Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3330303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3330303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          B6JOBRJYwm8exYc9oerOuYlHkRasJ5pKruEXUPmPfrA=
Subject key identifier:   4A:73:C6:E5:FE:2E:56:C2:50:E0:08:87:D8:CB:A6:77:DB:54:32:39
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       7B192B33E9924F4D9409A970E4619F2FB24D4CD9
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3330303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 04 Feb 2025 18:28:05 +0000
ROA not before:           Tue 04 Feb 2025 18:23:05 +0000
ROA not after:            Tue 03 Feb 2026 18:28:05 +0000
asID:                     272869
IP address blocks:        2803:7290:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:19:2b:33:e9:92:4f:4d:94:09:a9:70:e4:61:9f:2f:b2:4d:4c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Feb  4 18:23:05 2025 GMT
            Not After : Feb  3 18:28:05 2026 GMT
        Subject: CN=4A73C6E5FE2E56C250E00887D8CBA677DB543239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:4d:a3:d0:af:a9:61:c2:4e:08:a5:8c:1e:
                    c3:06:bc:9d:2f:d5:71:16:c9:ae:61:0a:3d:d0:27:
                    55:f7:66:f2:6d:7f:3a:89:28:1c:23:8f:4e:ec:9e:
                    03:94:20:2a:af:f3:04:af:d5:e0:e4:91:53:83:2b:
                    b0:6d:86:cb:bb:e7:15:cc:2a:c6:35:25:f9:ea:02:
                    eb:a6:ac:82:b2:dc:dd:24:f7:5c:8f:70:b1:57:87:
                    9a:c9:55:dd:02:ad:2e:3b:02:96:dd:ce:21:af:6f:
                    f0:1e:0e:e6:8e:04:f2:60:7f:ae:fb:1e:cc:57:16:
                    37:96:ed:6f:00:f4:76:75:5f:b2:10:39:5c:a8:08:
                    27:8d:d9:06:df:93:51:af:0f:e2:2d:57:a8:16:82:
                    59:de:24:84:fd:e8:0b:f6:51:69:9d:a5:dd:54:65:
                    d3:c7:6a:97:51:76:1c:44:d2:ae:68:49:06:c1:f2:
                    8b:21:2e:11:b1:e6:81:2b:2e:d8:5e:11:1b:00:e1:
                    8d:1e:1a:c8:32:71:fe:19:13:8a:80:3d:ae:51:7d:
                    6e:96:44:97:2b:b6:d4:65:ac:e5:0e:59:9d:61:cf:
                    88:35:65:66:21:e9:5e:66:19:3a:6c:54:5f:ed:15:
                    35:2c:6f:73:1a:7a:af:bf:48:e5:13:de:ba:2b:c5:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:73:C6:E5:FE:2E:56:C2:50:E0:08:87:D8:CB:A6:77:DB:54:32:39
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3330303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:f5:da:f2:8f:97:fb:88:4e:1e:db:e8:21:30:65:05:07:79:
         5a:b7:1e:56:fe:9d:de:b7:af:14:32:9e:e0:a0:6a:6c:4b:21:
         79:4f:25:8d:28:fc:34:0d:e6:11:29:98:a4:9d:ae:54:7f:59:
         a0:7d:e8:d1:a4:f2:43:8d:1b:9d:15:53:b0:75:46:84:93:02:
         c8:61:ba:f8:65:b1:26:15:e0:a7:c2:63:85:d5:71:b9:85:45:
         9a:4e:3b:9d:2a:50:89:43:32:e4:f2:c3:b2:32:93:ba:40:9d:
         93:88:eb:1a:eb:6b:d2:fe:84:88:aa:59:fc:79:30:c4:5b:63:
         ef:e3:81:89:d4:79:e9:cd:c7:04:d6:bd:1c:04:88:31:2c:55:
         2c:c6:9e:00:01:1b:0a:98:f5:84:df:d7:13:c9:c4:6b:a6:a2:
         30:b0:76:d7:01:fb:12:15:3c:62:8a:5b:6f:cf:67:4b:3d:31:
         26:2d:c9:83:72:78:44:91:99:a2:5d:f3:c9:7a:bd:3d:74:3d:
         df:3d:b7:e9:7b:d1:75:1f:b6:6c:18:fe:f4:b5:1b:bf:32:28:
         20:42:41:fa:1e:59:f2:87:ac:b5:7b:cc:75:0f:ce:c7:43:d4:
         28:c2:8d:f3:1b:f3:1f:6c:1f:40:ee:1d:74:ff:5c:ce:e3:78:
         40:54:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:33 2025 by rpki-client on console.sobornost.net