Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/323830313a64303a3a2f33322d3332203d3e20323733323631.roa
File:                     323830313a64303a3a2f33322d3332203d3e20323733323631.roa (raw, json)
Hash identifier:          s8IK56lcUCRE9yZa7Bi3Kq0ykBXYrV9hNQnwsWjOn74=
Subject key identifier:   43:3B:5B:BF:EC:FC:45:2B:05:33:9C:2F:43:E4:A7:54:EF:C2:7A:84
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       10B77BFD5EDD63206DE2DAC0D260C77AD71927D0
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/323830313a64303a3a2f33322d3332203d3e20323733323631.roa
Signing time:             Fri 21 Feb 2025 15:10:00 +0000
ROA not before:           Fri 21 Feb 2025 15:05:00 +0000
ROA not after:            Fri 20 Feb 2026 15:10:00 +0000
asID:                     273261
IP address blocks:        2801:d0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b7:7b:fd:5e:dd:63:20:6d:e2:da:c0:d2:60:c7:7a:d7:19:27:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Feb 21 15:05:00 2025 GMT
            Not After : Feb 20 15:10:00 2026 GMT
        Subject: CN=433B5BBFECFC452B05339C2F43E4A754EFC27A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:84:86:a1:33:fb:e6:5a:91:bb:d1:95:1c:
                    e3:b9:27:25:2f:b8:0c:ca:ef:f2:42:d7:01:38:ef:
                    b8:c1:a0:36:82:09:4a:b7:db:8b:5f:60:46:d1:d0:
                    d9:8a:5d:1f:3c:9a:2e:70:cc:f5:80:f5:c6:10:e4:
                    72:f7:44:fb:1d:69:42:01:50:2a:02:0a:f0:09:a8:
                    f1:02:58:4a:6e:7b:c6:dc:51:d2:58:e8:70:f7:a7:
                    4f:3a:27:eb:e5:1d:81:63:df:40:ba:b0:f5:43:b1:
                    ce:81:ff:c1:3d:dd:ca:93:f5:f1:f3:d7:1d:71:68:
                    1a:2b:b3:0a:27:fb:ae:e6:ef:d4:ed:29:ec:f4:85:
                    28:09:84:9f:d3:e5:04:42:fa:d0:36:ee:c7:e1:d0:
                    b8:e4:b8:f2:50:d3:41:39:bd:5d:e1:08:c0:d9:39:
                    7b:ce:77:00:14:02:70:8c:77:f0:71:06:9c:63:1d:
                    9b:d5:f4:bd:3e:73:68:fc:e4:23:61:27:1e:d6:12:
                    5e:26:cf:a9:98:2d:55:c3:33:98:c5:f5:88:30:3f:
                    17:20:df:76:28:30:5d:9e:96:08:60:ec:8b:68:80:
                    bf:be:f2:54:d7:99:ac:d0:00:72:35:e0:1c:66:b4:
                    0a:ed:29:70:c2:89:5a:2a:60:db:bc:a2:71:56:04:
                    13:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3B:5B:BF:EC:FC:45:2B:05:33:9C:2F:43:E4:A7:54:EF:C2:7A:84
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/323830313a64303a3a2f33322d3332203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:a0:de:70:0e:9a:fb:ec:d5:12:0e:5f:6a:9f:65:8d:ac:4a:
         fb:94:f7:2a:a2:e1:0c:14:6a:c4:ab:c9:e9:d2:11:ee:87:e5:
         e8:63:ce:18:2a:2c:fb:b0:d5:c2:6d:ca:07:09:d1:e0:fd:b3:
         76:af:78:ec:79:17:b1:19:89:1a:07:8f:40:e1:12:e6:6d:31:
         f3:13:21:f9:df:52:bc:2f:66:6a:81:c5:54:30:0a:e8:e3:3c:
         9d:94:4d:d0:1a:de:89:3e:3f:6e:ed:55:42:a6:7e:86:3d:dd:
         59:7c:dc:e5:12:84:c7:f3:53:76:fb:26:fd:47:51:76:89:91:
         f6:fc:a8:c0:67:51:c8:d2:ee:91:e6:54:13:34:fd:80:0b:c1:
         05:5d:fb:8d:44:0e:85:6c:3b:33:ea:be:86:43:b7:08:77:5e:
         d3:f8:60:69:38:b7:ef:84:24:fb:ac:f2:56:4c:c5:1d:0a:8b:
         19:98:da:ab:dc:1b:ef:43:b9:2e:0f:a1:2d:cb:8c:d6:b7:39:
         31:08:af:4a:18:1b:21:65:08:5f:3f:13:b7:bf:7e:88:63:bc:
         38:f0:e8:05:5b:82:1f:a9:26:a8:7e:e4:1b:5b:45:0f:0d:f0:
         fb:ae:b7:74:d8:e6:0f:f2:4e:3f:bc:8b:30:53:be:a2:e0:94:
         6b:6b:51:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net