Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a323030303a3a2f33352d3335203d3e20323639383131.roa
File:                     323830333a336236303a323030303a3a2f33352d3335203d3e20323639383131.roa (raw, json)
Hash identifier:          38nBKctZVIiaJdY1vqG60d+5WTbTBx9R6v47CndVpjo=
Subject key identifier:   35:89:E8:77:36:0E:84:40:FC:67:AF:88:AD:0C:7F:8C:21:5F:12:2D
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       7CC5A4E4321FFD3ECDE824D82EB4B7438908F43F
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a323030303a3a2f33352d3335203d3e20323639383131.roa
Signing time:             Tue 11 Mar 2025 08:30:02 +0000
ROA not before:           Tue 11 Mar 2025 08:25:02 +0000
ROA not after:            Tue 10 Mar 2026 08:30:02 +0000
asID:                     269811
IP address blocks:        2803:3b60:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:a4:e4:32:1f:fd:3e:cd:e8:24:d8:2e:b4:b7:43:89:08:f4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Mar 11 08:25:02 2025 GMT
            Not After : Mar 10 08:30:02 2026 GMT
        Subject: CN=3589E877360E8440FC67AF88AD0C7F8C215F122D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:29:61:33:5e:bd:cf:a7:21:9f:6a:0e:76:
                    4a:4f:2d:44:06:22:1d:bf:c8:1a:1a:ad:32:da:5f:
                    32:63:e2:35:a3:ff:6a:53:48:52:7f:6b:48:1b:8e:
                    9d:80:1b:74:ca:c2:1e:ca:1e:41:0a:02:26:1c:c1:
                    2e:cb:54:95:20:ee:84:f9:6e:ad:af:ca:2a:56:2a:
                    29:51:74:80:5a:90:28:59:ea:d2:41:f0:88:88:0b:
                    f8:e5:27:1d:c6:e2:53:da:01:4b:e4:16:16:ef:16:
                    87:a4:1a:80:e2:7e:a3:2a:ba:ca:b9:03:ec:94:54:
                    3e:d7:f8:6c:43:4d:35:64:28:14:26:ee:78:7a:8a:
                    ca:0f:e6:df:56:b4:d6:14:fc:44:26:f8:85:8d:08:
                    88:8f:c0:16:2b:05:4f:91:51:06:db:63:dd:4f:9f:
                    ad:c5:c0:4e:ba:26:f4:81:21:c7:6a:58:9e:2a:36:
                    39:2f:bc:0b:5d:f9:09:84:3d:69:3c:35:d0:7d:68:
                    61:60:e6:d2:fd:65:9a:e7:6f:07:5b:08:81:8a:43:
                    02:2f:57:79:0a:32:ce:35:f8:3c:48:e4:28:35:4a:
                    31:df:8e:0b:73:c6:bf:90:ef:30:81:70:7b:ac:00:
                    ed:c3:51:7b:a1:ca:bf:8a:71:c8:50:99:69:0a:c2:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:E8:77:36:0E:84:40:FC:67:AF:88:AD:0C:7F:8C:21:5F:12:2D
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a323030303a3a2f33352d3335203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         28:81:b0:f6:c6:9a:be:fb:cf:82:fc:54:5c:ca:c3:8f:8e:44:
         11:a3:e0:52:ba:46:8d:89:0f:c1:df:61:20:af:ef:59:8e:3e:
         f3:d6:19:1e:80:dd:fc:96:83:39:c0:03:5e:3c:bf:dd:78:0e:
         6f:9e:21:2c:ad:84:e2:6a:9d:98:e0:d5:75:ac:17:0b:32:f3:
         ad:ce:94:29:32:06:22:44:f2:5d:b6:c2:a7:28:3d:3f:7f:d6:
         36:01:c3:2a:87:86:44:0b:61:01:ae:0a:c8:42:45:7d:ea:8f:
         97:7c:2e:6d:98:e6:4d:4b:11:09:fa:91:32:ef:20:69:d0:e3:
         ab:74:6f:f5:75:76:79:5e:70:00:75:49:cd:9f:6c:59:40:1d:
         d7:97:b9:3e:f4:5e:4a:a3:41:39:a3:69:1a:43:bc:73:51:fc:
         f4:3e:bc:c0:10:2f:48:16:4c:e4:7b:bf:f4:68:d4:35:14:9b:
         15:8b:d3:92:77:b4:63:8e:94:52:f6:cd:df:11:7f:41:7a:e8:
         e5:3d:93:16:f7:fc:31:ac:8b:a7:9b:01:cd:ac:95:5b:a5:30:
         f9:0a:ce:f0:d1:37:04:e9:38:e1:5c:48:c4:e7:b0:84:76:75:
         de:40:ed:a2:08:5a:9e:d0:2d:2b:0d:ad:66:b9:e0:67:e8:71:
         26:6c:4e:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net