Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/323830333a323961303a3a2f33322d3332203d3e20323637373130.roa
File:                     323830333a323961303a3a2f33322d3332203d3e20323637373130.roa (raw, json)
Hash identifier:          ptd/0/3SvZkwTokJqQoCmXPgIupGKIv9wGKeWRT9Dfc=
Subject key identifier:   92:DD:3B:9C:5D:F5:6B:3E:CB:03:4F:69:FA:5C:DB:93:47:08:0B:E8
Certificate issuer:       /CN=2A71760D473705CDBB004AFB079B76EBD8CC5513
Certificate serial:       6A7617C442CA138676BE3D649E58B2C5331C4917
Authority key identifier: 2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/323830333a323961303a3a2f33322d3332203d3e20323637373130.roa
Signing time:             Tue 04 Feb 2025 18:22:31 +0000
ROA not before:           Tue 04 Feb 2025 18:17:31 +0000
ROA not after:            Tue 03 Feb 2026 18:22:31 +0000
asID:                     267710
IP address blocks:        2803:29a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:76:17:c4:42:ca:13:86:76:be:3d:64:9e:58:b2:c5:33:1c:49:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A71760D473705CDBB004AFB079B76EBD8CC5513
        Validity
            Not Before: Feb  4 18:17:31 2025 GMT
            Not After : Feb  3 18:22:31 2026 GMT
        Subject: CN=92DD3B9C5DF56B3ECB034F69FA5CDB9347080BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:7b:c4:f6:32:8f:f8:41:ba:61:70:25:e9:
                    1d:0d:b0:76:a0:48:4f:48:85:50:b4:84:59:05:d6:
                    a4:24:f5:ab:64:6f:b8:2f:65:a8:e3:8f:14:20:75:
                    87:c9:f7:9a:1a:d1:81:57:9f:18:9c:95:35:bb:c1:
                    21:7f:cb:78:c4:fb:bc:ef:19:6f:0e:23:63:b5:8d:
                    e7:80:3a:9a:b7:7d:bc:a1:a4:da:50:70:e0:54:0c:
                    19:00:37:ec:f9:27:c7:b0:55:9c:d7:19:00:0c:1f:
                    a3:e6:df:da:90:3d:28:32:f4:5f:7e:82:e9:87:5a:
                    79:36:f5:36:59:42:25:57:bd:6a:ed:3d:ec:45:8b:
                    f2:1f:42:75:d3:b4:4f:c1:bd:ba:98:a2:3a:c9:f6:
                    74:7e:5d:95:0f:df:04:9b:1a:a9:d2:77:ea:86:b7:
                    36:8c:98:00:da:c3:27:a7:2c:77:dc:7b:c1:36:1f:
                    8d:2a:c4:83:fc:57:a4:cc:05:b9:7d:06:db:39:8d:
                    03:4a:56:ff:6d:99:21:e7:e1:61:43:7c:a4:12:77:
                    b6:f7:29:51:12:da:e3:a1:11:09:29:09:a0:c9:02:
                    30:75:22:63:18:47:6a:2f:1b:11:cb:20:e3:e4:8b:
                    3c:ae:2a:9b:c1:a6:02:e8:ad:08:40:f6:04:e5:89:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DD:3B:9C:5D:F5:6B:3E:CB:03:4F:69:FA:5C:DB:93:47:08:0B:E8
            X509v3 Authority Key Identifier:
                keyid:2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/323830333a323961303a3a2f33322d3332203d3e20323637373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:29a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:db:0a:dc:82:44:7b:4d:f3:00:58:bb:a3:b1:72:a2:7c:d5:
