Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/323830333a323638303a3a2f33322d3332203d3e203631343432.roa
File:                     323830333a323638303a3a2f33322d3332203d3e203631343432.roa (raw, json)
Hash identifier:          dlVazrBVrgDzVUVGmWrlveL2W/QMI6c7DhmT3HXmTlE=
Subject key identifier:   3C:9D:73:AB:FA:50:A0:49:73:4B:AF:A9:BF:9E:D6:3D:B1:F4:EC:D5
Certificate issuer:       /CN=AA01668E71E93FC51932988C8351C9140C557FEA
Certificate serial:       1A79890E27251C6A80B845BAC08C0F20F938CF8A
Authority key identifier: AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/323830333a323638303a3a2f33322d3332203d3e203631343432.roa
Signing time:             Tue 04 Feb 2025 18:51:02 +0000
ROA not before:           Tue 04 Feb 2025 18:46:02 +0000
ROA not after:            Tue 03 Feb 2026 18:51:02 +0000
asID:                     61442
IP address blocks:        2803:2680::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:79:89:0e:27:25:1c:6a:80:b8:45:ba:c0:8c:0f:20:f9:38:cf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA01668E71E93FC51932988C8351C9140C557FEA
        Validity
            Not Before: Feb  4 18:46:02 2025 GMT
            Not After : Feb  3 18:51:02 2026 GMT
        Subject: CN=3C9D73ABFA50A049734BAFA9BF9ED63DB1F4ECD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:1a:d8:ba:b8:f8:02:cd:46:41:cb:20:2a:
                    73:4b:7b:1c:44:84:b9:18:43:de:dc:7f:f5:e7:28:
                    e9:0f:74:38:26:95:c0:5e:60:1a:8f:5d:3f:f3:92:
                    8f:af:e3:6f:a4:a1:ed:cf:8f:24:ad:16:3a:25:d4:
                    e8:35:24:b6:bc:9a:43:45:d2:c1:99:1b:fd:66:d1:
                    bc:76:33:fa:7a:72:4e:ad:c9:20:09:4f:a2:8a:c3:
                    3d:b6:ff:90:e0:52:38:50:aa:95:51:01:c5:d2:74:
                    91:e1:2c:b6:ca:65:90:a9:93:ea:dd:75:18:83:02:
                    6e:3f:5d:ce:9d:09:b4:bf:66:8b:c9:30:f5:9b:f5:
                    64:93:d1:fc:14:13:b7:d9:fe:29:68:76:49:eb:55:
                    8a:41:71:74:3e:c3:fb:02:65:f2:be:20:c6:cf:c1:
                    7b:34:fb:6c:8d:b6:b1:cf:a5:63:08:38:fe:78:11:
                    77:5b:9c:24:e6:ad:c9:6a:51:36:1f:61:87:dc:5c:
                    80:7f:dd:b7:29:4e:59:03:c2:8e:e3:d7:b2:fe:b7:
                    f2:aa:4a:17:8a:88:b0:ed:5e:84:b2:0e:c8:6c:e1:
                    32:c5:3f:95:06:a6:65:6a:1e:5d:9c:f8:b8:4f:67:
                    fb:bb:69:17:04:bb:4c:b1:87:8f:44:70:80:d9:c2:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9D:73:AB:FA:50:A0:49:73:4B:AF:A9:BF:9E:D6:3D:B1:F4:EC:D5
            X509v3 Authority Key Identifier:
                keyid:AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/323830333a323638303a3a2f33322d3332203d3e203631343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2680::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:8e:03:b3:bd:b9:79:4f:97:89:f0:8f:96:27:9c:a3:da:83:
         46:30:4a:90:f3:24:41:fa:18:ce:66:1b:cd:3f:10:81:a5:12:
         c0:92:75:31:f7:eb:a4:aa:5d:e8:8a:1b:87:ec:ed:bd:af:46:
         5d:d9:a9:a6:32:fe:14:5f:22:c2:e2:40:e3:35:2f:54:ac:f1:
         10:da:5d:8c:a1:71:39:92:35:b8:5c:bf:a1:81:f3:ce:76:80:
         de:94:f0:8f:e1:b3:11:dc:f1:62:00:04:ec:04:83:25:7e:6d:
         39:c5:11:98:62:dd:e8:4b:2d:6b:e2:65:7d:0c:f1:2b:50:d0:
         43:cb:ed:32:8a:db:4b:04:84:d9:f8:86:31:4c:16:40:b2:a7:
         dd:d5:03:fe:0f:11:0c:6c:29:cf:17:7a:36:e7:2d:1a:6b:c5:
         0a:7b:22:91:61:a8:52:45:15:1e:de:96:8a:05:82:54:53:04:
         d0:1c:72:99:81:1e:15:d3:a2:db:d1:73:9c:14:01:d6:bd:5f:
         7b:18:3b:b3:54:5d:ce:b4:bc:45:a1:37:36:da:50:7e:9c:da:
         8a:03:33:14:60:0d:b4:7d:f8:e5:cf:54:7f:a1:d5:85:8b:de:
         a6:0d:1d:28:2f:f9:9a:a3:4e:45:58:f1:5b:2e:52:83:47:d9:
         8d:ec:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:32 2025 by rpki-client on console.sobornost.net