Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/323830313a3164313a3a2f34342d3434203d3e203138373437.roa
File:                     323830313a3164313a3a2f34342d3434203d3e203138373437.roa (raw, json)
Hash identifier:          La6FuhW4r0n2Ozpf5lyCn9w+c/p22QUajAvXj7e1qFc=
Subject key identifier:   F4:90:17:F3:90:7A:31:00:FB:BB:3C:0A:FF:C0:64:12:5F:94:1C:96
Certificate issuer:       /CN=FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200
Certificate serial:       0B3715077344A7D5C7A4D9B2F39D616C9DC019A9
Authority key identifier: FA:B4:AB:C6:BA:EF:7B:58:EE:B7:F4:B7:CD:17:88:4F:8D:AA:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/323830313a3164313a3a2f34342d3434203d3e203138373437.roa
Signing time:             Wed 23 Apr 2025 17:00:00 +0000
ROA not before:           Wed 23 Apr 2025 16:55:00 +0000
ROA not after:            Wed 22 Apr 2026 17:00:00 +0000
asID:                     18747
IP address blocks:        2801:1d1::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:37:15:07:73:44:a7:d5:c7:a4:d9:b2:f3:9d:61:6c:9d:c0:19:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200
        Validity
            Not Before: Apr 23 16:55:00 2025 GMT
            Not After : Apr 22 17:00:00 2026 GMT
        Subject: CN=F49017F3907A3100FBBB3C0AFFC064125F941C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:ce:b3:5e:2f:55:54:be:94:16:eb:a2:fe:
                    1c:68:b2:86:8c:09:80:4f:69:48:48:f0:af:64:c0:
                    c1:2b:3d:cf:2f:45:cd:59:32:63:bb:ea:c1:ff:5e:
                    29:09:ef:52:d9:4d:d0:96:0d:03:ce:04:b2:10:53:
                    16:b4:86:5e:1d:d0:5e:3a:be:5e:d2:cd:7d:c3:73:
                    d9:fc:72:a4:ba:f6:09:01:6d:85:b7:50:ec:c5:59:
                    8f:da:85:7e:c7:c0:bb:c2:f7:68:00:4c:a4:6b:9b:
                    2e:38:1b:6a:8d:79:2a:f7:7f:32:2c:b2:d4:fb:44:
                    0d:0a:b1:d3:42:42:6a:dd:45:7a:f5:8e:42:33:ea:
                    5b:f5:af:ae:95:02:7f:7b:eb:8f:ea:ea:d5:c0:a6:
                    03:66:5b:19:75:cd:d4:f6:7d:17:46:69:3c:d7:af:
                    0c:3b:3c:41:ce:ed:e4:0d:55:29:7e:76:c2:e2:8f:
                    fd:c0:62:86:42:26:54:6d:c4:26:d3:11:bf:b2:e6:
                    6e:c3:10:05:e1:36:be:65:74:08:e7:7e:be:9a:54:
                    8f:7a:0c:83:0e:5f:3a:3b:14:78:4b:6b:23:0e:1e:
                    fd:d0:21:d1:7d:e8:5c:df:f9:5d:7e:6a:87:bb:a9:
                    e1:db:0f:fb:ff:19:b2:35:e9:99:14:dd:17:4f:33:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:90:17:F3:90:7A:31:00:FB:BB:3C:0A:FF:C0:64:12:5F:94:1C:96
            X509v3 Authority Key Identifier:
                keyid:FA:B4:AB:C6:BA:EF:7B:58:EE:B7:F4:B7:CD:17:88:4F:8D:AA:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/323830313a3164313a3a2f34342d3434203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d1::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:39:df:fa:15:20:3c:5a:61:04:dc:fa:46:9c:e3:30:3b:
         97:ee:78:d9:74:b1:d5:da:74:41:dd:bc:2c:3f:bf:48:a3:39:
         e5:29:1d:20:3e:52:ac:9c:38:7c:f8:6b:d6:fc:c5:a5:b0:29:
         92:68:67:76:9a:ff:1f:44:28:70:96:dc:13:4a:df:52:89:bb:
         3b:a2:c1:ed:79:d6:fd:9d:bd:37:55:a7:46:42:4b:f4:e9:e6:
         e1:35:87:b3:0d:4d:df:3e:53:96:68:ed:6e:6f:27:16:f3:d6:
         81:c7:13:9a:00:04:f0:a6:56:04:99:37:f9:ac:73:c7:2c:db:
         eb:a2:f1:e6:31:db:b4:95:ec:68:bb:bd:a2:2d:20:ee:9e:a5:
         24:92:ac:5e:79:98:56:d1:46:d6:b2:93:00:d3:c5:07:e2:d2:
         47:d2:7a:e3:b8:95:88:0b:65:ef:ca:62:ff:a5:18:74:9d:fb:
         0e:d7:63:05:0b:8b:7c:14:61:31:a7:35:aa:ff:59:db:97:c1:
         01:22:2a:1e:57:d2:22:ee:c0:cb:22:06:c0:52:1f:cd:a2:13:
         08:99:c0:b1:69:da:8d:b9:ba:d9:7a:43:13:81:61:29:a1:c6:
         1b:1d:4d:6f:cc:90:0c:4d:97:9e:66:6b:d1:e6:fe:ed:6e:00:
         cb:6b:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:15 2025 by rpki-client on console.sobornost.net