Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3332203d3e20323730303233.roa
File:                     323830333a333965303a3a2f33322d3332203d3e20323730303233.roa (raw, json)
Hash identifier:          o4IQLUPQIEMuLpUo0+feh4FoDO4YoK87IUw/kO9Rngg=
Subject key identifier:   DD:3A:3F:53:F6:33:FA:65:08:80:CD:9B:E7:75:E0:18:61:0B:9A:4D
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       2AB2C03CB35C51F7EE43A5ED9303659E3E4D1259
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3332203d3e20323730303233.roa
Signing time:             Thu 24 Apr 2025 21:15:58 +0000
ROA not before:           Thu 24 Apr 2025 21:10:58 +0000
ROA not after:            Thu 23 Apr 2026 21:15:58 +0000
asID:                     270023
IP address blocks:        2803:39e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b2:c0:3c:b3:5c:51:f7:ee:43:a5:ed:93:03:65:9e:3e:4d:12:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: Apr 24 21:10:58 2025 GMT
            Not After : Apr 23 21:15:58 2026 GMT
        Subject: CN=DD3A3F53F633FA650880CD9BE775E018610B9A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:43:c7:ef:9a:bd:f1:86:9b:b3:be:a5:42:51:
                    d0:f9:c7:d1:58:cb:dc:c1:d4:86:58:53:cd:69:3f:
                    3d:3b:46:ca:66:ba:82:17:ad:63:fd:51:80:5e:2b:
                    48:e3:63:2c:0b:33:aa:04:23:1a:5c:72:bd:fa:1a:
                    e2:36:05:91:a2:53:f9:57:74:e9:eb:f3:30:bd:16:
                    49:c4:b4:f3:76:9f:e9:c3:7d:2f:8a:39:c1:ab:eb:
                    9d:5c:af:5e:38:bb:4b:0f:19:63:49:fd:01:90:af:
                    76:12:1a:97:24:5a:75:2a:ee:a0:73:5b:26:99:8a:
                    8e:cb:06:cd:40:f9:cd:38:60:b3:3c:05:34:a6:2c:
                    b0:37:5e:b6:0d:42:f2:78:78:80:ec:de:12:09:13:
                    7d:ce:1f:3d:19:db:82:32:15:62:2a:d9:31:81:57:
                    94:8b:d3:45:be:3c:85:ca:c0:83:7e:19:de:d3:ea:
                    1c:40:6d:ef:fb:b0:ff:b4:17:e1:0c:4f:41:95:db:
                    c5:95:9a:aa:78:71:12:14:e0:f3:16:60:e9:02:5f:
                    f0:e5:bd:1e:7a:e7:79:75:0b:73:e1:ff:3a:65:f4:
                    c9:4b:60:58:14:2c:28:e7:ad:fd:5a:d7:01:46:5f:
                    f8:de:7e:b8:97:09:eb:6b:39:3e:c3:d5:f7:aa:bd:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3A:3F:53:F6:33:FA:65:08:80:CD:9B:E7:75:E0:18:61:0B:9A:4D
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3332203d3e20323730303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:39e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:75:8c:ba:8c:e5:06:27:54:bf:4d:8a:79:67:56:50:2d:5e:
         08:90:a2:17:a8:20:72:c0:92:2c:4e:6b:0c:68:b5:d4:1c:10:
         76:24:14:9c:a9:2d:29:d4:1f:67:a2:af:e5:02:87:b2:17:97:
         95:a6:8c:ff:e7:72:4b:0f:26:c2:ca:04:62:ee:61:68:cb:15:
         42:a4:e3:4c:f6:9a:90:1b:2a:20:97:22:b1:ff:7e:de:a2:b5:
         56:66:3e:3b:12:16:10:99:4e:f3:d0:82:20:33:98:df:a2:c1:
         48:c3:48:38:0a:0d:45:ec:97:90:5e:59:58:54:2f:43:f5:61:
         b1:98:a1:5b:99:b4:a7:47:00:c4:b5:a0:95:6e:20:20:cb:9d:
         a6:e6:ab:80:c4:99:cd:19:d5:ea:37:32:ac:8d:19:16:85:48:
         36:cf:f6:60:f2:fc:f5:4c:e6:d9:90:5d:0a:5d:27:0e:44:e9:
         d1:1a:62:a0:d2:58:bf:fe:e0:53:a7:13:3d:c3:73:be:41:a9:
         dd:a1:75:d3:de:e4:97:f4:f0:a6:eb:11:ee:28:eb:a9:33:49:
         d7:4d:b3:dd:a3:11:d5:e3:25:23:fe:dc:f9:99:56:77:60:42:
         05:76:1b:8b:ba:7b:c6:e3:e2:20:1a:0f:f6:9a:05:46:f5:67:
         4e:ca:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net