Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/323830333a643339303a3a2f33322d3438203d3e20323733303233.roa
File:                     323830333a643339303a3a2f33322d3438203d3e20323733303233.roa (raw, json)
Hash identifier:          GOiAco7nYsbKozWUbkWhFUz2tHLTecuAjGX4l1Ueqe0=
Subject key identifier:   B4:45:28:D1:E1:0C:6B:B1:80:76:44:57:FD:EF:1A:00:C3:79:34:1E
Certificate issuer:       /CN=910606BA3C7F0372AAB7F438DB7578BFFDF8734B
Certificate serial:       6F971749B08460ED4CBD583A795EED5B3A5184FE
Authority key identifier: 91:06:06:BA:3C:7F:03:72:AA:B7:F4:38:DB:75:78:BF:FD:F8:73:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/323830333a643339303a3a2f33322d3438203d3e20323733303233.roa
Signing time:             Tue 04 Feb 2025 18:02:14 +0000
ROA not before:           Tue 04 Feb 2025 17:57:14 +0000
ROA not after:            Tue 03 Feb 2026 18:02:14 +0000
asID:                     273023
IP address blocks:        2803:d390::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:97:17:49:b0:84:60:ed:4c:bd:58:3a:79:5e:ed:5b:3a:51:84:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910606BA3C7F0372AAB7F438DB7578BFFDF8734B
        Validity
            Not Before: Feb  4 17:57:14 2025 GMT
            Not After : Feb  3 18:02:14 2026 GMT
        Subject: CN=B44528D1E10C6BB180764457FDEF1A00C379341E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:e9:b9:97:4f:0b:ba:5c:7c:31:0a:21:81:
                    7f:d6:33:02:14:09:0c:04:4b:bf:eb:17:1b:a7:2f:
                    29:7b:26:8d:ec:da:b1:69:3c:22:8f:86:46:9d:9f:
                    cd:4a:b6:30:14:c9:b9:04:06:11:b0:a6:a9:0f:cb:
                    9f:03:92:75:fd:d2:63:df:29:2e:c2:b0:29:ff:62:
                    1b:2b:d3:b9:72:8a:09:ff:38:bc:65:35:d4:af:da:
                    52:f6:a2:0f:a7:cb:1e:98:6c:0b:5c:42:d2:9e:66:
                    b6:b0:40:c6:91:7d:b4:1f:66:95:98:72:14:6d:24:
                    fd:a5:73:84:e9:a2:54:07:1d:8c:95:2b:db:5c:fa:
                    c5:32:f6:07:b4:83:6c:57:04:32:84:c8:5a:c1:aa:
                    65:44:4e:4f:e2:7e:79:40:7c:33:d6:1b:d8:51:d3:
                    83:c3:8f:2b:95:d9:6a:d7:e2:f9:48:a7:c7:f3:c8:
                    ec:90:1b:18:91:da:b8:f2:7c:24:63:fd:4c:9e:95:
                    c0:3e:33:da:80:0e:2a:15:8d:ea:1f:37:39:79:97:
                    e8:19:18:b3:c4:f3:90:d5:30:c7:c9:01:64:a3:43:
                    1e:61:c6:8e:22:1e:0a:31:50:31:1d:0d:68:7c:6c:
                    b7:52:8b:05:0b:c4:1b:6f:db:e5:8f:f3:e9:42:27:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:45:28:D1:E1:0C:6B:B1:80:76:44:57:FD:EF:1A:00:C3:79:34:1E
            X509v3 Authority Key Identifier:
                keyid:91:06:06:BA:3C:7F:03:72:AA:B7:F4:38:DB:75:78:BF:FD:F8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/323830333a643339303a3a2f33322d3438203d3e20323733303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d390::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:d5:4b:42:69:3e:ea:56:69:a9:b9:32:77:b4:2d:7d:43:43:
         0d:e0:96:e8:3a:65:72:08:50:20:7e:56:bb:57:3b:75:af:7c:
         ec:f4:9d:63:08:da:ac:a6:da:95:19:c0:78:6d:d9:fd:e8:57:
         82:ca:b9:9b:03:78:6d:ab:8a:9d:23:07:b0:6f:ce:ed:ac:3a:
         18:23:4c:5b:87:ab:10:81:62:32:bc:f3:07:ed:8b:10:36:6b:
         ef:7a:6d:8d:df:84:4e:31:a9:d8:7c:f1:bf:51:ad:7b:44:37:
         9b:be:b6:11:44:51:d6:9f:59:c5:81:2b:10:18:9b:c5:67:5d:
         5a:ae:d2:c6:92:e5:e4:9e:3f:f6:bb:25:b9:a8:67:7d:e4:73:
         fe:f0:27:80:08:27:6b:ad:53:18:e6:7d:1a:09:ce:86:79:60:
         fc:79:45:7e:c2:63:c0:50:76:07:e5:f1:b8:e8:6e:b8:dd:92:
         dd:60:c3:58:28:f6:6b:18:45:43:ad:54:b6:1c:7c:81:f9:33:
         df:8e:53:01:34:0c:6f:46:b4:55:34:11:c7:55:f8:b7:39:e1:
         a1:91:b2:55:8f:24:5c:da:1d:95:0c:66:29:4e:97:ef:51:a9:
         6c:6c:d1:de:6b:80:ad:be:43:31:da:7c:c8:82:ea:fa:ad:f8:
         89:ae:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:58 2025 by rpki-client on console.sobornost.net