Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/323830333a616361303a3a2f33322d3332203d3e20323636383037.roa
File:                     323830333a616361303a3a2f33322d3332203d3e20323636383037.roa (raw, json)
Hash identifier:          sj4tdcF6or3lFFiogvAJ1Uus53DW2FlMb8o4S1LE0xs=
Subject key identifier:   0E:C2:B6:DA:D2:1A:0D:DE:27:80:7B:21:09:3A:3F:66:E5:0C:D8:99
Certificate issuer:       /CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
Certificate serial:       63B6571D4EF61CB9F1F8DE082582862ED62C2711
Authority key identifier: 00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/323830333a616361303a3a2f33322d3332203d3e20323636383037.roa
Signing time:             Tue 01 Apr 2025 13:13:33 +0000
ROA not before:           Tue 01 Apr 2025 13:08:33 +0000
ROA not after:            Tue 31 Mar 2026 13:13:33 +0000
asID:                     266807
IP address blocks:        2803:aca0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b6:57:1d:4e:f6:1c:b9:f1:f8:de:08:25:82:86:2e:d6:2c:27:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
        Validity
            Not Before: Apr  1 13:08:33 2025 GMT
            Not After : Mar 31 13:13:33 2026 GMT
        Subject: CN=0EC2B6DAD21A0DDE27807B21093A3F66E50CD899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:f2:66:ff:87:92:37:1c:3a:3f:0c:9c:10:
                    20:a4:a3:d8:06:44:a9:43:5d:00:96:7b:d3:03:6a:
                    00:36:7f:93:86:43:2e:55:44:45:57:5a:da:37:a5:
                    5b:b2:df:a9:7f:a1:54:ea:1b:bb:bb:7a:fa:32:71:
                    fa:f4:b0:4d:6c:62:d0:9e:85:21:e9:33:25:10:e5:
                    39:8d:70:b3:da:a3:58:3b:48:82:96:b3:e8:d8:19:
                    27:76:fe:2e:18:aa:01:54:b2:c4:39:cf:db:72:9c:
                    d7:f3:e1:ab:76:ed:9c:9b:a4:56:cb:eb:e5:cd:2e:
                    e1:0d:e1:5b:79:64:f6:bb:1a:42:0b:67:c6:13:15:
                    80:95:f0:47:a6:07:16:c9:e2:b8:b7:ba:b7:24:d8:
                    a6:02:43:e0:a2:52:eb:ba:b7:17:f8:83:25:13:a6:
                    f7:62:00:99:68:6f:d6:42:0d:ef:5c:c5:fc:4c:a4:
                    51:ac:c3:56:f0:46:05:c3:11:ce:cd:ae:ad:97:a3:
                    9e:89:20:f5:24:79:81:dc:49:20:66:a7:70:0e:69:
                    e9:86:34:2c:d2:8f:13:ae:8d:57:36:c3:be:c8:65:
                    15:b7:13:23:72:e7:e1:31:cd:36:8a:1e:a4:7d:4f:
                    08:33:2e:55:b8:27:b7:a6:b0:1e:7e:2a:9d:24:82:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C2:B6:DA:D2:1A:0D:DE:27:80:7B:21:09:3A:3F:66:E5:0C:D8:99
            X509v3 Authority Key Identifier:
                keyid:00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/323830333a616361303a3a2f33322d3332203d3e20323636383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:1d:53:a0:91:61:94:b7:47:2c:27:76:3c:88:97:0d:1b:
