Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/323830333a656239303a3a2f33322d3431203d3e20323733303433.roa
File:                     323830333a656239303a3a2f33322d3431203d3e20323733303433.roa (raw, json)
Hash identifier:          IisBTuWF0kf2d0C3rTMf+f4uD9afUqx8hgZWJVetZug=
Subject key identifier:   A2:38:DB:91:A7:3A:94:0A:6F:3C:95:16:D6:DF:02:81:B6:BB:01:F3
Certificate issuer:       /CN=EA87016EC1BFCAE28788DCAC64E1F45D87C274C9
Certificate serial:       7E3DE66AB36154313816D410255395F84931A5B9
Authority key identifier: EA:87:01:6E:C1:BF:CA:E2:87:88:DC:AC:64:E1:F4:5D:87:C2:74:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/323830333a656239303a3a2f33322d3431203d3e20323733303433.roa
Signing time:             Sat 26 Apr 2025 22:16:12 +0000
ROA not before:           Sat 26 Apr 2025 22:11:12 +0000
ROA not after:            Sat 25 Apr 2026 22:16:12 +0000
asID:                     273043
IP address blocks:        2803:eb90::/32 maxlen: 41

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3d:e6:6a:b3:61:54:31:38:16:d4:10:25:53:95:f8:49:31:a5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA87016EC1BFCAE28788DCAC64E1F45D87C274C9
        Validity
            Not Before: Apr 26 22:11:12 2025 GMT
            Not After : Apr 25 22:16:12 2026 GMT
        Subject: CN=A238DB91A73A940A6F3C9516D6DF0281B6BB01F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:b4:69:84:e5:ef:9d:80:44:34:94:93:e7:
                    58:b5:4c:b8:29:d5:6a:fe:f0:a5:aa:3d:16:78:8a:
                    6d:f9:1a:17:04:29:85:d9:12:5d:b5:2c:8c:c2:5c:
                    dd:e1:bf:d7:65:20:bd:c6:32:b9:77:f6:50:ab:f9:
                    33:7e:a7:a8:d0:b2:ea:2d:49:15:98:71:d8:28:d3:
                    cc:90:42:6a:84:c9:c5:51:ce:95:a6:5a:e8:85:39:
                    6e:e8:62:71:fd:32:8f:e4:90:43:15:88:a8:0a:75:
                    da:4a:b6:e3:76:9d:c1:fd:69:da:5d:a3:67:b1:61:
                    f2:2a:3f:7e:ca:44:80:cb:95:e9:ad:f1:f1:c2:e1:
                    25:8c:1c:fb:50:5e:fc:b8:28:b3:c0:a7:dc:30:8c:
                    93:d0:44:95:8f:0d:6b:d5:a7:ab:57:3e:a1:58:f2:
                    0e:ce:f9:36:9e:88:3b:36:9f:1e:ab:a3:6a:88:85:
                    fb:51:d3:7c:9f:47:6a:a6:4e:42:e6:5d:ee:2c:d6:
                    76:07:20:75:8e:9e:88:8e:90:74:64:55:11:ef:51:
                    a8:dd:6e:c1:8c:0c:bc:f4:d4:21:0d:55:95:28:fb:
                    49:3b:5a:e4:d6:4b:29:73:58:53:d5:30:08:90:3e:
                    82:f4:95:58:cc:9f:7d:62:d2:63:0c:b4:69:90:c6:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:38:DB:91:A7:3A:94:0A:6F:3C:95:16:D6:DF:02:81:B6:BB:01:F3
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:6E:C1:BF:CA:E2:87:88:DC:AC:64:E1:F4:5D:87:C2:74:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/323830333a656239303a3a2f33322d3431203d3e20323733303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb90::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:2e:e9:7c:fc:d1:4d:bd:c5:32:5a:a2:20:05:20:ff:5a:64:
         ec:55:57:71:3d:85:0f:96:54:bc:1b:f7:28:c5:56:22:91:39:
         c8:c0:d7:d9:51:0d:66:fc:c7:e6:7c:8a:2a:73:d4:a4:d1:8b:
         c7:db:2e:bd:ce:fd:be:a2:a8:53:63:88:4a:15:77:6d:38:3e:
         29:0f:c4:02:a3:91:11:cb:2b:5e:2d:78:cc:a6:8c:1f:a9:0e:
         ea:b4:97:ab:09:4e:63:1f:8a:d3:1a:ff:e9:b5:66:b8:80:02:
         7a:90:f9:7c:6b:ca:6d:53:51:53:09:81:97:b5:1c:14:33:a2:
         94:bf:81:4a:d6:33:7b:dc:59:64:50:2a:2e:11:e6:e8:e4:d1:
         bd:01:71:81:15:eb:23:82:cd:21:06:80:80:f3:4f:a9:1e:6b:
         f5:76:08:4d:b2:ed:89:cf:6f:f7:4c:e7:01:5d:82:cd:ed:2d:
         11:02:0e:a3:d0:c9:04:b9:41:6e:45:d4:d1:92:f1:ec:85:34:
         fc:bb:fb:8c:7d:3b:18:ac:3b:6e:a5:12:0a:16:9a:c3:e6:a0:
         0c:1f:3a:30:02:47:be:ea:6f:33:6a:e2:c8:16:0e:11:1e:ac:
         36:5a:bd:3f:a9:48:9d:71:f5:57:ca:21:65:7e:99:ac:53:91:
         3d:1f:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:30 2025 by rpki-client on console.sobornost.net