Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3332203d3e20323731393137.roa
File:                     323830333a636131303a3a2f33322d3332203d3e20323731393137.roa (raw, json)
Hash identifier:          9T8ZB+Fg+s/1q1b2RThcAXfrwFnAqplDBGPcLiHShCk=
Subject key identifier:   4A:8F:18:1B:AC:24:CA:DA:EC:1D:53:85:80:7D:6E:BB:37:3C:1D:5B
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       12183FB1AF7C03AA727ED27F90D0DFE4CF1CC1E2
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3332203d3e20323731393137.roa
Signing time:             Fri 25 Apr 2025 16:16:06 +0000
ROA not before:           Fri 25 Apr 2025 16:11:06 +0000
ROA not after:            Fri 24 Apr 2026 16:16:06 +0000
asID:                     271917
IP address blocks:        2803:ca10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:18:3f:b1:af:7c:03:aa:72:7e:d2:7f:90:d0:df:e4:cf:1c:c1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: Apr 25 16:11:06 2025 GMT
            Not After : Apr 24 16:16:06 2026 GMT
        Subject: CN=4A8F181BAC24CADAEC1D5385807D6EBB373C1D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:9d:c1:0b:19:42:41:ef:5d:d0:8c:a7:59:
                    9e:2c:a7:d5:17:57:db:42:4f:de:9c:b0:bc:62:25:
                    5d:6e:da:b9:93:ec:bc:4d:ee:13:85:62:2a:74:d1:
                    14:c1:1c:25:be:87:73:63:cb:09:3d:bb:21:38:0b:
                    82:cd:d3:09:35:81:23:ff:eb:76:15:8c:c2:b9:ea:
                    b3:b3:b7:a5:3d:6c:a9:28:f8:1d:76:c6:47:35:85:
                    6c:f9:ed:11:2e:be:3b:17:4b:f0:e5:db:82:5b:a0:
                    5c:c4:fe:a8:5b:e8:b6:6e:58:a0:eb:bb:9f:bf:f1:
                    7e:2a:d1:aa:80:83:52:99:99:9e:a0:79:c1:65:74:
                    0f:23:14:f6:4a:b5:24:82:18:56:b2:27:6f:f8:86:
                    80:b9:5e:7a:cb:01:42:23:3c:ec:1e:28:9a:93:38:
                    8e:20:29:19:13:54:a2:70:79:19:7f:20:b3:76:54:
                    5d:e2:35:b9:e9:4d:6b:3e:ad:2a:27:e5:88:ea:99:
                    c5:63:41:39:00:80:4a:c6:a9:f2:33:d8:a7:ac:ad:
                    93:14:41:4e:0c:cb:68:0f:8f:7f:9e:69:65:0f:e1:
                    c8:3b:3f:ef:7c:53:79:6e:ac:e1:c1:6f:73:05:e5:
                    ee:c6:56:4f:43:20:e4:58:d7:21:35:d7:4e:45:37:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:18:1B:AC:24:CA:DA:EC:1D:53:85:80:7D:6E:BB:37:3C:1D:5B
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3332203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:13:00:45:66:2f:a9:37:e5:3a:ce:06:8f:8c:33:e1:77:
         89:a5:2a:74:ed:9f:e5:d9:96:47:6d:f0:f3:a4:4c:0c:72:38:
         38:bc:49:7c:49:60:c6:c3:47:15:89:bb:97:5f:f5:f0:68:61:
