Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          +Fcu/YHUonVkBs5n7e+Y8p+oeFYK5xD1a8wBKFdew2s=
Subject key identifier:   B9:80:70:9D:5B:F4:A0:35:22:3F:FD:71:7F:BB:F7:49:6B:E4:71:FD
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       1DFC251E055E7A59D22D952768074FECFBEED090
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 11 Apr 2025 16:14:33 +0000
ROA not before:           Fri 11 Apr 2025 16:09:33 +0000
ROA not after:            Fri 10 Apr 2026 16:14:33 +0000
asID:                     263242
IP address blocks:        2803:1180:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fc:25:1e:05:5e:7a:59:d2:2d:95:27:68:07:4f:ec:fb:ee:d0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Apr 11 16:09:33 2025 GMT
            Not After : Apr 10 16:14:33 2026 GMT
        Subject: CN=B980709D5BF4A035223FFD717FBBF7496BE471FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:30:5a:a9:25:95:cc:0e:d7:7f:59:20:d9:24:
                    16:8e:99:7c:d1:fb:48:b3:c7:50:bd:cb:72:9b:90:
                    ff:ed:bb:80:2d:34:3c:db:f4:d4:9f:c3:6d:29:76:
                    97:0a:11:7a:b7:f9:14:0d:b7:5f:02:4c:3a:1e:15:
                    6e:44:04:b5:45:62:b1:ce:f3:cc:6c:64:0b:1e:ef:
                    98:4d:a6:e4:5b:04:92:1f:e7:1e:5f:b2:25:9c:29:
                    3a:67:3f:66:ed:90:74:fc:c8:2d:e3:42:b2:44:46:
                    b0:d0:2b:a7:28:b9:d1:fc:5e:35:4c:65:fe:43:54:
                    71:0e:c2:d1:89:2a:e7:55:24:70:8c:41:ac:d7:a7:
                    d0:8e:3a:24:bf:fc:c3:95:d1:5a:02:cc:b2:aa:83:
                    33:fa:67:57:86:14:5a:f0:22:68:17:18:60:5e:4a:
                    69:9e:ef:96:16:1f:15:5c:f1:67:f4:77:7f:3d:03:
                    d6:ce:63:68:30:28:c7:53:cc:99:d8:ef:d3:75:fb:
                    9a:52:29:22:79:89:21:b2:d8:eb:a0:17:a0:a6:40:
                    92:3c:d2:e1:c9:a5:63:64:bb:9d:61:0e:47:2c:9b:
                    15:0f:e2:e8:31:df:c2:bf:56:32:36:9b:c5:78:8b:
                    cb:e7:1b:c0:b7:33:44:7d:55:08:e5:8f:48:b0:16:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:80:70:9D:5B:F4:A0:35:22:3F:FD:71:7F:BB:F7:49:6B:E4:71:FD
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:42:75:69:88:e7:d9:00:3e:c5:5e:39:04:17:f5:fa:ef:1b:
         90:4f:5c:44:9d:57:49:ac:10:8e:6e:7a:3e:d6:41:1a:15:bd:
         23:0b:e9:67:fa:33:74:20:fe:63:de:b3:81:17:19:90:6f:ed:
         77:fe:5a:50:89:a0:13:b5:5f:d3:48:53:29:05:11:97:c4:24:
         0c:0d:95:8f:e5:80:32:a5:8a:45:dd:fa:3b:64:2f:a6:6c:1c:
         8c:3e:cf:d0:ce:33:7c:2d:05:e3:06:ca:79:d0:b1:6d:54:6f:
         4d:a2:04:8e:fe:fc:5f:1b:92:df:91:f3:c2:58:e9:a3:3b:89:
         bf:1a:f5:01:9e:f8:d4:ab:39:d2:9f:19:23:ae:35:d8:a8:e1:
         45:44:54:04:75:8a:cd:82:11:7f:23:9d:a4:b5:19:81:67:a7:
         dc:4e:83:78:e4:d9:79:8f:12:2d:18:2d:c5:8a:9b:a4:17:6a:
         2f:57:60:6d:35:51:3e:7f:ba:93:c7:5f:ee:00:e8:dc:4f:ee:
         75:65:1d:0b:84:4a:ef:f5:9b:4d:aa:be:d8:25:40:1d:7a:93:
         93:a7:94:27:51:ee:e1:3b:ea:a8:f6:63:a9:45:be:cb:e1:9f:
         11:4d:97:28:24:a1:32:8a:0b:1d:ec:d1:36:fb:53:47:af:6f:
         44:bb:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:19 2025 by rpki-client on console.sobornost.net