Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030643a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613030643a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          lsSjY5dRxQjoaEq8eLmM6+Hhx9OtWHwss4odeQcVfoA=
Subject key identifier:   5B:5E:D1:AF:97:FB:05:DC:9B:83:29:C3:41:D7:A4:68:2B:1B:B0:A2
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       2DF624CB1BDD522C7A6B0ABA187607EEE9EB73E5
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030643a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:12 +0000
ROA not before:           Thu 17 Apr 2025 14:30:12 +0000
ROA not after:            Thu 16 Apr 2026 14:35:12 +0000
asID:                     272951
IP address blocks:        2803:6990:a00d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f6:24:cb:1b:dd:52:2c:7a:6b:0a:ba:18:76:07:ee:e9:eb:73:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:12 2025 GMT
            Not After : Apr 16 14:35:12 2026 GMT
        Subject: CN=5B5ED1AF97FB05DC9B8329C341D7A4682B1BB0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:fd:2d:34:b4:db:c8:64:a7:e7:e4:0e:5f:
                    95:3c:7d:5e:78:a6:0a:87:2e:57:04:3a:e1:79:e1:
                    ad:93:87:89:21:50:cb:f7:f3:e5:33:7a:c1:fa:43:
                    f0:2e:7c:ee:c7:83:61:42:5d:6d:60:66:21:8d:0a:
                    7a:ba:ca:99:46:5d:98:66:a5:04:e3:11:ff:62:2e:
                    9c:62:33:0e:9d:15:b5:b0:e3:22:f9:ed:49:4f:fc:
                    6f:a7:48:8c:0d:2a:86:49:2e:db:47:48:c8:47:82:
                    ab:20:99:dc:40:07:1e:b0:db:54:8b:af:de:67:f3:
                    5c:fb:32:a2:6a:73:45:a5:1a:bd:0e:84:71:d0:e1:
                    bf:b9:df:ea:48:e3:03:3f:fd:4c:f4:21:e6:70:0d:
                    9f:83:d5:1a:ab:10:77:55:33:aa:a7:27:48:7e:a0:
                    92:3f:bf:30:21:a1:92:2d:d7:c7:de:50:4a:a1:2a:
                    e2:de:9f:af:da:bb:90:94:37:c7:df:6b:39:d1:93:
                    e8:7e:6a:b1:83:57:36:92:19:51:e1:60:df:7b:a8:
                    48:13:06:b8:fd:78:8e:de:5c:f0:0e:14:b1:cb:41:
                    25:b3:ba:18:23:24:41:1d:4f:4a:38:91:5a:68:0e:
                    d5:d4:e2:7b:29:c2:c0:51:61:f7:94:f6:21:a1:bc:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5E:D1:AF:97:FB:05:DC:9B:83:29:C3:41:D7:A4:68:2B:1B:B0:A2
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030643a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a00d::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:60:b4:20:6e:81:28:fc:a7:e2:d9:b2:f5:c9:e2:ea:ea:c9:
         6e:fe:d8:6d:bb:fc:3c:fb:e5:f8:ed:64:2c:44:c7:af:df:98:
         03:49:14:01:33:9b:79:5a:54:31:ab:db:25:b9:37:ad:a1:ba:
         75:22:61:04:8e:b3:fb:d7:0a:aa:98:ff:1b:e9:a0:86:24:3d:
         fa:77:0f:87:62:a3:f4:64:0e:a8:27:0b:73:93:03:66:bf:85:
         0e:ae:f0:de:35:80:21:b0:41:69:87:23:b4:21:9f:bf:9f:c7:
         4e:b2:6e:c7:7b:3a:a1:e4:e6:46:c6:d1:66:8e:56:e7:45:ec:
         2f:cb:7a:3c:7a:41:7f:52:dc:0d:57:6a:c5:89:56:79:ff:33:
         55:07:7f:3c:03:29:32:de:5b:46:fb:0d:ea:82:ba:42:2d:5a:
         9e:26:39:6e:8c:7b:c8:37:e8:85:ea:10:ae:36:7d:78:f4:28:
         c1:4a:57:16:d2:1e:09:4d:08:27:bc:25:8f:da:74:94:30:4f:
         e8:b3:bc:b2:37:5a:e4:01:6c:c8:fc:20:54:c5:1b:cd:7c:a5:
         4b:e3:3d:89:93:75:5b:ed:4c:ca:aa:aa:13:6d:1e:a6:a0:cc:
         f7:5e:be:df:08:de:e7:17:c6:b8:48:a5:84:9f:50:8d:f9:1b:
         32:26:f2:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net