Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313430303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313430303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          Il2MNPGxKOe5xrJyd27vqOElVZgM64R0jeONGaArUpc=
Subject key identifier:   38:49:8F:32:76:F2:CA:DC:A1:E6:2A:67:BB:70:81:C3:4D:53:09:FE
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       572624113B81A8D4CE255B0A05187F2E396F0C96
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313430303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 18 Apr 2025 03:15:12 +0000
ROA not before:           Fri 18 Apr 2025 03:10:12 +0000
ROA not after:            Fri 17 Apr 2026 03:15:12 +0000
asID:                     272869
IP address blocks:        2803:7290:1400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:26:24:11:3b:81:a8:d4:ce:25:5b:0a:05:18:7f:2e:39:6f:0c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Apr 18 03:10:12 2025 GMT
            Not After : Apr 17 03:15:12 2026 GMT
        Subject: CN=38498F3276F2CADCA1E62A67BB7081C34D5309FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:63:65:6a:2c:a7:31:5e:f5:f2:9b:7d:d7:
                    17:4b:e7:5b:da:aa:23:9b:1b:8d:99:9d:60:41:ef:
                    73:21:d0:c4:20:b9:e1:5e:7e:6d:53:18:b6:aa:24:
                    22:d2:a8:5d:07:a5:f3:a9:6e:14:57:4c:3d:7e:e8:
                    cd:02:73:43:fa:80:62:fc:5f:04:25:89:89:fc:ca:
                    0f:25:da:3d:1d:08:44:a9:ad:96:ba:1b:01:d0:9d:
                    52:fd:0d:90:e3:43:ff:17:e4:5f:28:46:66:6f:55:
                    83:bb:c3:c5:50:af:a2:b3:7f:37:78:f0:ec:2a:68:
                    6c:e3:02:9a:df:1e:c7:53:f0:42:fc:88:dd:ef:25:
                    05:e9:c6:d3:78:62:a7:28:eb:d7:fd:76:ba:b6:5e:
                    eb:e5:53:8d:f8:f4:bb:a9:d2:9a:3d:93:69:da:f9:
                    80:f3:c3:c2:ea:48:9b:d8:ab:48:b0:55:39:d7:59:
                    b5:25:72:f4:9c:dc:09:f3:0a:e7:9c:ac:68:72:13:
                    f4:ee:18:85:bf:18:76:c1:d3:ad:0c:e6:ce:49:35:
                    7a:f3:6b:de:1f:5f:89:94:cc:a4:5c:4c:91:11:39:
                    40:d4:ff:cc:39:78:8f:d0:02:49:e9:5a:cc:12:23:
                    87:21:d1:d2:5e:69:b9:6c:12:ab:a0:66:21:6f:55:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:49:8F:32:76:F2:CA:DC:A1:E6:2A:67:BB:70:81:C3:4D:53:09:FE
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313430303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:db:64:58:6f:35:27:d0:db:54:e1:24:14:5d:72:11:e4:e2:
         dc:ca:20:f2:fd:1d:99:46:7f:49:9c:3b:05:b2:1f:52:71:e5:
         1d:db:a9:e9:c7:f3:e4:0f:c3:22:f5:6d:38:d2:9c:87:5b:3a:
