Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f34322d3432203d3e20323732303032.roa
File:                     323830333a323931303a3a2f34322d3432203d3e20323732303032.roa (raw, json)
Hash identifier:          fnTkjIdFmDkCENuODW9LPDIrdToj6Sktd/sQWSk/dNY=
Subject key identifier:   7B:A5:0A:68:35:04:71:AF:A0:59:1D:21:A4:38:61:2E:AF:CE:49:59
Certificate issuer:       /CN=57A629CEA654B6DF75A8F8D31C9F9809008350C8
Certificate serial:       1F06514E70F87CEDB9D11A10D96F7EE0CFA481C8
Authority key identifier: 57:A6:29:CE:A6:54:B6:DF:75:A8:F8:D3:1C:9F:98:09:00:83:50:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f34322d3432203d3e20323732303032.roa
Signing time:             Tue 11 Mar 2025 07:20:00 +0000
ROA not before:           Tue 11 Mar 2025 07:15:00 +0000
ROA not after:            Tue 10 Mar 2026 07:20:00 +0000
asID:                     272002
IP address blocks:        2803:2910::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:06:51:4e:70:f8:7c:ed:b9:d1:1a:10:d9:6f:7e:e0:cf:a4:81:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A629CEA654B6DF75A8F8D31C9F9809008350C8
        Validity
            Not Before: Mar 11 07:15:00 2025 GMT
            Not After : Mar 10 07:20:00 2026 GMT
        Subject: CN=7BA50A68350471AFA0591D21A438612EAFCE4959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:f5:76:80:c5:eb:d5:63:c1:cd:33:6d:d5:
                    a4:c9:69:6b:a1:9c:49:d6:96:c0:bd:67:34:27:68:
                    7e:1f:d2:0c:8d:1d:cb:3a:0d:3c:68:59:76:2a:24:
                    f8:de:f1:2f:13:74:7c:86:ad:13:de:b9:91:5b:e0:
                    9f:43:be:87:79:d2:c3:f8:68:b5:59:0e:4b:d9:43:
                    e0:73:fb:5f:46:85:5c:17:4d:fb:26:d0:46:6c:06:
                    7a:86:73:7a:a8:5d:3b:e8:a4:9f:75:97:ba:54:0b:
                    f3:a8:49:e9:9f:8a:44:54:b3:e0:2c:3d:1c:43:86:
                    15:02:ec:b7:71:fc:dc:d4:ba:8c:82:7e:8a:a2:4a:
                    8f:0e:48:2b:46:18:76:b8:d3:c6:b7:72:7f:7d:32:
                    ba:a0:1a:b5:47:af:66:1f:ff:cf:e0:08:fb:27:c3:
                    ad:f6:52:da:ab:ad:34:4d:9b:d4:48:74:fa:87:0b:
                    c5:c4:32:e7:46:6d:23:a1:f4:cf:c3:ca:8f:9c:58:
                    fc:71:7a:a3:01:bc:3d:04:8a:92:c5:7d:69:aa:a7:
                    5f:c8:bc:7b:9b:a6:b1:45:37:01:6b:e8:3f:94:03:
                    50:a0:d8:2a:78:39:eb:96:9a:30:8b:56:7e:48:a9:
                    a7:04:57:77:34:64:c0:c8:e1:f5:c2:9b:e2:b5:41:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:0A:68:35:04:71:AF:A0:59:1D:21:A4:38:61:2E:AF:CE:49:59
            X509v3 Authority Key Identifier:
                keyid:57:A6:29:CE:A6:54:B6:DF:75:A8:F8:D3:1C:9F:98:09:00:83:50:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f34322d3432203d3e20323732303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2910::/42

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:d3:d3:49:aa:ca:35:1b:2b:1a:af:82:0a:5d:97:9e:f0:
         f5:a9:58:d0:25:72:bc:3c:79:c9:93:0e:bf:e5:63:7c:79:dd:
         fa:b3:ed:3d:71:be:da:d0:90:9e:94:b4:40:9d:e8:ff:0d:b0:
         92:b9:b2:d6:ad:be:a9:45:d1:aa:a9:11:9c:70:47:79:bc:b5:
         68:0b:4f:3a:5f:e8:f7:ce:8f:2e:62:42:ee:da:50:be:91:19:
         b5:39:6b:24:c7:91:af:01:94:fd:0a:51:61:50:3f:57:71:77:
         67:c1:af:e5:dd:a0:1b:fa:2d:1f:6b:b6:be:59:86:de:06:68:
         7a:7e:5b:5d:fa:c9:0b:47:f8:e7:01:b2:14:6f:3b:ff:f5:8f:
         42:8a:a4:6c:e6:f2:7d:c4:76:a1:1e:7e:ef:14:79:a5:61:c4:
         e6:a4:a7:7a:7c:96:3e:cf:4d:08:e4:42:56:36:de:8f:4e:f9:
         c9:1e:1b:ea:8a:56:ba:f8:0e:77:4c:35:8d:5c:b5:6e:46:21:
         84:79:06:17:f1:be:bb:1d:66:c6:83:ea:b3:22:09:cf:4d:9d:
         b9:ad:b0:31:0b:63:83:b6:04:5a:de:07:43:1e:ca:f3:08:7f:
         d3:d0:3a:b7:2b:58:01:93:aa:e1:64:26:a5:05:0c:24:70:32:
         78:84:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:26 2025 by rpki-client on console.sobornost.net