Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/323030313a313230343a3a2f33322d3332203d3e203238343631.roa
File:                     323030313a313230343a3a2f33322d3332203d3e203238343631.roa (raw, json)
Hash identifier:          pJ199GqoYoLluLukCWqg0p/z+b2B9wv1njHTGc2pepA=
Subject key identifier:   B1:F7:15:A0:55:70:99:DE:A2:67:33:A8:31:C5:E4:F5:F8:FE:6B:AB
Certificate issuer:       /CN=34090330F5A38CD685507A29EEE8D849546FBEBA
Certificate serial:       7FF9A7D6B06B32C1077A74E4FB90B223A50B09F4
Authority key identifier: 34:09:03:30:F5:A3:8C:D6:85:50:7A:29:EE:E8:D8:49:54:6F:BE:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34090330F5A38CD685507A29EEE8D849546FBEBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/323030313a313230343a3a2f33322d3332203d3e203238343631.roa
Signing time:             Mon 21 Apr 2025 20:15:38 +0000
ROA not before:           Mon 21 Apr 2025 20:10:38 +0000
ROA not after:            Mon 20 Apr 2026 20:15:38 +0000
asID:                     28461
IP address blocks:        2001:1204::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/34090330F5A38CD685507A29EEE8D849546FBEBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/34090330F5A38CD685507A29EEE8D849546FBEBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34090330F5A38CD685507A29EEE8D849546FBEBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:a7:d6:b0:6b:32:c1:07:7a:74:e4:fb:90:b2:23:a5:0b:09:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34090330F5A38CD685507A29EEE8D849546FBEBA
        Validity
            Not Before: Apr 21 20:10:38 2025 GMT
            Not After : Apr 20 20:15:38 2026 GMT
        Subject: CN=B1F715A0557099DEA26733A831C5E4F5F8FE6BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:46:3d:82:7e:05:30:16:df:52:bf:52:7b:
                    6b:3f:c0:5e:c3:ec:74:00:c4:35:4f:30:7f:a7:60:
                    87:af:44:ed:2e:b3:07:5f:a1:3a:0b:71:00:28:cd:
                    25:40:46:1e:58:e7:e9:f1:5f:d3:3b:ba:44:13:2f:
                    db:83:2b:fb:5e:45:da:a4:38:6f:95:8a:ae:55:d5:
                    d0:58:c1:6e:45:9e:b6:51:f1:cf:74:4c:09:de:a5:
                    6e:e2:bf:0e:b6:18:2d:cb:5c:28:be:58:f1:06:27:
                    28:6e:ec:a9:6e:b8:55:c1:4e:8d:4c:6f:fa:79:17:
                    53:6e:50:eb:75:e4:72:b0:9f:0b:81:57:85:f2:63:
                    87:0a:1f:82:e0:ee:cd:4b:3c:f2:0b:e9:3c:76:12:
                    fd:1a:d4:ae:46:ae:01:73:1c:22:24:60:4d:7d:f9:
                    98:83:7a:30:93:91:50:7a:dc:37:e8:f8:b0:93:65:
                    9f:2d:aa:52:d0:e3:88:0b:a0:10:df:71:96:3a:22:
                    58:fb:9b:03:65:1d:66:a0:88:22:5c:2a:1d:09:dc:
                    25:c0:c0:a1:ea:33:cf:a5:0c:81:46:73:6b:05:f0:
                    25:7b:95:73:13:09:02:c7:fc:e9:87:0a:91:cf:a1:
                    a7:72:40:bd:53:d3:a4:78:c8:84:7a:72:23:d9:7e:
                    ee:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:15:A0:55:70:99:DE:A2:67:33:A8:31:C5:E4:F5:F8:FE:6B:AB
            X509v3 Authority Key Identifier:
