Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/323830333a353663303a3a2f33322d3332203d3e20323635363536.roa
File:                     323830333a353663303a3a2f33322d3332203d3e20323635363536.roa (raw, json)
Hash identifier:          to1tLtw3k3VRAVckh40FOGejT7b8VLnirunioxeNjGc=
Subject key identifier:   55:9B:DA:06:57:57:F2:7D:55:FF:D5:5D:F0:47:5E:A3:8F:3A:8E:77
Certificate issuer:       /CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
Certificate serial:       1987C06573B5561D8EDE83602272166A5E385D5E
Authority key identifier: 07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/323830333a353663303a3a2f33322d3332203d3e20323635363536.roa
Signing time:             Tue 04 Feb 2025 18:19:24 +0000
ROA not before:           Tue 04 Feb 2025 18:14:24 +0000
ROA not after:            Tue 03 Feb 2026 18:19:24 +0000
asID:                     265656
IP address blocks:        2803:56c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:87:c0:65:73:b5:56:1d:8e:de:83:60:22:72:16:6a:5e:38:5d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
        Validity
            Not Before: Feb  4 18:14:24 2025 GMT
            Not After : Feb  3 18:19:24 2026 GMT
        Subject: CN=559BDA065757F27D55FFD55DF0475EA38F3A8E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:33:61:5b:82:44:79:b9:08:44:b3:08:a5:80:
                    de:0d:99:af:11:99:bf:6d:89:e4:04:72:d5:19:8e:
                    9b:87:fd:38:ea:ae:35:28:14:80:41:65:a8:08:70:
                    95:45:39:1e:8a:6b:04:30:f0:ee:54:48:ca:b1:f8:
                    bc:8a:83:17:65:bb:42:85:e7:33:ae:d2:61:50:a6:
                    68:7f:fe:e0:66:a3:a6:75:63:63:1e:64:24:68:ef:
                    4d:de:92:d5:a2:78:44:20:e5:44:3e:4d:8d:af:2f:
                    b1:20:a7:be:3a:b5:e2:55:6c:b4:f4:7f:a8:03:86:
                    14:0e:a4:24:45:8d:f8:b7:5f:a8:23:8a:e0:14:cc:
                    e1:0b:37:7d:57:e1:8a:c7:bf:c9:40:ee:6b:d6:92:
                    d0:ff:11:63:07:f6:c1:7e:1b:f5:6c:8a:00:8e:80:
                    c4:f7:bc:95:bf:47:d5:07:54:08:d2:12:d4:bf:1c:
                    c4:5a:a1:89:0d:b8:ce:e6:21:a8:3e:85:3c:eb:8f:
                    89:c9:bf:24:ea:09:d1:ba:d0:7d:0a:b3:78:55:47:
                    1d:dd:67:dc:bf:d4:66:64:13:e4:79:d3:98:ec:3d:
                    31:25:c3:d0:87:ff:f1:9f:6b:0c:a0:b1:e3:46:fc:
                    7d:ab:e8:dd:0a:13:7b:04:88:51:fc:96:70:2b:2b:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9B:DA:06:57:57:F2:7D:55:FF:D5:5D:F0:47:5E:A3:8F:3A:8E:77
            X509v3 Authority Key Identifier:
                keyid:07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/323830333a353663303a3a2f33322d3332203d3e20323635363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:d3:e3:5c:35:5d:4a:df:58:c1:e8:e0:c5:77:8a:61:1a:
         14:a3:04:c2:4a:23:f5:f1:d4:e1:8b:c4:c8:1b:9f:66:f8:7a:
         ba:9f:c6:36:a5:3c:9b:29:a5:4d:24:05:70:2d:18:14:65:d8:
         65:26:28:4c:e7:65:83:99:c6:dc:36:26:1d:1a:60:11:2c:0a:
         9f:f5:78:3c:58:13:22:db:55:02:1e:f1:ac:98:4e:53:84:65:
         6a:98:14:05:e2:b8:12:66:75:99:61:87:b7:af:9e:39:53:eb:
         4d:a4:f0:c7:06:12:91:54:14:49:06:17:93:cb:48:74:4a:5f:
         c8:a3:ba:ff:66:e1:f4:f9:36:c2:07:e3:01:59:ef:2c:56:39:
         b3:ce:2f:fb:1a:11:b9:05:1a:64:0e:e1:d7:a5:cf:db:a4:af:
         4b:4f:33:20:1c:d9:61:9e:50:dd:5d:f1:ea:78:74:f9:9f:fa:
         47:2f:d3:9a:e7:32:ed:57:a8:b6:58:43:a3:23:6f:49:0d:8c:
         7b:c5:c4:da:c2:0d:30:8a:38:56:ba:97:33:90:8c:ed:40:5a:
         29:ac:9b:d9:a7:52:32:e2:5e:46:06:94:a8:83:0b:8f:79:46:
         da:55:4d:05:4b:c9:05:7a:e7:0e:92:7d:0e:c5:3d:4b:4a:ef:
         0b:19:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net