Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a353a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a353a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          3aPB0dZYlyqvGRaESD+mnSmayg/eVPywQn3a0dJqHgc=
Subject key identifier:   1A:64:7A:30:7C:C6:53:C0:4D:CA:E9:16:36:5C:C7:6A:CE:AF:1D:B9
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       51A3DFA77C2E14217C015081554BA8A8C3ECBF57
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a353a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 11 Apr 2025 16:14:37 +0000
ROA not before:           Fri 11 Apr 2025 16:09:37 +0000
ROA not after:            Fri 10 Apr 2026 16:14:37 +0000
asID:                     263242
IP address blocks:        2803:1180:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a3:df:a7:7c:2e:14:21:7c:01:50:81:55:4b:a8:a8:c3:ec:bf:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Apr 11 16:09:37 2025 GMT
            Not After : Apr 10 16:14:37 2026 GMT
        Subject: CN=1A647A307CC653C04DCAE916365CC76ACEAF1DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:63:cf:d0:cf:23:22:06:c8:dc:84:d5:cf:
                    96:55:9c:dd:a1:2e:8a:72:04:7a:ec:9d:d0:c1:a3:
                    38:f3:77:ec:4d:7b:b1:2e:0f:ff:3e:48:bd:fc:b6:
                    2f:e2:58:18:5e:ef:9f:58:07:2b:85:81:cd:c8:7e:
                    fc:06:2d:95:00:b0:30:37:48:17:05:80:61:79:c6:
                    12:25:9f:5c:e1:5d:21:0d:fa:ff:41:0c:4b:28:c5:
                    ba:b5:12:73:74:3b:a5:bc:34:ad:d7:20:8a:a9:0a:
                    a4:67:de:73:78:16:9e:32:94:6a:2f:b0:5b:a9:b1:
                    10:56:21:13:40:9e:24:09:00:60:b6:85:e9:b5:5a:
                    09:e6:4f:30:ca:02:af:b0:05:a8:9a:5b:78:84:fe:
                    0f:04:2f:87:04:bd:f3:89:33:62:c6:8e:fa:25:1b:
                    c0:90:91:7c:62:33:ed:c4:52:eb:55:c2:d3:d0:a9:
                    a8:10:19:7a:74:c0:ed:ad:e1:fc:d0:0d:61:19:34:
                    44:68:0a:63:e2:92:e7:de:48:0f:d6:8f:03:81:aa:
                    b6:65:ec:97:8a:7c:a9:ff:11:0f:c2:ba:bb:0a:39:
                    40:fc:a4:71:1d:b7:be:2d:4f:1e:f6:c4:25:9d:7a:
                    6f:59:a5:42:af:b2:ef:06:12:39:c3:4e:10:44:81:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:64:7A:30:7C:C6:53:C0:4D:CA:E9:16:36:5C:C7:6A:CE:AF:1D:B9
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a353a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:66:d9:9c:6f:8f:b0:16:95:cb:b6:58:2d:cd:76:64:b9:3d:
         cb:00:62:ce:fd:ea:2f:fb:db:93:ae:75:d7:7b:fb:79:cf:ed:
         da:b4:89:7d:21:cc:a6:5d:3f:09:b4:75:47:16:92:ae:16:a8:
         17:af:d5:a7:12:61:3a:1f:08:c9:88:21:e7:d6:49:28:4a:81:
         a1:ec:32:94:d9:0d:76:13:2a:e4:92:ea:21:82:45:2a:28:52:
         da:70:5c:fd:d5:57:82:76:ae:1b:39:51:f0:90:c4:94:fe:20:
         f7:5f:5a:73:dc:eb:86:33:9e:ee:60:35:07:37:87:27:ea:df:
         67:e7:17:ba:0d:b7:fa:1a:5b:4d:ea:47:2c:09:b0:fa:f1:7f:
         d6:cf:f7:18:82:5f:57:e5:8a:79:e3:2a:e3:e8:87:6d:22:5b:
         5c:a0:3f:c6:23:cb:6f:17:53:d1:3e:60:e9:bb:8f:29:18:1d:
         dc:5c:13:e5:cc:6a:ca:a7:a9:43:cd:8a:65:e8:2c:10:08:54:
         8d:59:f1:1a:76:98:aa:12:2e:62:99:92:53:3c:33:10:d4:91:
         21:22:e0:8a:af:0f:28:29:a1:22:d6:d2:26:83:32:bc:66:3c:
         56:47:b0:ab:3b:2a:d3:41:de:58:3c:e3:7d:33:de:c8:e5:78:
         b1:69:af:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:19 2025 by rpki-client on console.sobornost.net