Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313230303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313230303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          WT3Z11mPbH91sdMIXx+t39TKP6NvVOtRQHkiXFoKZAc=
Subject key identifier:   64:FD:0A:66:F8:40:3A:7E:EC:6C:90:21:FF:93:EA:32:0F:B4:A7:1F
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       42D66D03F0163004F219A307C1DB5ADFF5833286
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313230303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 18 Apr 2025 03:15:10 +0000
ROA not before:           Fri 18 Apr 2025 03:10:10 +0000
ROA not after:            Fri 17 Apr 2026 03:15:10 +0000
asID:                     272869
IP address blocks:        2803:7290:1200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d6:6d:03:f0:16:30:04:f2:19:a3:07:c1:db:5a:df:f5:83:32:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Apr 18 03:10:10 2025 GMT
            Not After : Apr 17 03:15:10 2026 GMT
        Subject: CN=64FD0A66F8403A7EEC6C9021FF93EA320FB4A71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:15:1d:fc:73:4e:74:2a:8c:47:d0:4b:d3:
                    5b:e7:aa:0a:66:a5:91:11:63:ba:15:e6:f9:37:3c:
                    9d:0a:e3:79:c9:0a:99:5c:7d:22:53:92:81:33:c5:
                    dd:4e:36:93:b7:5c:f6:c0:6e:d9:96:1f:9d:a8:4e:
                    dd:f1:15:d5:3b:7d:e1:d3:e1:51:89:ac:39:ef:ac:
                    9b:8e:6c:0b:a0:17:76:d1:e1:e9:e8:3b:20:84:06:
                    c5:9f:95:90:78:4b:c0:73:e3:00:9a:2f:20:e2:10:
                    67:ed:f4:b3:cc:c7:b1:ee:ca:45:cd:33:39:70:5d:
                    ba:6d:63:6f:50:48:c0:95:26:cb:4e:93:6a:1f:8e:
                    0e:34:3d:2b:21:d9:57:a8:9c:68:76:73:c6:c0:be:
                    a2:87:b8:bf:84:7e:80:db:49:c4:b8:9d:1c:4e:e6:
                    07:8e:61:be:cd:8e:49:fd:1a:73:fd:97:e3:c3:62:
                    c6:58:23:f4:11:09:fc:3e:79:3e:34:0e:c7:83:94:
                    57:0c:7b:da:23:a2:65:ae:05:a6:a9:83:60:57:af:
                    83:69:dc:bd:40:3d:45:29:f6:6e:73:a8:5e:50:bd:
                    e0:93:5b:91:2c:c1:a6:6e:12:0f:a7:ee:61:e2:b8:
                    cc:4c:47:a9:e1:06:22:00:e4:cf:ce:93:4b:2d:6e:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FD:0A:66:F8:40:3A:7E:EC:6C:90:21:FF:93:EA:32:0F:B4:A7:1F
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313230303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:49:61:98:59:ff:1b:25:bb:f3:53:c4:1f:7d:38:2d:73:
         d6:ed:c5:3c:e9:17:93:ab:81:8d:2a:c1:8e:62:64:1e:e3:4e:
         18:f5:a7:db:4e:3b:22:58:65:12:5c:48:f3:18:12:bd:91:0d:
         d4:86:95:9c:3c:50:6e:64:b2:f0:cf:21:0b:71:16:45:b0:4f:
         85:53:22:75:1a:40:5f:a1:f8:36:d0:b9:ca:8e:c1:41:cd:d1:
         60:98:54:8a:33:8d:8f:cf:26:c1:e1:12:bf:80:27:3f:6e:0e:
         ac:02:fd:21:49:41:8f:bc:dd:c2:04:42:87:6d:ae:a4:60:d3:
         30:98:0b:cd:63:6d:6e:cd:a6:84:f1:75:ca:4e:62:f9:88:8f:
         b0:90:bc:83:14:5a:6c:f5:eb:29:3f:cb:08:b5:cc:e1:8f:ef:
         9c:9b:e7:b6:67:ad:03:0d:e2:43:8d:61:21:31:07:87:9c:86:
         2b:2e:0e:90:47:64:ba:e7:3b:4d:31:5a:bc:6b:16:43:f1:eb:
         af:03:11:e7:d9:03:a2:25:e3:3f:ec:b2:9d:e8:92:7f:63:bb:
         e3:c6:fe:0b:30:35:08:06:e3:b0:4f:1e:e0:98:c2:bd:1c:08:
         52:e2:3b:c9:31:0d:e3:b4:bd:b3:85:76:02:f1:38:f0:6c:31:
         22:18:89:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:33 2025 by rpki-client on console.sobornost.net