Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/323830333a353234303a3a2f33322d3438203d3e20323633383039.roa
File:                     323830333a353234303a3a2f33322d3438203d3e20323633383039.roa (raw, json)
Hash identifier:          iN2G0KfjphALZWiPbhnV7MbnqGOYSvmiwgW3jPpmug8=
Subject key identifier:   C5:39:15:1D:8D:D2:01:00:71:C5:D6:7D:DC:D1:2C:4E:B7:4F:34:B0
Certificate issuer:       /CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4
Certificate serial:       624EA32B38337247E68A98A720CC43CE4C5903E1
Authority key identifier: D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/323830333a353234303a3a2f33322d3438203d3e20323633383039.roa
Signing time:             Tue 04 Feb 2025 18:47:12 +0000
ROA not before:           Tue 04 Feb 2025 18:42:12 +0000
ROA not after:            Tue 03 Feb 2026 18:47:12 +0000
asID:                     263809
IP address blocks:        2803:5240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4e:a3:2b:38:33:72:47:e6:8a:98:a7:20:cc:43:ce:4c:59:03:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4
        Validity
            Not Before: Feb  4 18:42:12 2025 GMT
            Not After : Feb  3 18:47:12 2026 GMT
        Subject: CN=C539151D8DD2010071C5D67DDCD12C4EB74F34B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:85:76:05:d1:50:85:1b:06:06:2e:2f:39:
                    91:c6:ad:cd:51:91:9d:2e:40:04:d8:c0:77:0b:92:
                    5a:e7:ad:64:6e:3e:d6:97:7f:02:2c:28:a3:32:e4:
                    1a:cf:40:60:d4:16:3a:65:44:45:15:89:80:10:13:
                    f4:e0:ad:bf:e6:b9:66:eb:a2:e8:6f:71:de:45:31:
                    4b:e3:3a:3f:ba:bd:a8:92:36:8b:cd:e5:74:25:f1:
                    91:8c:cf:72:61:de:93:8d:90:b8:12:3d:46:fe:15:
                    3c:02:83:19:8d:f3:78:ee:bb:50:bb:c9:a1:80:83:
                    b4:b0:85:f8:cf:7b:0b:25:78:8e:8a:5e:35:c4:ae:
                    5b:2b:fe:0d:d8:f8:ee:2f:bf:fd:10:e4:6f:18:32:
                    76:cd:64:71:b0:f1:db:88:4a:7c:93:b9:61:86:f0:
                    37:ec:ab:9b:8f:f5:0c:02:a9:9a:fa:88:f2:4b:80:
                    60:56:98:22:23:fb:7c:5e:ea:95:1c:49:e1:91:99:
                    44:75:01:38:96:c5:0e:ca:c8:33:dc:8f:cc:48:97:
                    86:f7:7f:8e:8b:9f:50:91:e4:4f:9b:a0:10:c8:1f:
                    32:9c:13:13:3b:3b:cb:c8:f9:f0:38:6b:39:67:54:
                    a9:b5:18:10:57:43:b9:4b:8c:44:ab:4e:31:4f:93:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:39:15:1D:8D:D2:01:00:71:C5:D6:7D:DC:D1:2C:4E:B7:4F:34:B0
            X509v3 Authority Key Identifier:
                keyid:D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/323830333a353234303a3a2f33322d3438203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5240::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:a7:89:c7:c1:07:0e:a8:1c:76:59:d6:09:5b:05:1a:38:7e:
         c6:5a:5f:ef:ce:ac:ad:83:12:45:19:da:92:b6:b8:64:06:f8:
         5d:6c:a0:af:28:f5:46:42:3a:b8:71:43:14:23:e9:fc:07:43:
         3f:eb:04:c0:a9:bc:75:40:b4:e2:40:d0:5f:d3:c5:58:b1:c9:
         b9:25:9a:a1:77:97:b1:5a:7e:50:07:37:af:81:08:2c:7c:73:
         52:b7:c3:75:f0:3e:b2:ac:fc:7c:56:98:20:ea:e3:09:4c:08:
         9d:ac:14:bc:89:9b:c9:83:7d:54:8e:5c:58:9c:63:0f:41:4e:
         c1:9e:69:4c:57:1e:5a:05:27:6e:f5:db:40:c8:f1:5f:b9:4d:
         9d:f7:68:47:18:ea:e4:6e:50:21:ed:23:56:8f:ef:d6:36:1a:
         cf:9b:53:1d:52:35:f1:75:22:5d:86:59:8e:06:16:b9:54:03:
         4d:e0:06:fd:ed:b3:b6:22:5e:33:d8:2b:bf:eb:d9:0e:2a:45:
         41:b1:39:60:1d:63:9a:f5:53:20:ee:29:47:6f:29:c2:a5:84:
         7b:68:b3:0d:06:d3:e9:de:8f:79:b4:7a:4d:18:e2:73:8d:fd:
         bb:76:6c:12:d1:6b:47:8e:35:2a:2c:5f:12:d8:f2:b9:4f:5b:
         4e:49:36:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:51 2025 by rpki-client on console.sobornost.net