Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa
File:                     323830333a663732303a3a2f33322d3332203d3e20323636373634.roa (raw, json)
Hash identifier:          eBQZgei+oe6V4dO+H4VvNM6xUzlI5q/HGvYHTjbTArs=
Subject key identifier:   9C:F3:50:E2:42:D9:21:70:71:46:55:61:76:98:B6:1E:79:60:A5:56
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       181631E1F1E1E9E83E3E84A3ABC0E7FA26945CF4
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa
Signing time:             Fri 25 Apr 2025 00:16:01 +0000
ROA not before:           Fri 25 Apr 2025 00:11:01 +0000
ROA not after:            Fri 24 Apr 2026 00:16:01 +0000
asID:                     266764
IP address blocks:        2803:f720::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:16:31:e1:f1:e1:e9:e8:3e:3e:84:a3:ab:c0:e7:fa:26:94:5c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Apr 25 00:11:01 2025 GMT
            Not After : Apr 24 00:16:01 2026 GMT
        Subject: CN=9CF350E242D92170714655617698B61E7960A556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:4c:c1:c7:48:2b:f6:be:bf:22:43:a4:fd:
                    e3:79:92:13:71:4a:55:cc:12:f4:56:53:ca:db:ce:
                    1a:11:c6:5c:0c:a9:b9:92:48:fa:61:69:eb:24:99:
                    6c:96:fd:db:bd:a7:15:b5:eb:53:5d:8a:45:64:77:
                    c0:99:42:4f:7b:fb:1f:ae:ea:61:97:e0:29:9e:59:
                    a0:74:9b:34:ff:81:be:a2:71:d9:6f:ed:06:fa:e9:
                    e8:7a:6f:82:c5:8c:15:96:52:f0:4b:a1:bb:88:14:
                    1c:d5:72:e7:b9:b9:06:fd:c3:36:03:00:ce:08:90:
                    98:48:d2:e1:d9:2a:41:cd:a7:de:f5:95:23:86:2c:
                    ee:51:44:34:05:ce:c4:1e:81:42:a7:e5:e2:9e:e4:
                    f4:85:f9:d4:bc:df:19:0b:8c:17:a5:c9:a8:3c:67:
                    10:1c:52:0b:58:38:f1:78:f7:39:e7:02:bd:aa:44:
                    5e:83:a6:df:35:a5:59:a9:66:4c:f9:07:84:bc:e1:
                    62:e9:a7:8e:22:96:9e:c4:ab:2a:a4:8b:43:e4:6a:
                    0a:80:6f:38:81:b7:19:79:2c:97:81:22:12:4f:7c:
                    87:e1:d9:12:9f:dc:88:e6:15:53:68:63:de:89:87:
                    8b:96:4a:32:7e:8b:e5:ee:7e:fc:4a:f6:e6:f8:6a:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F3:50:E2:42:D9:21:70:71:46:55:61:76:98:B6:1E:79:60:A5:56
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f720::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:21:b2:e3:9a:bb:1d:50:10:e6:85:24:58:c5:40:59:97:
         68:a3:65:e5:15:d4:68:2a:74:be:80:2a:36:27:71:31:fb:a9:
         88:84:fa:13:f7:69:02:7d:6e:81:4a:ad:d4:e1:0a:ac:24:25:
