Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3332203d3e203531333936.roa
File:                     323830333a663938303a3a2f33322d3332203d3e203531333936.roa (raw, json)
Hash identifier:          xj1VcjUPffI8MXBLOyc+XDaKRmfRS0Z/FRSPdZ84J+w=
Subject key identifier:   8B:14:06:EA:8F:43:C2:AB:17:6B:09:D5:16:0D:E7:7E:13:51:CE:85
Certificate issuer:       /CN=70D5272A97CAC4E1A32EE2B577C0D5E969D6724A
Certificate serial:       01D0E4D119006519486AEC723BD2C253F0784E81
Authority key identifier: 70:D5:27:2A:97:CA:C4:E1:A3:2E:E2:B5:77:C0:D5:E9:69:D6:72:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3332203d3e203531333936.roa
Signing time:             Tue 22 Apr 2025 14:00:00 +0000
ROA not before:           Tue 22 Apr 2025 13:55:00 +0000
ROA not after:            Tue 21 Apr 2026 14:00:00 +0000
asID:                     51396
IP address blocks:        2803:f980::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d0:e4:d1:19:00:65:19:48:6a:ec:72:3b:d2:c2:53:f0:78:4e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D5272A97CAC4E1A32EE2B577C0D5E969D6724A
        Validity
            Not Before: Apr 22 13:55:00 2025 GMT
            Not After : Apr 21 14:00:00 2026 GMT
        Subject: CN=8B1406EA8F43C2AB176B09D5160DE77E1351CE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:1d:f4:f1:11:f2:20:98:e2:8b:27:96:c9:
                    a9:1f:f0:96:5a:ea:66:55:f7:09:ce:6c:cf:17:75:
                    9a:16:9a:63:a9:6f:1b:34:6a:14:f4:85:7d:0a:38:
                    ce:a5:ff:cb:64:76:46:96:e4:4f:6d:8b:70:f1:18:
                    94:fb:e1:14:7b:9e:e1:51:a1:40:1b:bb:8b:b7:d3:
                    cb:66:76:00:f0:2c:f6:13:3b:f2:3a:d8:c3:94:1e:
                    64:40:9f:17:0d:bf:d2:1d:72:c5:db:dc:c6:68:7e:
                    12:c8:b6:ba:1e:df:30:67:0e:5f:2e:f0:08:cf:fa:
                    87:4d:fb:97:df:f0:a5:b7:81:79:96:77:64:83:87:
                    96:cc:1c:1e:8b:cc:43:ad:62:b0:21:05:92:6b:a8:
                    f4:f9:2e:b2:b6:8c:07:9d:3a:03:c9:5a:2f:99:d7:
                    49:e7:3f:4c:7a:0c:be:91:6d:d4:d1:3c:ef:4a:af:
                    99:63:43:d6:1a:1e:20:e9:88:47:bd:0a:22:dd:20:
                    b4:a2:7b:ac:5f:1d:fd:77:83:5e:be:ed:03:f3:4e:
                    e4:c5:23:79:35:ab:41:fb:fe:df:4b:9d:f0:d9:a9:
                    f6:e9:63:1e:28:f4:91:df:35:13:ed:09:42:3d:e1:
                    de:1b:6c:ba:8c:15:33:56:8f:6a:63:fc:1f:5b:72:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:14:06:EA:8F:43:C2:AB:17:6B:09:D5:16:0D:E7:7E:13:51:CE:85
            X509v3 Authority Key Identifier:
                keyid:70:D5:27:2A:97:CA:C4:E1:A3:2E:E2:B5:77:C0:D5:E9:69:D6:72:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3332203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f980::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:b9:28:f7:cf:65:cf:df:40:00:f4:05:f9:de:74:97:79:
         2b:36:3d:dc:a2:77:f3:e5:4b:c3:f1:f9:ef:3b:4f:01:3b:3a:
         e1:21:6a:ee:47:9c:a3:9b:1f:3d:72:e4:67:3d:98:4d:07:c8:
         1f:97:a5:6c:ee:46:df:21:18:36:6d:db:23:2f:52:08:d3:94:
         20:47:dd:38:5d:35:8e:71:c3:09:d1:84:17:ed:40:17:b2:46:
         d3:32:a3:b9:4c:36:67:48:5d:69:c2:ff:46:3c:41:ce:01:fe:
         8e:fe:14:f6:10:24:11:99:32:55:2b:d8:f3:49:51:62:6d:cb:
         d4:5d:5e:64:78:d6:1e:51:17:5c:2e:0a:2f:61:c0:f7:38:d9:
         4e:38:2f:22:7c:94:3d:0a:c1:31:a6:b1:b8:ef:53:f5:e2:ac:
         3d:0f:dd:37:96:f2:a8:9c:6c:fe:b0:08:a2:91:8b:e8:83:b0:
         ca:59:77:96:bd:c0:93:65:28:a2:69:e9:c8:45:a0:e8:06:da:
         a2:bd:46:cb:1e:3a:c6:9a:a4:e8:be:5b:b4:8d:f2:ee:c6:40:
         ca:f2:33:b1:66:f8:ff:44:77:12:33:73:e5:6f:8e:3c:a9:bf:
         4b:37:4b:62:ec:64:36:61:c2:41:40:d6:cb:09:b4:65:56:9b:
         f4:df:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:58 2025 by rpki-client on console.sobornost.net