Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3333203d3e20323637393035.roa
File:                     323830333a333636303a3a2f33322d3333203d3e20323637393035.roa (raw, json)
Hash identifier:          G9Vdz1ODrf91kWbeXLLDco4xth4zNElE+m5oQ/T4iDw=
Subject key identifier:   29:24:79:2F:1A:05:95:65:3E:9D:3C:F9:CA:4B:2B:12:AC:5E:49:F8
Certificate issuer:       /CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B
Certificate serial:       0151C8DD887062182BEC77AA9FBDFB461D9B5170
Authority key identifier: 5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3333203d3e20323637393035.roa
Signing time:             Fri 25 Apr 2025 16:16:06 +0000
ROA not before:           Fri 25 Apr 2025 16:11:06 +0000
ROA not after:            Fri 24 Apr 2026 16:16:06 +0000
asID:                     267905
IP address blocks:        2803:3660::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:51:c8:dd:88:70:62:18:2b:ec:77:aa:9f:bd:fb:46:1d:9b:51:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B
        Validity
            Not Before: Apr 25 16:11:06 2025 GMT
            Not After : Apr 24 16:16:06 2026 GMT
        Subject: CN=2924792F1A0595653E9D3CF9CA4B2B12AC5E49F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:79:a1:89:bc:fa:34:e9:39:b7:ea:bb:a1:
                    00:fc:38:84:12:b1:08:bb:cc:25:99:43:d7:87:aa:
                    d0:9e:4c:db:8b:7e:3b:66:44:0e:7b:b0:d7:c6:7c:
                    1e:b8:8d:9e:f8:2a:58:41:56:29:be:e4:db:51:89:
                    a9:84:81:4c:bd:5c:17:fb:35:cd:ca:f3:6b:97:bb:
                    1e:9f:3c:3e:95:75:bb:2c:9e:b1:27:05:de:5a:4f:
                    ba:68:ab:d2:98:c1:fe:dc:ee:93:79:a4:dd:5d:63:
                    fa:3d:99:62:df:3e:fa:7c:36:df:0d:e7:5c:41:f9:
                    a4:50:ba:9c:c0:35:4b:78:b3:cd:44:e1:a0:bc:a5:
                    a6:db:1e:17:37:08:16:b0:7a:ee:62:71:8d:03:3e:
                    ee:8b:33:1a:7c:64:ec:bd:1e:1c:8f:f4:cf:5d:43:
                    ce:29:e1:94:81:f6:b1:3c:27:b6:99:ce:d0:43:41:
                    9c:3b:c2:66:5f:57:9a:4d:0a:8c:66:98:33:48:b5:
                    f3:e4:2e:69:46:42:de:28:07:45:c0:53:d0:e6:6e:
                    80:72:20:6c:8d:6e:af:a9:63:29:af:ff:8d:d8:fd:
                    ff:86:ae:92:0c:d1:42:91:a7:7c:e7:21:10:b0:ae:
                    e2:45:ca:78:5b:77:39:15:70:0a:02:e7:d6:47:92:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:24:79:2F:1A:05:95:65:3E:9D:3C:F9:CA:4B:2B:12:AC:5E:49:F8
            X509v3 Authority Key Identifier:
                keyid:5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3333203d3e20323637393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:3b:ed:65:b6:c7:11:eb:97:7c:22:25:6d:54:e5:24:e1:
         e6:47:c4:66:be:d6:ea:d8:ed:a4:85:75:03:3f:7c:11:49:8e:
         89:cf:a8:95:8f:cf:74:0d:47:18:e6:f5:32:69:2c:bf:60:c4:
         1f:7c:43:30:1c:2d:0c:fd:5f:b3:fa:7b:9a:3c:65:6f:e7:d0:
         b9:1e:1c:31:38:b6:3d:0d:32:16:d5:be:04:8d:74:b6:89:36:
         ce:d4:86:1e:a7:35:5f:dc:56:ce:a5:43:bf:52:22:53:2e:00:
         e1:15:be:42:d3:ca:92:cf:df:4d:55:9e:49:70:32:8d:e7:16:
         e0:34:4e:28:c6:8c:7c:8c:ba:49:64:b1:9d:c4:ff:30:6c:4b:
         d6:8f:63:22:25:fa:38:ec:52:5c:5d:ec:38:fe:d8:d8:ed:4b:
         42:67:54:20:40:3d:ea:89:68:fb:c1:18:ec:56:1e:29:57:27:
         ca:d3:ca:cb:d4:b4:2a:a4:5a:37:19:06:65:f5:1f:22:b9:09:
         51:34:7f:82:ee:96:67:38:a0:df:da:91:43:da:12:f4:03:4d:
         f4:19:b4:d1:6e:aa:37:89:f7:f7:1e:e9:2a:bd:35:ac:b3:3d:
         4c:ca:2c:71:60:dc:51:0d:23:9e:2b:55:98:91:ec:cc:04:9f:
         5f:41:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:04 2025 by rpki-client on console.sobornost.net