Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030623a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613030623a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          QZyrx77JMPSpMoVbbuNUF7FEZ4oIthZV44UR0GZ+PbE=
Subject key identifier:   34:37:58:36:B2:9F:BE:D2:02:71:B5:8A:75:9A:1C:5D:49:AE:3A:4D
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       53611E70BDFABD2547A31904AEB0B1E7B7C4014E
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030623a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:13 +0000
ROA not before:           Thu 17 Apr 2025 14:30:13 +0000
ROA not after:            Thu 16 Apr 2026 14:35:13 +0000
asID:                     272951
IP address blocks:        2803:6990:a00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:61:1e:70:bd:fa:bd:25:47:a3:19:04:ae:b0:b1:e7:b7:c4:01:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:13 2025 GMT
            Not After : Apr 16 14:35:13 2026 GMT
        Subject: CN=34375836B29FBED20271B58A759A1C5D49AE3A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:06:57:9d:c8:f2:2a:bf:f2:0f:77:88:f4:
                    80:48:66:8d:5d:fe:8d:2b:49:42:7e:64:cd:57:f2:
                    e2:76:a3:80:d6:0e:b0:c3:08:41:97:6b:a0:70:ce:
                    44:d9:89:e4:fd:13:c2:37:be:f7:b5:f6:fe:46:c8:
                    a8:cb:c7:6e:59:5b:50:1e:7d:77:69:18:cc:c7:e5:
                    88:f0:23:f0:e8:3c:2b:1d:a8:4b:67:45:f1:8f:81:
                    1e:fd:2d:d1:d4:9f:ef:a9:86:c8:84:61:90:23:af:
                    a6:de:87:3b:02:74:09:de:f9:b5:72:a0:ad:2a:a2:
                    78:88:26:61:a1:60:83:3f:6a:3d:af:82:27:3b:e5:
                    55:64:37:66:e9:98:04:bb:3f:80:02:e9:0b:66:a0:
                    37:63:a7:c0:6c:1d:cb:32:64:dc:04:b9:56:b0:66:
                    fc:8b:17:c9:32:10:f9:2e:fd:f9:71:ce:48:ac:ea:
                    e0:fd:b9:a7:ee:56:0a:9e:b6:8e:96:0d:62:b8:6e:
                    74:0d:de:83:99:24:80:05:56:93:6a:b3:2c:67:b0:
                    18:8e:ac:83:01:1a:f1:ca:4f:bd:a8:dc:35:90:5f:
                    cb:09:24:0d:27:f1:69:b0:42:c9:e7:6f:92:4a:7e:
                    30:3d:01:72:58:e8:1f:68:e9:d1:54:9a:f5:11:c6:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:37:58:36:B2:9F:BE:D2:02:71:B5:8A:75:9A:1C:5D:49:AE:3A:4D
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030623a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:80:4b:d5:ff:63:99:2d:dc:25:24:dc:39:81:c8:18:2e:ad:
         7a:b8:64:cf:f3:1a:e1:7f:6f:20:a1:88:ba:6f:3a:e9:c0:e5:
         df:7f:e7:84:51:df:9e:bd:ed:ba:74:b3:dd:ce:0d:59:7f:6d:
         9e:83:3f:11:7b:55:da:99:58:ba:34:74:2e:52:60:6a:0e:ee:
         a9:d9:d3:66:a5:aa:f2:c0:3c:fc:55:b7:42:42:be:18:a2:b5:
         39:0a:ec:3e:61:2f:24:20:a0:a6:47:9f:a0:14:d4:79:44:05:
         9f:de:a6:54:70:1e:8c:cc:61:b2:8f:c2:43:e8:f0:a3:3d:0e:
         2f:f6:e4:d0:92:a1:42:69:27:8c:6e:ef:7e:25:f3:1e:aa:24:
         db:9e:43:74:c5:e2:87:a5:62:46:d6:da:77:65:8e:3e:ac:54:
         2e:06:6e:e5:3d:24:01:f3:85:e5:4b:c5:79:d3:60:5e:22:a8:
         32:b2:50:6f:3e:8c:58:ba:d2:9c:ff:b1:a7:46:bb:c0:e0:9e:
         aa:55:15:01:f9:3a:0a:10:fb:67:60:c3:7e:24:a9:24:68:64:
         eb:cd:bc:a8:53:66:29:84:f8:4b:c5:01:59:a2:3d:ed:1a:be:
         0e:7e:6a:92:52:d5:36:9c:bf:1b:90:ce:e1:5f:e0:0d:8f:ea:
         5d:b9:60:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net