         54:8f:e7:f3:14:16:8f:3c:6b:30:da:f7:fc:25:f1:4d:9b:d5:
         33:28:5a:0a:13:b5:a8:35:78:38:9a:1b:88:b5:65:25:3f:6e:
         a7:f4:bb:d3:47:1d:f5:df:58:63:56:5b:b7:ef:a7:d0:9a:ea:
         e1:40:9d:3d:a6:43:40:30:2b:85:a5:f9:e5:85:ba:ae:df:75:
         81:06:85:3e:b3:3e:e2:e9:d3:4e:1b:76:32:61:2c:ce:2a:8b:
         d2:de:3e:e5:c2:94:3f:b3:a3:d3:15:05:8e:c9:7d:b5:d3:15:
         f0:12:d3:11:b7:2f:46:f2:a1:ad:09:ab:b5:be:38:43:bf:bd:
         24:58:bb:ce:6e:b7:34:ed:74:16:98:db:12:6e:16:7f:ae:a9:
         8f:e1:9e:cd:36:8a:05:64:e9:ef:f7:d7:41:34:a8:3e:94:c1:
         a0:da:e5:61:b6:a2:10:17:3f:5d:af:99:20:57:f6:5d:e8:3d:
         4e:49:aa:60:87:02:bf:99:c5:59:4d:be:dc:c1:81:33:fb:73:
         98:e8:e7:36:e2:e1:ef:e2:c3:95:61:2f:c4:e7:ba:81:15:3c:
         a6:99:36:d7:9d:3c:91:40:92:00:e1:95:e5:0a:8e:73:17:0c:
         6c:d9:fe:74
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUanYXxELKE4Z2vj1knliyxTMcSRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE3MTc2MEQ0NzM3MDVDREJCMDA0QUZCMDc5Qjc2RUJE
OENDNTUxMzAeFw0yNTAyMDQxODE3MzFaFw0yNjAyMDMxODIyMzFaMDMxMTAvBgNV
BAMTKDkyREQzQjlDNURGNTZCM0VDQjAzNEY2OUZBNUNEQjkzNDcwODBCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kHvE9jKP+EG6YXAl6R0NsHag
SE9IhVC0hFkF1qQk9atkb7gvZajjjxQgdYfJ95oa0YFXnxiclTW7wSF/y3jE+7zv
GW8OI2O1jeeAOpq3fbyhpNpQcOBUDBkAN+z5J8ewVZzXGQAMH6Pm39qQPSgy9F9+
gumHWnk29TZZQiVXvWrtPexFi/IfQnXTtE/BvbqYojrJ9nR+XZUP3wSbGqnSd+qG
tzaMmADawyenLHfce8E2H40qxIP8V6TMBbl9Bts5jQNKVv9tmSHn4WFDfKQSd7b3
KVES2uOhEQkpCaDJAjB1ImMYR2ovGxHLIOPkizyuKpvBpgLorQhA9gTlicerAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUkt07nF31az7LA09p+lzbk0cIC+gwHwYDVR0j
BBgwFoAUKnF2DUc3Bc27AEr7B5t269jMVRMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTg0NzRBODQwQjUzMDIzNUMxRTU5MDlCODU3OUZBNzFF
MERGODY2OTk2NEU0MjgxREI3MDUwNDM3RTZBNkI3LzAvMkE3MTc2MEQ0NzM3MDVD
REJCMDA0QUZCMDc5Qjc2RUJEOENDNTUxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQTcxNzYwRDQ3MzcwNUNEQkIw
MDRBRkIwNzlCNzZFQkQ4Q0M1NTEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEE4NDc0QTg0MEI1MzAyMzVDMUU1OTA5Qjg1NzlGQTcxRTBERjg2Njk5
NjRFNDI4MURCNzA1MDQzN0U2QTZCNy8wLzMyMzgzMDMzM2EzMjM5NjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM3MzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDKaAw
DQYJKoZIhvcNAQELBQADggEBAKbbCtyCRHtN8wBYu6OxcqJ81VSP5/MUFo88azDa
9/wl8U2b1TMoWgoTtag1eDiaG4i1ZSU/bqf0u9NHHfXfWGNWW7fvp9Ca6uFAnT2m
Q0AwK4Wl+eWFuq7fdYEGhT6zPuLp004bdjJhLM4qi9LePuXClD+zo9MVBY7JfbXT
FfAS0xG3L0byoa0Jq7W+OEO/vSRYu85utzTtdBaY2xJuFn+uqY/hns02igVk6e/3
10E0qD6UwaDa5WG2ohAXP12vmSBX9l3oPU5JqmCHAr+ZxVlNvtzBgTP7c5jo5zbi
4e/iw5VhL8TnuoEVPKaZNtedPJFAkgDhleUKjnMXDGzZ/nQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:15 2025 by rpki-client on console.sobornost.net