Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316230303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a316230303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          5fuGsw/tj6xIHpOmQVZMeLALMRkha8QUPK8/pWu0Oiw=
Subject key identifier:   75:BE:4B:29:7C:DA:1A:46:E5:6D:FC:55:A4:5A:2A:76:21:E4:13:2D
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       5589227D7C1DDBE97EF07B02DC14C54E89EA0854
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316230303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 18 Apr 2025 03:15:11 +0000
ROA not before:           Fri 18 Apr 2025 03:10:11 +0000
ROA not after:            Fri 17 Apr 2026 03:15:11 +0000
asID:                     272869
IP address blocks:        2803:7290:1b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:89:22:7d:7c:1d:db:e9:7e:f0:7b:02:dc:14:c5:4e:89:ea:08:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Apr 18 03:10:11 2025 GMT
            Not After : Apr 17 03:15:11 2026 GMT
        Subject: CN=75BE4B297CDA1A46E56DFC55A45A2A7621E4132D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:64:b2:fc:51:e7:29:00:c9:7a:14:29:25:
                    4f:2d:d6:12:b1:4a:d2:c2:c4:e0:09:63:f0:73:d4:
                    ae:05:bc:f4:a6:08:ce:dd:0f:74:96:b6:42:58:66:
                    43:ae:4d:b2:fa:d5:ca:cc:15:00:03:c3:c6:31:9a:
                    1b:44:63:df:47:2d:b9:3e:73:dd:55:1b:62:3c:05:
                    fe:5f:46:5f:a0:5e:de:95:0d:fa:f8:af:18:8c:74:
                    0a:c2:3f:c4:08:58:a9:e3:d6:da:4e:c4:7d:5a:6e:
                    a1:d7:17:4a:f8:13:5c:c9:b3:8a:22:6d:71:9e:fa:
                    cf:37:5c:3f:f2:70:bf:ca:35:d2:90:1c:02:16:f2:
                    f0:48:4b:75:54:89:4c:22:0f:68:7b:32:c8:af:8a:
                    3a:35:6d:a7:75:cb:a1:c6:d0:a9:b5:90:16:a4:d6:
                    3e:71:72:e8:50:bf:ff:90:a7:57:37:57:af:0f:60:
                    cc:84:ce:ef:19:1b:00:6b:1f:f0:5a:98:78:fa:a7:
                    18:b7:c1:7d:29:31:13:e7:71:63:82:63:c1:8c:79:
                    ab:58:e6:d9:4a:85:df:8d:6a:ff:39:f8:71:f5:03:
                    54:f6:27:77:d3:43:99:1a:04:55:10:f8:29:03:5f:
                    8c:66:02:f9:3c:29:a2:39:7b:ce:05:00:5c:8b:22:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:4B:29:7C:DA:1A:46:E5:6D:FC:55:A4:5A:2A:76:21:E4:13:2D
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316230303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:ee:c3:98:63:fa:49:b5:c8:3b:66:ae:56:25:21:12:5f:03:
         41:21:a2:c0:ac:e5:e7:fa:01:40:b0:f4:e7:3a:8e:68:c6:e2:
         5e:6e:5a:08:1a:df:a1:cf:70:ad:a2:6f:57:71:71:92:ba:ac:
         b1:ac:d7:cf:b6:d7:56:ab:dc:67:54:10:aa:bc:bb:da:65:2d:
         2f:77:3a:7e:6a:e5:95:bf:3b:a9:33:4f:72:a4:35:18:03:ba:
         b9:7a:4e:74:91:43:39:c6:c0:c9:0a:d2:3b:1e:fe:ee:4f:65:
         eb:e7:85:ce:ff:5c:81:7f:31:b8:13:1f:6e:59:af:f5:f0:fd:
         2c:87:02:d3:41:eb:c4:fb:56:ae:93:99:87:1d:60:5a:1a:80:
         16:c4:15:e4:74:6b:81:f2:ee:e2:1d:bd:98:9c:af:e0:64:3d:
         e2:57:b8:9a:6b:46:35:8f:87:2c:76:9d:28:c1:cc:88:a6:51:
         0a:b5:bc:0f:60:bc:d1:5f:71:4a:c1:0d:18:31:f7:89:12:06:
         e1:0f:f6:6f:ca:32:9c:b4:82:3f:df:ed:3c:7f:ac:61:2a:89:
         8a:45:ee:e8:59:ec:72:54:6a:a2:ac:88:12:c5:dd:b9:1f:bd:
         91:19:b1:68:96:d2:58:d4:1c:20:b5:99:90:ae:7e:fe:dc:fd:
         73:c3:aa:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:33 2025 by rpki-client on console.sobornost.net