Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31373a3a2f34382d3438203d3e20323637363939.roa
File:                     323830333a353161303a31373a3a2f34382d3438203d3e20323637363939.roa (raw, json)
Hash identifier:          bYRyACq+TnHjI2oWgEo9I7B1/mIdBluRssB3wG7EXcA=
Subject key identifier:   FA:45:9B:8E:4E:F3:B0:AB:2A:BB:8A:C1:4C:C3:BD:49:C5:3C:63:87
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       760F01DD9E200EC587AEE3D6A0877E823D448242
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31373a3a2f34382d3438203d3e20323637363939.roa
Signing time:             Tue 04 Feb 2025 18:04:52 +0000
ROA not before:           Tue 04 Feb 2025 17:59:52 +0000
ROA not after:            Tue 03 Feb 2026 18:04:52 +0000
asID:                     267699
IP address blocks:        2803:51a0:17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0f:01:dd:9e:20:0e:c5:87:ae:e3:d6:a0:87:7e:82:3d:44:82:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Feb  4 17:59:52 2025 GMT
            Not After : Feb  3 18:04:52 2026 GMT
        Subject: CN=FA459B8E4EF3B0AB2ABB8AC14CC3BD49C53C6387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:7e:1a:07:1f:fc:d8:a0:55:ab:ed:43:b6:
                    ae:ae:12:5f:a7:a6:ad:57:87:2c:50:5c:c9:f7:6b:
                    1e:55:51:a6:3b:60:49:90:ed:4b:4a:91:4a:d3:2b:
                    4e:30:24:1a:68:c2:bb:88:f4:dd:c5:48:e2:ac:e2:
                    cd:8a:a5:f4:3b:15:0a:7d:16:14:44:15:5c:c5:ab:
                    11:e4:29:8b:bd:f3:ba:59:da:48:2b:97:18:ec:6f:
                    35:f5:cf:fb:38:2e:4e:cc:c1:e3:df:5c:1b:b9:eb:
                    18:4d:83:19:86:0c:63:4c:ed:48:2e:2a:12:93:a5:
                    45:a1:be:54:a6:34:19:d2:09:81:f4:4f:12:94:3f:
                    40:f6:3e:05:03:13:02:2b:54:bd:f9:83:93:fe:a6:
                    19:5f:1f:ac:c0:80:e7:ea:4b:dc:cd:4c:d2:6f:bf:
                    ae:3e:65:c8:7b:dc:81:3b:8f:d8:1b:eb:02:01:b2:
                    ed:a6:92:17:15:92:a6:61:04:23:13:70:21:8c:61:
                    05:26:7b:dd:3f:3a:a0:64:fe:ca:c1:4d:99:8d:a0:
                    b3:13:1b:03:44:db:7c:a6:a2:81:e7:27:b1:e5:bb:
                    e3:bc:8d:27:aa:14:9f:8c:1b:39:39:f3:ea:c2:e0:
                    29:25:2a:5c:30:92:b6:08:87:f4:be:3e:d7:80:fb:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:45:9B:8E:4E:F3:B0:AB:2A:BB:8A:C1:4C:C3:BD:49:C5:3C:63:87
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31373a3a2f34382d3438203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51a0:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:f2:a4:62:75:e1:c0:e6:c7:2d:47:3d:a5:95:80:52:2c:3c:
         cc:b9:ed:a5:07:4f:71:a0:2b:a9:e4:35:40:a7:9b:27:20:4c:
         b2:da:a9:be:90:c3:0c:9a:98:31:9f:43:d5:c7:3c:61:62:56:
         af:8b:da:1d:f1:98:9b:8d:bc:ce:77:1c:95:bf:df:52:9a:ed:
         93:55:75:ce:df:79:b0:20:a7:66:04:60:fe:23:b3:64:87:98:
         d5:e0:aa:d1:dc:cc:29:df:10:74:13:e8:54:a3:89:e3:24:f2:
         f7:15:ab:1b:f2:64:b5:58:f1:13:bd:1c:f0:f9:74:3e:7d:2d:
         5b:99:58:be:f3:91:8c:4f:30:c7:d7:3f:2a:f2:2a:52:c6:ca:
         5e:35:ff:6f:2a:3f:02:14:39:0f:c8:68:43:b8:6c:94:bc:67:
         04:90:97:58:15:42:9c:4b:26:81:42:e3:f6:c3:ab:4e:b8:05:
         d6:3a:c4:ad:89:85:de:fe:53:bf:cd:f6:f2:99:2c:a6:15:6f:
         06:94:26:df:00:2e:fc:6a:3a:26:7e:d6:80:73:db:7e:5d:70:
         3b:b0:4e:2f:f5:8c:44:f7:ff:9e:bd:9f:75:a2:a3:88:ed:dd:
         f4:8e:e2:53:93:76:66:79:b0:41:a5:d9:ea:3d:52:58:da:ee:
         3a:1d:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:32 2025 by rpki-client on console.sobornost.net