Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f35362d3634203d3e203238303030.roa
File:                     323830313a3136353a3a2f35362d3634203d3e203238303030.roa (raw, json)
Hash identifier:          9SD24NhgRZfAiUlQ2GAGu1vW/yNGEPJw3025GPTcjF8=
Subject key identifier:   A0:2A:75:CB:46:A5:80:FD:09:3D:8B:F0:51:19:2B:09:CF:5B:92:D4
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       2573B3ECB636E4B0ED8F409D5F3FDF0A8E7560C2
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f35362d3634203d3e203238303030.roa
Signing time:             Mon 28 Apr 2025 20:25:00 +0000
ROA not before:           Mon 28 Apr 2025 20:20:00 +0000
ROA not after:            Mon 27 Apr 2026 20:25:00 +0000
asID:                     28000
IP address blocks:        2801:165::/56 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:73:b3:ec:b6:36:e4:b0:ed:8f:40:9d:5f:3f:df:0a:8e:75:60:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Apr 28 20:20:00 2025 GMT
            Not After : Apr 27 20:25:00 2026 GMT
        Subject: CN=A02A75CB46A580FD093D8BF051192B09CF5B92D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:cf:10:29:c3:fd:fe:ca:70:14:16:ad:fe:
                    ec:78:2e:ae:86:0a:de:67:2a:21:22:f0:e9:89:8a:
                    e1:97:5b:d3:45:fa:9b:7b:d7:cc:33:60:59:13:23:
                    bd:0d:7c:16:c9:0b:26:f7:26:fc:5a:63:ba:53:b9:
                    4f:7e:6c:05:c4:0c:f5:70:d6:61:2e:af:df:65:72:
                    9a:53:26:b7:2d:dd:55:5c:82:12:30:de:1a:2c:2c:
                    2e:b8:ea:32:e4:1a:ac:5c:e2:49:d0:b6:87:85:bb:
                    ce:fc:e3:bd:d7:bb:eb:06:dc:fe:ae:49:4c:dd:a2:
                    a9:ca:97:65:61:a2:79:97:dc:88:80:8e:a8:a4:e3:
                    73:8f:cd:14:2a:63:40:e8:31:9c:6b:ec:11:05:f1:
                    4e:8b:06:7f:bd:07:d3:ad:21:df:42:34:f9:39:71:
                    f4:d8:c4:0a:a1:e6:e6:c4:0a:ad:d0:a7:d1:25:7d:
                    f9:46:ca:5c:7a:48:4e:cc:a5:1b:fb:80:c1:77:6a:
                    6f:54:38:4b:f4:a1:fa:8e:a0:5f:8e:c3:87:84:90:
                    ca:dc:15:f2:5d:ef:86:4a:20:5a:f9:5b:9f:04:17:
                    0a:3e:f5:52:ac:25:1e:4c:92:1d:eb:9a:32:00:b4:
                    86:ea:9a:81:ea:d5:0b:39:68:87:58:4b:a7:b2:2e:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2A:75:CB:46:A5:80:FD:09:3D:8B:F0:51:19:2B:09:CF:5B:92:D4
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f35362d3634203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/56

    Signature Algorithm: sha256WithRSAEncryption
         c5:a5:57:3d:dc:99:4e:68:3f:ef:be:8c:98:32:e3:50:32:7c:
         54:3a:b8:50:ef:3c:07:ca:25:7c:7f:e3:9c:4d:1c:c7:74:db:
         26:4c:03:12:94:d7:3e:c0:14:b2:88:4b:ed:d9:da:08:0e:87:
         03:af:43:7a:f4:e7:3b:67:44:5f:e2:44:e2:70:67:53:79:78:
         ea:a7:c3:61:57:ca:41:0d:3b:8d:a9:87:bf:28:27:15:24:fe:
         90:6c:af:10:2d:b9:77:b1:3e:27:e2:3f:36:41:16:03:92:09:
         3b:bd:07:14:8e:0b:ab:65:3c:bd:2a:f9:c7:16:31:ad:7f:2b:
         51:63:c9:37:a1:f2:b7:dd:f4:68:32:0d:d3:c9:c8:53:a9:ec:
         50:82:8e:ba:2c:5b:7d:9c:14:63:ac:d7:79:4b:d9:53:23:15:
         39:16:ce:9e:97:e7:d0:07:49:1a:6a:5c:28:fd:8c:48:fa:f4:
         c9:01:c0:db:bf:d2:b5:d7:af:4e:b6:68:b3:85:ab:6b:b3:25:
         25:48:32:89:85:f8:58:9d:96:4f:fb:3b:b1:78:5b:53:22:40:
         aa:2a:25:d7:df:62:00:42:0a:24:8a:85:5d:88:82:dd:24:62:
         b5:82:f3:10:d7:25:b7:cb:45:1a:09:d4:a5:07:ff:59:7e:4a:
         a9:de:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:38 2025 by rpki-client on console.sobornost.net