Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313130303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313130303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          czlj7pX04of37WkcNmu4Zvy48tKcpEeIA1BhvvgWpUY=
Subject key identifier:   C5:49:B3:A3:A4:EA:46:1C:D5:85:85:52:4D:42:F3:EE:77:D9:71:8C
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       24437E7EE87C57CE2F778CA79DA6111D723E3812
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313130303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 18 Apr 2025 03:15:13 +0000
ROA not before:           Fri 18 Apr 2025 03:10:13 +0000
ROA not after:            Fri 17 Apr 2026 03:15:13 +0000
asID:                     272869
IP address blocks:        2803:7290:1100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:43:7e:7e:e8:7c:57:ce:2f:77:8c:a7:9d:a6:11:1d:72:3e:38:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Apr 18 03:10:13 2025 GMT
            Not After : Apr 17 03:15:13 2026 GMT
        Subject: CN=C549B3A3A4EA461CD58585524D42F3EE77D9718C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:c1:23:80:9e:c2:d0:9f:e6:9c:c7:5c:b6:
                    b6:a8:cc:34:e0:58:3e:69:58:3a:d2:ac:76:28:64:
                    53:81:ed:a9:65:d8:65:08:ad:d4:54:42:37:36:4f:
                    7d:96:aa:1d:b2:5f:36:be:48:29:92:f3:90:5b:fb:
                    d4:f6:be:ce:b8:ba:22:0a:eb:a0:82:28:f6:ea:cd:
                    9a:0a:b2:a7:ed:fd:ee:cf:72:2e:f6:d9:7b:9c:ab:
                    9c:96:18:99:31:45:8f:9e:2b:bb:da:19:2e:84:e1:
                    ef:ed:03:b6:54:64:ee:b2:a4:51:40:ba:5c:2b:3d:
                    ae:ea:13:59:17:70:f4:2f:28:b7:c3:f6:5c:61:49:
                    db:d4:6f:7a:7c:dc:fc:8b:25:31:a1:91:9f:71:75:
                    37:37:c5:28:6c:e4:f2:bb:e7:8d:db:3c:97:70:03:
                    c6:23:39:d3:21:54:27:07:94:7e:95:77:4d:0f:76:
                    a0:ef:cf:93:64:d8:8b:b5:2a:59:8a:0e:1a:d1:24:
                    02:ab:02:e6:3b:40:11:91:be:15:bc:b8:3d:ac:0a:
                    08:cc:22:89:1b:91:61:07:66:31:61:3c:43:fc:76:
                    09:ca:46:19:b9:f1:68:67:a4:f4:e7:00:00:02:d8:
                    45:35:6b:08:b9:46:f8:62:30:ba:e4:3f:c9:65:01:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:49:B3:A3:A4:EA:46:1C:D5:85:85:52:4D:42:F3:EE:77:D9:71:8C
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313130303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:d8:00:f4:68:ac:17:42:31:67:48:16:ef:fb:1b:78:93:ff:
         82:ef:50:42:a5:ef:c3:e1:65:24:a0:b8:48:00:b8:2e:a1:40:
         18:1d:b6:eb:fe:0f:47:1b:29:86:57:b1:f4:74:6c:b4:f1:f2:
         22:73:fe:d8:9a:be:ac:23:13:0c:67:ba:51:b4:c6:3e:8c:27:
         b6:de:c2:e8:af:e3:c7:39:3d:55:dc:7a:1d:d2:a3:22:1f:27:
         55:d9:b3:0f:59:58:19:a7:cf:94:29:fc:a4:ac:f3:b6:d9:9c:
         d1:a0:04:32:e3:6b:02:38:af:56:86:e2:7c:de:fe:93:77:9b:
         9d:29:95:af:2a:32:d5:5e:4e:e3:8d:d1:b3:58:56:13:7a:fa:
         28:90:68:e5:b3:b8:47:c1:ee:56:23:25:1f:90:fe:c5:70:a3:
         40:44:a0:dc:8b:6a:ea:10:c3:ed:e1:41:9e:2a:ae:0f:87:fc:
         01:dd:7d:c4:76:09:f3:a8:89:a0:72:9f:6b:ea:59:86:a7:64:
         59:40:92:bc:17:cd:bc:aa:e1:f9:d0:4a:34:9a:50:37:ef:0d:
         ed:22:de:22:e7:d4:56:0a:ea:dd:ed:2d:f2:f5:80:96:d3:6a:
         3d:96:f7:ee:30:cc:a8:52:83:d9:f4:1b:04:65:f2:6b:43:07:
         77:eb:69:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:33 2025 by rpki-client on console.sobornost.net