         b2:2a:c4:11:f3:ed:7c:0e:b2:80:dc:4f:dd:ae:a1:a0:74:a3:
         40:17:d0:3e:c4:0b:bb:25:21:45:97:75:19:ff:16:5f:5e:19:
         fc:70:c9:14:6b:5c:c0:e3:3e:b2:d4:c2:d2:6c:29:df:fb:b5:
         b3:2d:1b:97:54:cf:fa:36:81:c7:35:54:a8:53:ae:a3:c0:24:
         94:58:ae:1f:36:a6:da:b2:c7:de:93:b5:97:85:f6:49:0d:7a:
         f6:37:ee:6a:61:75:b7:20:f0:56:bc:c5:e5:c9:12:42:be:1c:
         3b:65:b2:80:68:75:50:bb:98:3a:96:97:75:43:c9:93:2e:45:
         61:20:ec:58:c8:13:00:7f:43:15:64:e5:fa:54:13:01:1d:cd:
         e9:dc:be:00:19:16:fe:ab:79:1f:ba:6a:7f:46:22:1c:df:48:
         56:ea:13:ba:18:d7:41:c3:80:76:4d:7e:20:d3:23:ad:21:f3:
         f6:d9:41:cc:92:b8:57:e6:16:13:6a:87:8b:92:80:a3:3e:19:
         7b:04:5b:43
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUVyYkETuBqNTOJVsKBRh/LjlvDJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVEQTQxMzg1NTVFMzhCRjA5ODRERDlDQzZEODdCOThC
NThGM0Q4ODAeFw0yNTA0MTgwMzEwMTJaFw0yNjA0MTcwMzE1MTJaMDMxMTAvBgNV
BAMTKDM4NDk4RjMyNzZGMkNBRENBMUU2MkE2N0JCNzA4MUMzNEQ1MzA5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLW2NlaiynMV718pt91xdL51va
qiObG42ZnWBB73Mh0MQgueFefm1TGLaqJCLSqF0HpfOpbhRXTD1+6M0Cc0P6gGL8
XwQliYn8yg8l2j0dCESprZa6GwHQnVL9DZDjQ/8X5F8oRmZvVYO7w8VQr6Kzfzd4
8OwqaGzjAprfHsdT8EL8iN3vJQXpxtN4Yqco69f9drq2XuvlU4349Lup0po9k2na
+YDzw8LqSJvYq0iwVTnXWbUlcvSc3AnzCuecrGhyE/TuGIW/GHbB060M5s5JNXrz
a94fX4mUzKRcTJEROUDU/8w5eI/QAknpWswSI4ch0dJeablsEqugZiFvVe/7AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUOEmPMnbyytyh5ipnu3CBw01TCf4wHwYDVR0j
BBgwFoAUrtpBOFVeOL8JhN2cxth7mLWPPYgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkQ0N0ZFNTA5QjNFNjQ1NjRFNTgxNTkzNUQwOEU3NTU5
QjU3MDNGQUJGQzhGMjE5RjNGOEUxNDJGRkY2QUE0LzAvQUVEQTQxMzg1NTVFMzhC
RjA5ODRERDlDQzZEODdCOThCNThGM0Q4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRURBNDEzODU1NUUzOEJGMDk4
NEREOUNDNkQ4N0I5OEI1OEYzRDg4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZENDdGRTUwOUIzRTY0NTY0RTU4MTU5MzVEMDhFNzU1OUI1NzAzRkFC
RkM4RjIxOUYzRjhFMTQyRkZGNkFBNC8wLzMyMzgzMDMzM2EzNzMyMzkzMDNhMzEz
NDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzODM2Mzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA3KQFDANBgkqhkiG9w0BAQsFAAOCAQEAHttkWG81J9DbVOEkFF1yEeTi
3Mog8v0dmUZ/SZw7BbIfUnHlHdup6cfz5A/DIvVtONKch1s6sirEEfPtfA6ygNxP
3a6hoHSjQBfQPsQLuyUhRZd1Gf8WX14Z/HDJFGtcwOM+stTC0mwp3/u1sy0bl1TP
+jaBxzVUqFOuo8AklFiuHzam2rLH3pO1l4X2SQ169jfuamF1tyDwVrzF5ckSQr4c
O2WygGh1ULuYOpaXdUPJky5FYSDsWMgTAH9DFWTl+lQTAR3N6dy+ABkW/qt5H7pq
f0YiHN9IVuoTuhjXQcOAdk1+INMjrSHz9tlBzJK4V+YWE2qHi5KAoz4ZewRbQw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:33 2025 by rpki-client on console.sobornost.net