Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/323830333a346164303a3a2f33322d3438203d3e20323734303738.roa
File:                     323830333a346164303a3a2f33322d3438203d3e20323734303738.roa (raw, json)
Hash identifier:          2sl1+ibfc4GXurOigcyMPK812lQ2L0EUkx2IJLzzUdo=
Subject key identifier:   48:10:87:2D:2D:64:99:AA:15:B1:BA:24:44:D4:75:DA:BA:14:84:4E
Certificate issuer:       /CN=1E9130D019A915F19ADB27283B971267AFC5BC20
Certificate serial:       0B98ABD0FA904463155EC01E7D2C5A7553CC4A5E
Authority key identifier: 1E:91:30:D0:19:A9:15:F1:9A:DB:27:28:3B:97:12:67:AF:C5:BC:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9130D019A915F19ADB27283B971267AFC5BC20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/323830333a346164303a3a2f33322d3438203d3e20323734303738.roa
Signing time:             Fri 28 Mar 2025 10:55:00 +0000
ROA not before:           Fri 28 Mar 2025 10:50:00 +0000
ROA not after:            Fri 27 Mar 2026 10:55:00 +0000
asID:                     274078
IP address blocks:        2803:4ad0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/1E9130D019A915F19ADB27283B971267AFC5BC20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/1E9130D019A915F19ADB27283B971267AFC5BC20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9130D019A915F19ADB27283B971267AFC5BC20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:98:ab:d0:fa:90:44:63:15:5e:c0:1e:7d:2c:5a:75:53:cc:4a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9130D019A915F19ADB27283B971267AFC5BC20
        Validity
            Not Before: Mar 28 10:50:00 2025 GMT
            Not After : Mar 27 10:55:00 2026 GMT
        Subject: CN=4810872D2D6499AA15B1BA2444D475DABA14844E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:64:4e:70:6a:ed:ea:a2:1f:81:31:76:29:
                    92:67:05:3b:bc:c5:22:d0:51:e4:01:dd:64:2a:6e:
                    91:0a:19:05:3c:7a:f9:e9:76:06:b9:f9:8d:25:bb:
                    a8:80:93:55:0b:dd:96:22:93:70:b7:e7:93:43:96:
                    39:01:d1:71:64:83:ad:fb:4b:73:70:39:04:b8:92:
                    bd:6b:c0:37:8f:95:8d:8b:2a:9f:ae:d0:33:ec:cb:
                    1a:f8:92:fa:3e:02:0c:46:f5:e6:c1:b9:30:94:01:
                    0f:44:61:9b:dc:f3:42:7f:89:57:a9:56:7b:5e:a6:
                    60:30:d1:7d:a0:eb:72:75:a7:13:24:43:25:32:91:
                    9a:7b:e4:89:96:25:2d:40:46:61:9c:d0:de:2f:3c:
                    9c:50:1c:fc:72:7c:b5:a4:38:91:2d:34:ea:ff:7b:
                    31:f5:f8:1f:5c:92:e5:45:03:a3:b0:0c:dc:a8:f9:
                    f5:91:e9:3f:8a:4c:92:e1:d8:04:3b:81:77:5b:bd:
                    16:82:28:2d:40:d6:79:0c:b3:82:55:46:44:1c:7b:
                    ee:f7:3b:16:49:7d:2c:be:84:09:51:77:d4:60:4a:
                    3c:e7:c7:c8:ff:c7:24:48:d6:90:c1:5b:7c:fc:f4:
                    b8:d4:b4:e3:07:0f:c0:cc:a1:93:50:f9:97:49:6e:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:10:87:2D:2D:64:99:AA:15:B1:BA:24:44:D4:75:DA:BA:14:84:4E
            X509v3 Authority Key Identifier:
                keyid:1E:91:30:D0:19:A9:15:F1:9A:DB:27:28:3B:97:12:67:AF:C5:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/1E9130D019A915F19ADB27283B971267AFC5BC20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9130D019A915F19ADB27283B971267AFC5BC20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/323830333a346164303a3a2f33322d3438203d3e20323734303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:8b:3c:2d:00:aa:90:10:38:b0:b4:70:1f:74:e2:cf:42:52:
         2e:89:c0:27:a6:1c:80:f1:ea:c0:2a:53:7d:9a:a5:95:4d:2f:
         3d:3c:c2:02:70:39:e9:10:2e:89:57:65:2b:7e:d1:b6:5b:7f:
         74:0a:97:c0:b9:8b:46:c2:62:0b:93:38:e5:6c:d3:90:2e:3c:
         ee:a1:58:f5:cb:2e:34:90:21:c7:c2:ef:30:77:c1:88:bd:2d:
         ec:1c:af:fc:07:2a:92:66:77:37:28:ea:0d:39:b4:70:a0:af:
         ba:10:98:23:79:12:20:b7:d7:74:79:51:79:29:65:4c:4f:ce:
         3d:81:d7:59:a4:92:0d:6a:b5:41:b2:21:f9:04:86:89:d3:4b:
         85:dc:42:83:58:84:ce:b3:96:0e:62:0a:6b:7c:79:bd:cd:b4:
         79:ff:d2:de:d8:b3:2e:96:68:47:70:7f:df:d3:71:ce:f2:75:
         eb:49:fe:b1:77:84:44:9c:90:10:c4:61:74:6d:cd:88:d5:9a:
         0b:75:32:8b:cc:dd:27:cc:86:d7:b3:27:21:27:1b:ba:83:f6:
         ab:9d:82:72:0f:3f:9e:55:15:da:20:8a:ce:6a:f4:82:b3:1f:
         fe:c8:f2:af:84:28:97:a8:4c:31:20:b8:40:fc:69:18:49:f1:
         c9:1b:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:20 2025 by rpki-client on console.sobornost.net