Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343036633a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          kL6yErWB5fgfw7OeDNF+xjj66j0DRPT5mfeqPQ9bVVM=
Subject key identifier:   9E:F7:CA:F4:64:D0:F9:78:1A:D7:85:46:DC:52:F9:4A:2A:E4:19:87
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       3B57072A967D4B5A9CCC74494B75CB99DFEC0B3A
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34372d3437203d3e2033353733.roa
Signing time:             Mon 31 Mar 2025 07:13:20 +0000
ROA not before:           Mon 31 Mar 2025 07:08:20 +0000
ROA not after:            Mon 30 Mar 2026 07:13:20 +0000
asID:                     3573
IP address blocks:        2801:1f0:406c::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:57:07:2a:96:7d:4b:5a:9c:cc:74:49:4b:75:cb:99:df:ec:0b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Mar 31 07:08:20 2025 GMT
            Not After : Mar 30 07:13:20 2026 GMT
        Subject: CN=9EF7CAF464D0F9781AD78546DC52F94A2AE41987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:b0:46:ce:ff:b2:12:00:16:75:e4:be:49:
                    57:bc:82:a4:83:1d:4d:04:34:cc:90:be:a3:3f:d2:
                    f9:ff:5d:26:65:46:38:e4:64:cc:d5:a9:78:9c:c8:
                    02:e2:1b:5d:c9:dd:0f:58:ed:59:b5:f7:ad:43:23:
                    ad:3c:8f:d2:8c:38:92:21:5d:52:52:b3:19:1e:ad:
                    b2:61:9f:95:ad:63:7e:43:99:c0:81:81:34:6e:da:
                    7b:7a:5e:e0:83:1b:27:91:d7:6b:6d:4e:33:ca:ee:
                    f5:2a:54:bb:4d:00:2e:2b:3b:43:ee:de:05:73:5a:
                    79:a1:d7:69:6a:34:0a:e9:d8:a8:bf:75:b0:e9:4b:
                    5e:93:21:43:78:40:df:59:df:c4:58:ee:c5:cc:68:
                    6d:83:a7:79:eb:d3:a0:45:73:73:65:4e:35:07:0a:
                    dc:3f:5e:50:d3:65:d4:8e:d2:ff:0b:0f:e2:05:79:
                    c7:2a:c1:26:d0:bf:57:bc:1e:5b:93:c2:f5:ca:c6:
                    e3:41:6f:5b:c2:1e:92:8b:d3:41:d0:ee:b9:14:01:
                    89:2d:2d:f5:e8:83:cf:58:05:79:b5:cd:5c:6d:72:
                    ed:ef:37:10:97:d3:7c:24:31:f2:1e:eb:bb:b2:8b:
                    d7:44:f0:25:13:da:cf:d7:d2:59:a5:57:5d:d5:8d:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F7:CA:F4:64:D0:F9:78:1A:D7:85:46:DC:52:F9:4A:2A:E4:19:87
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406c::/47

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:20:f9:15:a3:79:67:d7:3c:cd:46:27:d0:eb:eb:e4:88:
         2a:33:d3:c7:b5:fd:a9:92:2f:45:85:84:30:de:d5:16:fe:ea:
         a8:18:98:b1:28:17:26:56:f7:7d:d5:da:fe:26:37:95:1c:a8:
         03:9f:9c:a0:2a:9f:cf:bb:aa:80:43:b1:80:90:3f:52:2b:08:
         a0:9f:c2:b4:e8:3a:1b:77:5d:37:e7:77:89:35:d8:20:91:62:
         60:47:02:87:53:e3:92:ce:1d:c5:8e:14:12:c1:7c:17:01:42:
         31:f9:5b:f5:53:7b:d9:15:21:56:7b:af:f5:6a:c9:3b:15:44:
         1e:e9:28:4d:c4:ee:73:a0:13:e3:0c:ed:4b:fb:d6:85:79:fa:
         4d:02:fe:a0:21:80:a1:32:fc:8b:e8:17:99:d6:18:9a:db:b9:
         71:9e:93:f2:ed:23:4f:d2:40:66:5f:4f:c3:04:d2:7c:6d:c3:
         2c:38:ec:9e:c0:e3:af:38:01:55:0f:3d:d3:be:92:fa:56:da:
         ce:33:91:bd:f5:2a:ab:13:47:b5:48:9a:36:17:85:b9:75:98:
         1f:d3:ac:2f:1f:9b:20:45:52:d4:f3:55:f3:bb:95:40:59:da:
         87:9f:25:f7:82:b1:e2:06:64:3f:d7:60:4d:74:97:62:e1:bd:
         b6:b1:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:39 2025 by rpki-client on console.sobornost.net