Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3438203d3e20323730303233.roa
File:                     323830333a333965303a3a2f33322d3438203d3e20323730303233.roa (raw, json)
Hash identifier:          EWJ9dI5o/LGamUw9xQ3M3op3mV3jzKc70BA7/SFRgGI=
Subject key identifier:   A1:29:A4:70:C0:B4:B4:E7:8D:9B:D3:3F:35:25:B2:CD:0F:85:64:7C
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       635DCC54A0E4CB69FFEB0E7FD8DE01114363373B
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3438203d3e20323730303233.roa
Signing time:             Thu 24 Apr 2025 21:15:57 +0000
ROA not before:           Thu 24 Apr 2025 21:10:57 +0000
ROA not after:            Thu 23 Apr 2026 21:15:57 +0000
asID:                     270023
IP address blocks:        2803:39e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5d:cc:54:a0:e4:cb:69:ff:eb:0e:7f:d8:de:01:11:43:63:37:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: Apr 24 21:10:57 2025 GMT
            Not After : Apr 23 21:15:57 2026 GMT
        Subject: CN=A129A470C0B4B4E78D9BD33F3525B2CD0F85647C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:e3:4f:10:39:ff:bc:96:23:e9:97:b0:da:
                    4c:e5:15:30:8a:ab:1b:24:a5:bc:8b:f6:b9:3d:45:
                    e1:5d:69:fb:58:e2:bb:42:c1:7e:d4:08:f7:4e:a9:
                    7c:2a:08:af:1b:d3:b6:88:37:31:3f:ed:ce:3f:0d:
                    b5:e3:a0:25:7d:d3:62:5e:70:6f:f8:8c:2b:3f:43:
                    bd:36:9e:e6:c0:39:60:eb:30:77:48:77:d9:d0:10:
                    f9:be:e3:af:eb:8d:20:79:0d:00:78:91:57:ca:2b:
                    b1:c3:19:17:a6:4f:c6:ac:59:ba:c7:37:cd:f3:bf:
                    81:4f:96:fe:f6:f3:ca:aa:bf:6f:b2:11:95:c3:ae:
                    d7:bd:6b:61:6a:33:e3:17:62:ff:da:e4:ee:19:d4:
                    e4:28:d9:2f:38:c3:59:bd:b1:27:19:35:d2:dc:ce:
                    c6:58:d9:c9:96:cb:dd:58:ce:be:c6:a4:0a:6f:cb:
                    c2:9c:b0:32:03:90:2b:d4:56:34:5f:28:ad:89:45:
                    0d:91:22:35:d8:66:9c:30:29:e5:1a:d0:95:01:d8:
                    c7:a5:ce:c6:47:c3:ff:9e:72:62:52:42:10:54:7f:
                    86:07:52:4a:d3:1c:01:e2:7c:b3:f4:0d:5c:cd:7b:
                    33:81:62:03:2b:f6:9d:b5:af:6d:ed:a3:2b:78:95:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:29:A4:70:C0:B4:B4:E7:8D:9B:D3:3F:35:25:B2:CD:0F:85:64:7C
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3438203d3e20323730303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:39e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:08:ef:90:ee:32:72:3a:6c:31:06:b5:aa:2f:52:a7:91:c2:
         d2:75:2e:f3:91:a8:26:45:be:e9:0e:bb:42:03:78:91:3b:c0:
         f9:98:2b:0d:0d:e3:5a:61:ad:d9:5d:b4:80:9c:43:89:69:2d:
         27:93:f7:b2:ae:c0:5a:13:f9:70:61:75:e0:42:3b:db:f0:38:
         0f:53:19:a2:28:f7:8a:21:43:d5:b8:b3:3f:14:3a:5a:95:2f:
         99:9f:9c:a9:ac:7e:a4:1e:11:c1:2a:0a:df:09:96:33:ff:d2:
         86:fc:a7:f5:6c:8c:09:9a:0d:cd:3c:61:57:4c:71:c0:76:e8:
         4e:0d:a1:cd:80:16:da:2f:97:43:b6:50:08:8b:c0:a0:a7:97:
         6a:c5:0b:07:78:94:06:6b:a4:22:25:70:e7:0f:fe:34:dc:29:
         0a:1a:96:08:e0:b4:b3:86:70:01:4f:cc:bd:f8:13:c6:a3:cb:
         46:8d:a3:c8:e3:68:04:bc:2b:cb:33:52:0a:c4:51:af:6d:ef:
         7a:38:8f:1e:69:a4:bf:d0:a5:85:65:58:9e:71:40:6a:21:6a:
         cb:64:90:f0:90:fe:5a:f3:95:94:bc:80:fb:03:76:f0:f0:06:
         93:eb:e1:e4:a5:3c:01:c2:b4:d1:09:8f:c8:f2:41:91:30:aa:
         2b:60:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net