Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/323830333a633436303a3a2f33322d3332203d3e20323637383332.roa
File:                     323830333a633436303a3a2f33322d3332203d3e20323637383332.roa (raw, json)
Hash identifier:          XeP2rV+J1W8lemaR/aD/N4CaDJ63yiJ+2n6ACOMaVjc=
Subject key identifier:   C3:5C:00:00:3C:2E:C5:29:7F:AA:1C:D2:46:FF:89:7C:7D:80:03:21
Certificate issuer:       /CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
Certificate serial:       260DFF3FEA48EE2E219F51CAA27D213F264AC86F
Authority key identifier: ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/323830333a633436303a3a2f33322d3332203d3e20323637383332.roa
Signing time:             Tue 04 Feb 2025 18:40:41 +0000
ROA not before:           Tue 04 Feb 2025 18:35:41 +0000
ROA not after:            Tue 03 Feb 2026 18:40:41 +0000
asID:                     267832
IP address blocks:        2803:c460::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0d:ff:3f:ea:48:ee:2e:21:9f:51:ca:a2:7d:21:3f:26:4a:c8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
        Validity
            Not Before: Feb  4 18:35:41 2025 GMT
            Not After : Feb  3 18:40:41 2026 GMT
        Subject: CN=C35C00003C2EC5297FAA1CD246FF897C7D800321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:41:e3:8c:f3:07:45:af:0c:08:33:8a:a3:
                    ca:36:16:47:c6:c7:23:d0:12:1e:27:9f:18:32:a9:
                    66:c4:84:d7:ac:9e:15:db:77:a4:70:f5:ef:2a:3d:
                    fc:e9:fa:14:27:3f:1b:78:54:e1:07:30:83:c2:85:
                    29:d9:d8:28:d3:60:76:e8:19:c6:b7:a2:cd:86:d2:
                    03:85:74:af:13:fa:9a:00:a4:0f:28:29:9b:6a:e3:
                    1c:c7:7c:a4:66:fc:80:9a:6c:1c:06:fd:f2:78:49:
                    b3:84:5a:46:79:e3:6e:29:93:e3:0e:39:8e:8a:87:
                    3b:b1:3f:8b:8c:d2:14:db:1b:7f:33:72:7e:af:aa:
                    59:09:94:51:a0:12:e1:7a:5e:1f:6b:9e:dd:62:1a:
                    0a:b5:df:34:eb:1a:b7:0f:59:db:6b:bf:15:b7:65:
                    52:ed:c4:0d:a3:02:25:81:9f:24:80:d7:e6:e2:13:
                    eb:ea:dd:91:02:fb:23:d9:9f:89:34:a8:60:1d:06:
                    07:2e:93:f1:70:8b:d3:f0:43:5a:5b:c5:98:3a:d6:
                    7c:2b:b7:81:a2:3c:53:f0:f0:0f:ca:c5:39:3b:4a:
                    e8:03:4c:e9:a4:a5:be:59:a3:58:ab:73:0e:a4:59:
                    79:3e:b7:e2:86:8d:dd:6b:7b:97:6c:ef:83:b3:1a:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5C:00:00:3C:2E:C5:29:7F:AA:1C:D2:46:FF:89:7C:7D:80:03:21
            X509v3 Authority Key Identifier:
                keyid:ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/323830333a633436303a3a2f33322d3332203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c460::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:5f:1d:7b:16:7b:c3:ed:2a:1f:09:77:29:e2:30:a6:e4:a5:
         8d:a1:d9:15:91:67:3a:b5:a9:e8:36:cf:a3:3f:3b:9c:e4:5f:
         4d:cd:6e:58:11:46:17:55:3e:83:66:9f:1d:c6:92:b5:73:be:
         9e:87:74:76:43:9e:f7:b3:bf:4f:7f:bc:1d:52:97:89:83:c0:
         74:05:31:71:61:6a:8c:64:35:63:a7:63:5d:23:94:61:b3:eb:
         5d:bb:86:29:30:81:1e:e3:38:29:b9:33:03:5a:3c:31:0a:5c:
         36:56:c1:8b:38:47:30:91:5c:7d:7d:bd:ad:5a:11:fc:07:47:
         1f:ee:49:ba:5b:ab:eb:49:fa:63:d0:1a:65:e8:b0:f8:57:6e:
         4d:20:99:16:e3:26:7e:51:2a:0b:c3:1c:97:bf:16:1b:17:a4:
         d9:80:e2:0a:70:38:68:3c:5e:79:3a:47:e2:6c:07:97:b9:39:
         00:a5:54:cc:92:34:33:08:8e:5b:f3:25:2c:66:c1:b8:d1:93:
         1c:93:58:b2:19:0c:b3:54:f6:e4:76:6a:13:86:dc:0d:7f:8f:
         02:53:8d:e7:9d:0b:28:b6:2f:79:72:81:36:e6:04:f0:1c:ce:
         52:5e:07:c7:54:04:e7:25:69:94:57:fd:b8:7d:51:29:09:39:
         36:05:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:07 2025 by rpki-client on console.sobornost.net