Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/323830333a6164303a3a2f33322d3332203d3e20323734303634.roa
File:                     323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (raw, json)
Hash identifier:          xT9XwSauYoSUnu1hhUiyvbXy1q8NqQprbVYTgbnc4vM=
Subject key identifier:   0B:12:08:EB:F2:76:06:E5:31:EF:03:6D:F9:AE:47:26:15:00:FF:A4
Certificate issuer:       /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72
Certificate serial:       71D90FC8C90442D861A425AEB34EFB8E96AA6354
Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/323830333a6164303a3a2f33322d3332203d3e20323734303634.roa
Signing time:             Tue 15 Apr 2025 13:10:00 +0000
ROA not before:           Tue 15 Apr 2025 13:05:00 +0000
ROA not after:            Tue 14 Apr 2026 13:10:00 +0000
asID:                     274064
IP address blocks:        2803:ad0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d9:0f:c8:c9:04:42:d8:61:a4:25:ae:b3:4e:fb:8e:96:aa:63:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72
        Validity
            Not Before: Apr 15 13:05:00 2025 GMT
            Not After : Apr 14 13:10:00 2026 GMT
        Subject: CN=0B1208EBF27606E531EF036DF9AE47261500FFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:55:5b:8d:63:22:2a:96:4b:e7:f1:d3:54:
                    52:4c:4f:43:1b:59:ec:41:a0:09:5d:0b:9e:1d:63:
                    09:c2:89:cb:91:6a:13:fb:33:58:bc:1a:76:1f:f9:
                    cf:2e:e4:42:3a:ee:cc:00:22:db:e1:b2:6d:3e:10:
                    a3:c8:02:2e:0b:ab:a0:63:0e:23:18:58:d6:6f:e0:
                    ce:81:91:e5:26:4a:c8:ff:b6:f1:13:17:af:14:a1:
                    1b:9d:a1:98:8c:77:9d:d2:df:cb:10:66:b9:1d:44:
                    0e:40:ae:22:72:0c:0e:07:ef:c2:64:13:6c:44:73:
                    69:a2:ee:c0:b1:83:d3:2b:c8:f9:ff:44:ff:aa:8f:
                    61:97:8f:9a:00:0d:b7:56:65:2f:21:12:b2:7e:ae:
                    17:28:96:23:02:d1:b2:ba:dc:e0:97:2b:c2:f0:5d:
                    c8:64:86:f1:ab:40:1a:ff:74:2b:69:34:8d:91:c4:
                    94:fc:f8:34:95:c8:9d:2e:92:0c:b6:f7:24:8a:2d:
                    c7:c2:84:d7:5d:ae:33:1e:5c:07:cc:7a:a6:8c:ea:
                    48:8e:4e:53:63:12:8a:95:f0:28:24:07:66:f9:31:
                    f9:69:a5:47:fa:98:78:fe:31:ed:c4:42:2d:3b:2d:
                    76:5d:e9:47:0c:9b:7c:d2:7d:dc:73:3e:cd:03:2e:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:12:08:EB:F2:76:06:E5:31:EF:03:6D:F9:AE:47:26:15:00:FF:A4
            X509v3 Authority Key Identifier:
                keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/323830333a6164303a3a2f33322d3332203d3e20323734303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:08:48:e8:b0:62:9d:9c:a5:76:33:9e:b2:67:ca:16:48:e3:
         01:d5:82:09:d6:95:d4:d3:7a:dc:04:04:04:37:4b:55:72:22:
         64:b3:b1:40:dc:ff:b6:2b:93:49:ef:f7:19:5b:e4:6c:e0:62:
         6d:d5:c8:9f:b8:5c:df:89:b0:8a:7e:50:e7:fe:62:a2:21:b1:
         51:68:18:00:64:48:03:e9:29:90:71:46:04:3f:8e:32:5b:30:
         dc:38:a8:5e:aa:6b:86:46:1d:3e:fa:ff:84:0b:75:52:3e:c1:
         0a:a9:5d:40:9d:fc:60:e6:22:6e:e7:dc:0b:d3:ee:07:48:1c:
         ee:3a:67:7c:6f:6f:f4:0a:be:aa:6e:61:16:cc:ca:7e:fe:00:
         b9:ef:d6:8b:1f:73:82:ba:4c:d4:a4:3f:46:e4:10:b4:0d:cf:
         6b:b1:5f:e5:39:5f:c1:00:b2:df:cc:1b:62:ee:60:71:0f:14:
         d5:aa:fe:d0:ce:84:49:56:2d:7c:a4:8b:e3:d0:f7:67:4c:b8:
         74:1f:6e:73:0f:63:ed:c0:e5:46:e3:1d:bd:15:13:cb:3a:52:
         03:27:b4:8f:f8:4d:9b:3f:51:ed:49:9e:6f:9a:17:95:03:d5:
         bc:6d:8e:64:1d:23:bc:0d:f8:c4:af:61:37:d2:6a:ed:d0:67:
         59:ed:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:25 2025 by rpki-client on console.sobornost.net