         1b:bc:44:fa:9e:b1:8f:46:30:37:5a:68:ad:fd:82:3a:5e:7b:
         59:79:4e:14:38:11:ce:7f:7c:72:64:36:f4:06:7e:44:ad:f6:
         6b:d6:f7:37:32:a2:90:56:8e:32:75:59:3f:86:7e:a9:af:42:
         ff:e3:e9:1b:2c:fe:45:ed:ae:69:3a:e3:05:9f:99:40:13:9e:
         56:9b:ed:3c:9d:2d:5e:97:21:c8:48:10:62:ab:51:e0:5e:fe:
         9a:b2:58:a2:fa:21:12:5c:b1:a8:61:73:38:da:8e:0b:d3:d2:
         fd:36:19:e1:df:ed:68:33:32:26:d6:93:d4:63:b7:70:63:48:
         27:af:ac:b0:63:41:26:46:15:3f:b7:73:c8:a9:c9:f3:07:12:
         34:8a:b0:4a:e2:f4:87:be:24:b1:ba:65:2f:ac:dc:9f:2c:76:
         8c:39:b2:03:e6:a3:df:6d:7a:53:f6:2d:72:b1:98:e7:d5:ac:
         74:e6:85:07:9f:12:67:3a:c1:e9:c1:fd:1d:89:8c:c5:0b:5b:
         7a:d4:b5:3f:13:cf:10:e4:7a:7e:39:f7:ba:3a:11:d1:4d:2f:
         54:f5:f3:74:3c:c5:60:f1:c4:76:c4:ee:6d:fe:31:55:a6:87:
         df:35:4f:f5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUY7ZXHU72HLnx+N4IJYKGLtYsJxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBENjZCQzk1ODlCOTA2QjZBNTJBMzFENzE4N0ZFNjY4
NjExOERGQTAeFw0yNTA0MDExMzA4MzNaFw0yNjAzMzExMzEzMzNaMDMxMTAvBgNV
BAMTKDBFQzJCNkRBRDIxQTBEREUyNzgwN0IyMTA5M0EzRjY2RTUwQ0Q4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeUPJm/4eSNxw6PwycECCko9gG
RKlDXQCWe9MDagA2f5OGQy5VREVXWto3pVuy36l/oVTqG7u7evoycfr0sE1sYtCe
hSHpMyUQ5TmNcLPao1g7SIKWs+jYGSd2/i4YqgFUssQ5z9tynNfz4at27ZybpFbL
6+XNLuEN4Vt5ZPa7GkILZ8YTFYCV8EemBxbJ4ri3urck2KYCQ+CiUuu6txf4gyUT
pvdiAJlob9ZCDe9cxfxMpFGsw1bwRgXDEc7Nrq2Xo56JIPUkeYHcSSBmp3AOaemG
NCzSjxOujVc2w77IZRW3EyNy5+ExzTaKHqR9TwgzLlW4J7emsB5+Kp0kguzPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUDsK22tIaDd4ngHshCTo/ZuUM2JkwHwYDVR0j
BBgwFoAUANZryVibkGtqUqMdcYf+ZoYRjfowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNDdDMTJFOENGQjEzMzIyODE2OUQ2RjBBNDg0RURBMEQ4
MTk2NzBCRTdFQjI0QjgwQTMzNDc3M0E0NjdDRTRELzAvMDBENjZCQzk1ODlCOTA2
QjZBNTJBMzFENzE4N0ZFNjY4NjExOERGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEQ2NkJDOTU4OUI5MDZCNkE1
MkEzMUQ3MTg3RkU2Njg2MTE4REZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTQ3QzEyRThDRkIxMzMyMjgxNjlENkYwQTQ4NEVEQTBEODE5NjcwQkU3
RUIyNEI4MEEzMzQ3NzNBNDY3Q0U0RC8wLzMyMzgzMDMzM2E2MTYzNjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM4MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDrKAw
DQYJKoZIhvcNAQELBQADggEBADKgHVOgkWGUt0csJ3Y8iJcNGxu8RPqesY9GMDda
aK39gjpee1l5ThQ4Ec5/fHJkNvQGfkSt9mvW9zcyopBWjjJ1WT+GfqmvQv/j6Rss
/kXtrmk64wWfmUATnlab7TydLV6XIchIEGKrUeBe/pqyWKL6IRJcsahhczjajgvT
0v02GeHf7WgzMibWk9Rjt3BjSCevrLBjQSZGFT+3c8ipyfMHEjSKsEri9Ie+JLG6
ZS+s3J8sdow5sgPmo99telP2LXKxmOfVrHTmhQefEmc6wenB/R2JjMULW3rUtT8T
zxDken4597o6EdFNL1T183Q8xWDxxHbE7m3+MVWmh981T/U=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:21 2025 by rpki-client on console.sobornost.net