                keyid:34:09:03:30:F5:A3:8C:D6:85:50:7A:29:EE:E8:D8:49:54:6F:BE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/34090330F5A38CD685507A29EEE8D849546FBEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34090330F5A38CD685507A29EEE8D849546FBEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/323030313a313230343a3a2f33322d3332203d3e203238343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1204::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:55:7d:d9:a3:b1:b8:98:04:16:2a:92:ea:fe:cb:fa:d3:b9:
         cd:a8:97:0a:0e:c8:c1:ef:f5:da:3c:26:36:84:f7:39:45:c5:
         21:8a:56:5b:6a:71:ef:7a:61:35:d7:04:b7:53:6b:20:fa:60:
         a2:0c:ec:f2:87:fd:4b:b5:03:c1:f3:02:e7:aa:e5:19:80:b4:
         9e:d4:36:ff:83:f9:ab:0c:c5:33:09:c8:0f:65:cd:1f:e3:bb:
         9e:8e:ac:89:86:2e:92:06:39:e5:a8:c3:52:14:8e:32:29:f5:
         de:97:7e:3b:55:84:95:f9:5f:f6:1a:38:fd:a6:8f:6e:21:3a:
         85:20:6b:32:5c:3e:5d:ef:36:ad:b6:dd:34:cd:51:e4:19:41:
         08:b4:92:af:96:f4:89:f1:47:c9:ec:7c:fc:b7:fe:bf:5c:93:
         c4:35:c3:c0:95:29:0a:76:d3:55:b5:1a:4b:f5:cd:27:1e:46:
         f5:6f:da:78:a0:97:2a:d4:a1:71:43:3f:92:14:4b:1c:e8:52:
         42:a5:d4:87:12:c8:04:bf:d2:85:33:0c:34:2b:db:78:4c:c0:
         1f:7f:5e:16:62:43:76:07:ed:0f:db:29:53:50:32:ba:da:9a:
         a1:4e:ad:26:89:d7:ba:78:bc:d1:10:7d:d4:c9:f9:1e:60:02:
         6d:82:8d:34
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUf/mn1rBrMsEHenTk+5CyI6ULCfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwOTAzMzBGNUEzOENENjg1NTA3QTI5RUVFOEQ4NDk1
NDZGQkVCQTAeFw0yNTA0MjEyMDEwMzhaFw0yNjA0MjAyMDE1MzhaMDMxMTAvBgNV
BAMTKEIxRjcxNUEwNTU3MDk5REVBMjY3MzNBODMxQzVFNEY1RjhGRTZCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELEY9gn4FMBbfUr9Se2s/wF7D
7HQAxDVPMH+nYIevRO0uswdfoToLcQAozSVARh5Y5+nxX9M7ukQTL9uDK/teRdqk
OG+Viq5V1dBYwW5FnrZR8c90TAnepW7ivw62GC3LXCi+WPEGJyhu7KluuFXBTo1M
b/p5F1NuUOt15HKwnwuBV4XyY4cKH4Lg7s1LPPIL6Tx2Ev0a1K5GrgFzHCIkYE19
+ZiDejCTkVB63Dfo+LCTZZ8tqlLQ44gLoBDfcZY6Ilj7mwNlHWagiCJcKh0J3CXA
wKHqM8+lDIFGc2sF8CV7lXMTCQLH/OmHCpHPoadyQL1T06R4yIR6ciPZfu67AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUsfcVoFVwmd6iZzOoMcXk9fj+a6swHwYDVR0j
BBgwFoAUNAkDMPWjjNaFUHop7ujYSVRvvrowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BODEyRkU1RkNFRkVBRjcwQjdENzlBRUU4RTg0QkM3OTRC
RDYwRkYwQkNBMEMwQzM0QUYyNjI3OTA0MUNFQzI4LzAvMzQwOTAzMzBGNUEzOENE
Njg1NTA3QTI5RUVFOEQ4NDk1NDZGQkVCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDA5MDMzMEY1QTM4Q0Q2ODU1
MDdBMjlFRUU4RDg0OTU0NkZCRUJBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTgxMkZFNUZDRUZFQUY3MEI3RDc5QUVFOEU4NEJDNzk0QkQ2MEZGMEJD
QTBDMEMzNEFGMjYyNzkwNDFDRUMyOC8wLzMyMzAzMDMxM2EzMTMyMzAzNDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzNDM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARIEMA0G
CSqGSIb3DQEBCwUAA4IBAQBwVX3Zo7G4mAQWKpLq/sv607nNqJcKDsjB7/XaPCY2
hPc5RcUhilZbanHvemE11wS3U2sg+mCiDOzyh/1LtQPB8wLnquUZgLSe1Db/g/mr
DMUzCcgPZc0f47uejqyJhi6SBjnlqMNSFI4yKfXel347VYSV+V/2Gjj9po9uITqF
IGsyXD5d7zattt00zVHkGUEItJKvlvSJ8UfJ7Hz8t/6/XJPENcPAlSkKdtNVtRpL
9c0nHkb1b9p4oJcq1KFxQz+SFEsc6FJCpdSHEsgEv9KFMww0K9t4TMAff14WYkN2
B+0P2ylTUDK62pqhTq0mide6eLzREH3UyfkeYAJtgo00
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:17 2025 by rpki-client on console.sobornost.net