Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3930303a3a2f34302d3438203d3e20323639373939.roa
File:                     323830333a613061303a3930303a3a2f34302d3438203d3e20323639373939.roa (raw, json)
Hash identifier:          CjyDfxLvj45V7H3OcE8wPjQhtNtRctnhPQBBIPdRzNo=
Subject key identifier:   A8:06:76:11:5F:04:92:3E:00:63:BD:26:A1:27:9C:85:ED:65:69:22
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       5527F7E4F0640B4DBFD88A3C610F52131C5FE8D4
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3930303a3a2f34302d3438203d3e20323639373939.roa
Signing time:             Tue 04 Feb 2025 18:01:06 +0000
ROA not before:           Tue 04 Feb 2025 17:56:06 +0000
ROA not after:            Tue 03 Feb 2026 18:01:06 +0000
asID:                     269799
IP address blocks:        2803:a0a0:900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:27:f7:e4:f0:64:0b:4d:bf:d8:8a:3c:61:0f:52:13:1c:5f:e8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Feb  4 17:56:06 2025 GMT
            Not After : Feb  3 18:01:06 2026 GMT
        Subject: CN=A80676115F04923E0063BD26A1279C85ED656922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:4b:f4:fd:0f:cc:39:d4:48:8e:a3:7c:df:
                    a6:77:15:8c:f2:2f:23:92:c2:6f:6f:06:96:62:c2:
                    a2:af:93:51:0c:a2:b1:04:f4:74:00:c2:69:e9:02:
                    a9:05:c7:d6:19:ac:ed:ea:10:a3:da:2b:31:04:a4:
                    b4:fe:7d:cc:9f:9a:9c:ee:0b:0a:a8:c6:70:ff:ad:
                    9e:97:58:e0:6c:fe:63:a6:56:49:4d:f6:91:a2:b5:
                    51:48:0a:eb:c1:83:77:05:71:1c:ad:a1:fd:cb:d7:
                    10:45:c1:10:8e:36:a2:cb:de:50:c7:c6:77:6c:34:
                    61:71:4a:1f:ec:00:24:19:87:bf:ff:d4:66:6c:0b:
                    54:ac:62:92:0c:02:b0:d9:6c:11:66:85:4f:5e:cd:
                    12:d7:43:74:f7:f2:ad:5a:f2:e4:ff:6a:ee:ea:62:
                    2d:69:d6:49:d8:bb:31:e3:54:f6:b1:7a:1f:65:61:
                    77:84:33:ae:e2:92:1d:db:c7:8f:2a:f4:1c:7a:8a:
                    ae:ca:0c:04:d8:14:49:f2:6e:5b:2e:a0:d5:76:84:
                    14:db:98:9f:2f:34:3c:c4:10:e1:5b:ae:a7:5b:41:
                    ce:ad:fc:17:d1:81:81:c2:b8:dc:2a:41:cb:e5:09:
                    0a:d5:ed:73:09:ba:0e:ae:ae:a2:37:f8:ed:d0:00:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:06:76:11:5F:04:92:3E:00:63:BD:26:A1:27:9C:85:ED:65:69:22
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3930303a3a2f34302d3438203d3e20323639373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:da:62:87:35:1c:33:bb:5e:95:8a:6a:fc:55:bb:19:39:1d:
         e8:6b:03:c3:96:4b:be:e4:84:ec:27:03:09:f1:09:8d:30:41:
         2b:27:97:6b:46:67:fa:57:03:7f:dc:85:15:08:45:f5:99:0b:
         a0:bd:98:23:c3:37:25:8f:5e:b4:b5:aa:10:b5:36:e5:b4:e2:
         f5:8c:84:e7:9b:66:1f:39:72:75:ca:1e:85:26:6f:15:1c:36:
         29:be:aa:c7:14:9f:2a:78:96:1e:7d:d0:b4:e3:9e:cd:20:b2:
         a8:34:1e:71:0b:6e:d0:1c:89:2d:bc:cc:3c:82:3f:7b:b3:56:
         f9:d4:40:46:c2:18:eb:c3:41:d2:df:0d:1c:85:cf:57:fd:d1:
         9b:64:a8:ee:3d:86:94:75:3e:b9:23:4c:75:8a:4f:e6:3c:04:
         31:99:a6:55:e8:b9:49:e4:3f:f7:80:fe:25:3e:ba:56:98:35:
         8a:9c:b8:ad:fb:2f:e0:8f:67:48:9e:49:c4:30:df:95:23:66:
         ad:0b:bb:0c:79:d1:a0:8c:e5:65:31:0a:b9:29:3a:a6:d3:d8:
         1d:54:d1:eb:3c:e7:41:78:00:7f:4a:84:13:ec:a7:96:e7:a6:
         68:c9:a8:22:24:16:af:42:e0:0b:60:47:cc:b9:a3:1b:fe:69:
         86:e7:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:06:57 2025 by rpki-client on console.sobornost.net