Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030393a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613030393a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          6331ii6mbNB9+VE4GzB7WzpxsS+CyhdGrZcudJm7irY=
Subject key identifier:   45:1B:BB:00:D4:F8:67:18:D5:F0:B2:E0:B9:54:7E:42:1F:96:11:13
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       7506F1755427B90AA7876C37B720C162E667316F
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030393a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:26 +0000
ROA not before:           Thu 17 Apr 2025 14:30:26 +0000
ROA not after:            Thu 16 Apr 2026 14:35:26 +0000
asID:                     272951
IP address blocks:        2803:6990:a009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:06:f1:75:54:27:b9:0a:a7:87:6c:37:b7:20:c1:62:e6:67:31:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:26 2025 GMT
            Not After : Apr 16 14:35:26 2026 GMT
        Subject: CN=451BBB00D4F86718D5F0B2E0B9547E421F961113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:c7:15:1c:0b:ac:37:a4:21:2f:48:50:92:
                    a3:a1:9a:75:b1:32:5c:5d:37:d8:0a:76:ef:a6:0c:
                    53:0c:b5:41:ff:0e:d6:26:2f:48:f1:13:53:ce:bc:
                    dc:b2:15:a9:6c:74:95:99:c0:db:aa:3b:4d:c3:48:
                    f5:34:f6:67:a6:81:d6:db:a1:dc:3d:28:0c:75:ba:
                    3d:af:ff:e8:dd:b4:d2:97:97:c8:c2:90:fb:a7:73:
                    76:3b:f4:03:be:8c:79:1e:dd:34:9b:5e:68:eb:2a:
                    04:3a:13:a1:2b:9c:9f:14:91:14:75:dc:86:50:41:
                    38:80:ab:04:c5:11:7b:42:31:9a:6d:8f:f9:39:09:
                    d3:1b:e0:8a:29:8b:c3:ec:19:fc:0e:70:c3:dc:24:
                    23:25:29:f3:c7:09:04:86:97:9e:0b:d0:17:67:d6:
                    b8:89:bc:65:66:9d:1c:b7:34:a2:d4:99:44:27:8e:
                    c4:d7:ea:9a:ed:ae:6f:7f:5b:60:73:93:43:a2:f6:
                    6c:44:e5:3a:46:2c:ce:61:f4:1e:1a:96:f1:0b:3f:
                    31:5c:5f:d8:e9:76:75:2a:ad:78:12:b9:20:3b:79:
                    83:8f:e7:60:53:e5:ff:a1:5a:16:23:c5:89:a0:22:
                    d8:2d:8f:a1:b4:29:28:36:3d:e9:3f:91:db:a3:43:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:BB:00:D4:F8:67:18:D5:F0:B2:E0:B9:54:7E:42:1F:96:11:13
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030393a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a009::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:b7:3f:80:61:fb:c8:6f:fc:af:31:87:83:7a:ba:c4:e9:
         95:a5:7c:49:c1:41:a9:8b:ef:d0:12:49:1c:5a:fd:5c:25:5e:
         db:16:e4:30:b1:55:cf:79:c0:8c:81:60:27:df:e7:61:bf:75:
         bc:38:4a:e0:de:66:ff:71:48:96:fb:5e:31:8c:08:c7:2e:c0:
         bb:33:0a:24:2b:0f:87:7a:03:bd:0b:49:7b:20:1e:f7:16:df:
         fb:e6:af:60:c4:98:13:65:69:7c:c4:1a:46:d8:04:48:30:ae:
         2b:74:fc:b2:53:45:a6:f2:9c:da:93:7f:19:5a:a9:73:91:48:
         29:40:da:3e:7c:f4:c9:41:f9:e8:41:b2:46:8c:3c:89:d5:43:
         a7:d0:82:f4:4c:bf:66:dc:87:38:39:16:2a:dd:be:d9:0d:8f:
         a3:5d:85:6c:46:f5:be:29:6f:67:64:1b:a2:86:e9:94:a1:9b:
         cb:a6:32:e3:1f:34:91:c6:76:e4:7b:c7:19:54:c1:ea:f3:d7:
         3b:dd:5c:93:d3:e1:db:1e:ef:99:b4:29:dc:6a:8a:c9:b6:44:
         63:d6:77:bb:19:55:d6:95:1c:ae:56:90:ed:04:c3:bc:7e:d4:
         ab:15:7b:1f:c3:32:2a:f6:f1:c0:21:3c:e3:9d:bd:43:ef:38:
         8b:6a:7c:d0
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUdQbxdVQnuQqnh2w3tyDBYuZnMW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNTA0MTcxNDMwMjZaFw0yNjA0MTYxNDM1MjZaMDMxMTAvBgNV
BAMTKDQ1MUJCQjAwRDRGODY3MThENUYwQjJFMEI5NTQ3RTQyMUY5NjExMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsscVHAusN6QhL0hQkqOhmnWx
MlxdN9gKdu+mDFMMtUH/DtYmL0jxE1POvNyyFalsdJWZwNuqO03DSPU09memgdbb
odw9KAx1uj2v/+jdtNKXl8jCkPunc3Y79AO+jHke3TSbXmjrKgQ6E6ErnJ8UkRR1
3IZQQTiAqwTFEXtCMZptj/k5CdMb4Iopi8PsGfwOcMPcJCMlKfPHCQSGl54L0Bdn
1riJvGVmnRy3NKLUmUQnjsTX6prtrm9/W2Bzk0Oi9mxE5TpGLM5h9B4alvELPzFc
X9jpdnUqrXgSuSA7eYOP52BT5f+hWhYjxYmgItgtj6G0KSg2Pek/kdujQ5HbAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQURRu7ANT4ZxjV8LLguVR+Qh+WERMwHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMwMzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoAkwDQYJKoZIhvcNAQELBQADggEBAAnMtz+AYfvIb/yvMYeDerrE
6ZWlfEnBQamL79ASSRxa/VwlXtsW5DCxVc95wIyBYCff52G/dbw4SuDeZv9xSJb7
XjGMCMcuwLszCiQrD4d6A70LSXsgHvcW3/vmr2DEmBNlaXzEGkbYBEgwrit0/LJT
RabynNqTfxlaqXORSClA2j589MlB+ehBskaMPInVQ6fQgvRMv2bchzg5FirdvtkN
j6NdhWxG9b4pb2dkG6KG6ZShm8umMuMfNJHGduR7xxlUwerz1zvdXJPT4dse75m0
Kdxqism2RGPWd7sZVdaVHK5WkO0Ew7x+1KsVex/DMir28cAhPOOdvUPvOItqfNA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net