:c1:74:2f:29:e2:bd:17:73:6b:55:4e:0e:b0:ac:
                    64:8e:d1:5e:88:9b:42:7d:fe:1c:72:e3:ce:25:a0:
                    0c:15:1e:1f:3a:d2:16:0e:48:44:ed:29:96:b4:93:
                    c9:96:76:3a:c9:7b:fb:67:3d:93:c9:17:f1:bf:bb:
                    89:b5:4c:4a:b4:01:44:c6:0f:41:a3:e2:9f:73:8a:
                    7a:ae:d4:34:36:dd:3e:1a:04:60:8b:cd:27:2e:43:
                    6c:43:fc:d7:29:47:b2:83:8b:82:a2:70:92:f1:62:
                    48:23:c7:38:b0:28:57:c1:3d:bf:32:16:e6:a3:27:
                    ee:1c:48:29:32:13:a7:28:40:f0:07:46:68:ce:d2:
                    40:59:89:e7:33:63:b1:f3:93:80:0f:11:f4:dd:8a:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D0:96:D6:3F:54:1E:0F:81:31:8D:11:84:57:C8:82:C7:E8:A4:6D
            X509v3 Authority Key Identifier:
                keyid:F8:E0:71:4A:67:41:D7:B5:0C:76:27:05:42:0E:EF:87:75:9C:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/323830333a363864303a3a2f33322d3332203d3e20323733393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:68d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:4f:41:18:0f:68:d3:7f:0d:90:c8:44:9e:7c:ba:fd:8c:d6:
         5b:a9:df:b4:2b:f0:18:4f:52:8e:75:d6:28:0a:1b:a4:7a:5c:
         db:77:cf:62:d9:56:70:3d:cd:cf:31:df:d5:ae:ce:05:8d:f7:
         b8:09:9d:25:f9:7e:22:95:ed:30:83:b5:5d:84:02:09:28:fc:
         c1:c2:48:27:f5:8b:bd:df:7f:a5:5f:89:b8:8b:d5:29:3a:31:
         d4:a0:39:0e:17:cd:69:c1:d3:57:99:12:a9:ef:5e:fe:cb:e6:
         3e:c9:94:27:39:80:5e:a5:1c:1f:97:c7:a6:ee:72:be:f6:49:
         e9:85:6d:6b:4e:c4:23:cd:30:ff:22:a4:22:a0:a6:2d:ed:e5:
         60:6e:fa:f7:1a:67:53:a0:b2:19:a8:8b:42:d5:49:e6:2b:c0:
         09:5d:f4:2f:02:75:ec:af:47:de:e4:90:a1:87:d4:6e:17:92:
         bf:18:ca:80:34:62:f1:3d:9b:3c:61:f2:66:91:0a:ed:8e:27:
         38:24:18:03:20:e9:94:18:8d:b6:0a:7e:ae:8d:47:78:b6:84:
         cd:e7:6e:a6:85:e6:c6:13:f9:5b:49:aa:7e:46:0f:97:98:be:
         d8:0f:7a:6a:43:9c:4e:4c:86:43:03:fe:f8:3d:57:b7:44:49:
         29:98:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:03 2025 by rpki-client on console.sobornost.net