         10:45:35:d4:4b:5b:cf:e7:4e:a9:fd:fd:c9:37:de:bb:92:a7:
         94:e4:73:db:bb:dc:45:07:55:e9:1c:ca:a8:08:d3:a9:82:e0:
         db:f2:56:78:64:d3:dc:8b:81:24:1f:c6:99:14:16:50:73:79:
         fc:5d:b6:32:5b:f0:9e:1d:b3:67:ce:1b:e1:38:80:bd:f7:2a:
         2d:8d:f3:b1:89:95:2c:df:cc:86:26:2f:9c:36:75:a7:c9:44:
         09:2e:07:42:97:2e:5c:15:9c:fe:a9:02:3d:24:3c:96:bd:fb:
         63:74:90:7a:3d:45:0a:1d:01:1d:e1:38:d4:fc:e6:36:72:41:
         e0:00:86:f0:9c:dd:05:dc:28:08:5b:48:8c:f7:84:3a:25:6d:
         5b:d3:1d:09:36:17:a7:48:41:3b:93:25:a7:31:48:7d:5e:ff:
         4c:d6:dc:b9:93:48:71:f7:c5:ca:fb:4e:2e:61:01:e3:8c:b9:
         75:f3:b6:36:b7:7a:01:68:43:83:89:22:9c:41:ce:ea:f7:c4:
         70:3b:a9:aa
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUEhg/sa98A6pyftJ/kNDf5M8cweIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MDgyMDQwM0U5NEM2MjJBOTkxREJFQjg3N0VCNzE5
NzE5ODQzMDAeFw0yNTA0MjUxNjExMDZaFw0yNjA0MjQxNjE2MDZaMDMxMTAvBgNV
BAMTKDRBOEYxODFCQUMyNENBREFFQzFENTM4NTgwN0Q2RUJCMzczQzFENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmp3BCxlCQe9d0IynWZ4sp9UX
V9tCT96csLxiJV1u2rmT7LxN7hOFYip00RTBHCW+h3Njywk9uyE4C4LN0wk1gSP/
63YVjMK56rOzt6U9bKko+B12xkc1hWz57REuvjsXS/Dl24JboFzE/qhb6LZuWKDr
u5+/8X4q0aqAg1KZmZ6gecFldA8jFPZKtSSCGFayJ2/4hoC5XnrLAUIjPOweKJqT
OI4gKRkTVKJweRl/ILN2VF3iNbnpTWs+rSon5YjqmcVjQTkAgErGqfIz2KesrZMU
QU4My2gPj3+eaWUP4cg7P+98U3lurOHBb3MF5e7GVk9DIORY1yE1105FN1uLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUSo8YG6wkytrsHVOFgH1uuzc8HVswHwYDVR0j
BBgwFoAUGpCCBAPpTGIqmR2+uHfrcZcZhDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQURFMDk1QTFFMjg1QUFCRThDMTkxNjI1QjgzQzBEQTA4
QjUxNEEzQkI3QjZFOURCNjVENEVGQjNCQkVGRTk2LzAvMUE5MDgyMDQwM0U5NEM2
MjJBOTkxREJFQjg3N0VCNzE5NzE5ODQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQTkwODIwNDAzRTk0QzYyMkE5
OTFEQkVCODc3RUI3MTk3MTk4NDMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFERTA5NUExRTI4NUFBQkU4QzE5MTYyNUI4M0MwREEwOEI1MTRBM0JC
N0I2RTlEQjY1RDRFRkIzQkJFRkU5Ni8wLzMyMzgzMDMzM2E2MzYxMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM5MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDyhAw
DQYJKoZIhvcNAQELBQADggEBAHwhEwBFZi+pN+U6zgaPjDPhd4mlKnTtn+XZlkdt
8POkTAxyODi8SXxJYMbDRxWJu5df9fBoYRBFNdRLW8/nTqn9/ck33ruSp5Tkc9u7
3EUHVekcyqgI06mC4NvyVnhk09yLgSQfxpkUFlBzefxdtjJb8J4ds2fOG+E4gL33
Ki2N87GJlSzfzIYmL5w2dafJRAkuB0KXLlwVnP6pAj0kPJa9+2N0kHo9RQodAR3h
ONT85jZyQeAAhvCc3QXcKAhbSIz3hDolbVvTHQk2F6dIQTuTJacxSH1e/0zW3LmT
SHH3xcr7Ti5hAeOMuXXztja3egFoQ4OJIpxBzur3xHA7qao=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net