         6b:05:39:ac:67:3b:fa:aa:44:69:0d:dc:44:3b:26:50:0b:2b:
         22:3b:c2:69:19:f4:32:0e:ed:7c:31:b9:ff:dc:25:91:8e:2d:
         2e:79:01:69:79:c6:ea:ac:73:d6:ee:8f:33:ff:2e:0d:2c:2f:
         b6:33:76:3a:e2:2c:5e:13:9d:d4:ef:5b:1b:ec:e3:1d:2e:ba:
         04:cd:73:09:75:bc:78:a4:8e:19:5f:4b:84:ae:f6:6c:3c:bf:
         46:18:c4:4d:dc:7e:d8:e8:c3:63:a5:a5:57:9a:50:d8:5c:55:
         03:5c:bb:8a:97:a5:12:e9:ca:7b:73:9b:7a:71:27:7c:21:cd:
         40:16:bd:17:92:f3:c3:c4:11:c5:80:f2:e0:55:14:51:ba:62:
         70:cc:60:ae:7c:71:da:12:e9:3a:65:0a:81:4d:67:a5:21:26:
         77:a1:36:4b:2a:2a:1b:d4:eb:41:c6:1a:2f:e4:29:68:de:3d:
         6b:7d:4a:8e:f3:de:90:92:2a:b6:d1:8f:c3:6b:c6:98:f3:a5:
         96:51:8d:0f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGBYx4fHh6eg+PoSjq8Dn+iaUXPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2RkE4NzZFQzNGQkI3QjA0MzEwQUJDNEIzMTIzQUZC
RTg4QTIwQzAeFw0yNTA0MjUwMDExMDFaFw0yNjA0MjQwMDE2MDFaMDMxMTAvBgNV
BAMTKDlDRjM1MEUyNDJEOTIxNzA3MTQ2NTU2MTc2OThCNjFFNzk2MEE1NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClTEzBx0gr9r6/IkOk/eN5khNx
SlXMEvRWU8rbzhoRxlwMqbmSSPphaeskmWyW/du9pxW161NdikVkd8CZQk97+x+u
6mGX4CmeWaB0mzT/gb6icdlv7Qb66eh6b4LFjBWWUvBLobuIFBzVcue5uQb9wzYD
AM4IkJhI0uHZKkHNp971lSOGLO5RRDQFzsQegUKn5eKe5PSF+dS83xkLjBelyag8
ZxAcUgtYOPF49znnAr2qRF6Dpt81pVmpZkz5B4S84WLpp44ilp7Eqyqki0PkagqA
bziBtxl5LJeBIhJPfIfh2RKf3IjmFVNoY96Jh4uWSjJ+i+XufvxK9ub4arXjAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUnPNQ4kLZIXBxRlVhdpi2HnlgpVYwHwYDVR0j
BBgwFoAUym+oduw/u3sEMQq8SzEjr76IogwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0ZGMjc3NjlBNDM5NjA1REEyN0Q3Mjk1QjJBODY1MDRC
NUI2RjZBQjRBQjhDNERENDQwNTJERTA3ODAxMzcxLzAvQ0E2RkE4NzZFQzNGQkI3
QjA0MzEwQUJDNEIzMTIzQUZCRTg4QTIwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTZGQTg3NkVDM0ZCQjdCMDQz
MTBBQkM0QjMxMjNBRkJFODhBMjBDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENGRjI3NzY5QTQzOTYwNURBMjdENzI5NUIyQTg2NTA0QjVCNkY2QUI0
QUI4QzRERDQ0MDUyREUwNzgwMTM3MS8wLzMyMzgzMDMzM2E2NjM3MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM3MzYzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD9yAw
DQYJKoZIhvcNAQELBQADggEBADPSIbLjmrsdUBDmhSRYxUBZl2ijZeUV1GgqdL6A
KjYncTH7qYiE+hP3aQJ9boFKrdThCqwkJWsFOaxnO/qqRGkN3EQ7JlALKyI7wmkZ
9DIO7Xwxuf/cJZGOLS55AWl5xuqsc9bujzP/Lg0sL7YzdjriLF4TndTvWxvs4x0u
ugTNcwl1vHikjhlfS4Su9mw8v0YYxE3cftjow2OlpVeaUNhcVQNcu4qXpRLpyntz
m3pxJ3whzUAWvReS88PEEcWA8uBVFFG6YnDMYK58cdoS6TplCoFNZ6UhJnehNksq
KhvU60HGGi/kKWjePWt9So7z3pCSKrbRj8NrxpjzpZZRjQ8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:21 2025 by rpki-client on console.sobornost.net