Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031333a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031333a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          4IynAkp/cssLEgTip1nfFbV22xN+2j1MTPCXL39xA50=
Subject key identifier:   C9:6E:E6:C4:62:94:F8:78:0A:63:7A:26:87:90:1A:0B:38:09:67:D4
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       27365C82F2D6F118ED651312C95A78BB4BA6DBA4
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031333a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:18 +0000
ROA not before:           Thu 17 Apr 2025 14:30:18 +0000
ROA not after:            Thu 16 Apr 2026 14:35:18 +0000
asID:                     272951
IP address blocks:        2803:6990:a013::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:36:5c:82:f2:d6:f1:18:ed:65:13:12:c9:5a:78:bb:4b:a6:db:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:18 2025 GMT
            Not After : Apr 16 14:35:18 2026 GMT
        Subject: CN=C96EE6C46294F8780A637A2687901A0B380967D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:c3:32:6f:a5:57:9e:ad:21:5d:0f:a8:2a:
                    77:11:e0:f5:73:54:e4:ee:bb:57:07:f4:77:ff:a9:
                    4c:93:10:bf:7f:98:9b:a4:dc:6f:9a:2d:5c:30:78:
                    4a:5b:19:97:6a:c0:17:30:d6:51:11:a6:1d:3f:1f:
                    1e:c6:f1:80:ac:82:4d:57:b8:74:31:70:72:b6:0c:
                    36:76:d3:71:ed:59:9b:aa:70:66:3b:8f:21:16:db:
                    18:ce:27:29:f9:a4:f2:a2:ea:a3:e7:fd:2d:f5:d8:
                    27:bf:b1:e6:42:1e:f4:cd:2f:05:c7:e8:bf:5b:84:
                    07:04:bf:c2:da:e0:d6:1e:3f:e5:bc:b5:31:9f:d2:
                    d9:56:b2:ce:c3:8a:ec:78:08:44:ec:8f:1b:69:b4:
                    7d:a2:b9:48:7c:13:4f:e2:d6:d3:1a:a2:bb:b3:65:
                    8e:99:6a:61:0d:7d:e0:12:74:aa:41:65:c0:51:ef:
                    7d:9f:fd:1b:e2:41:71:22:3f:49:27:cf:37:85:03:
                    61:e6:4c:aa:11:24:ef:56:f0:88:72:aa:ba:5e:96:
                    65:9b:a5:61:5f:d8:b8:94:46:1a:05:6e:a4:59:28:
                    40:01:98:01:7e:55:50:d5:74:84:03:3b:a7:8e:07:
                    2d:4f:c5:a1:f1:f9:80:f1:24:41:d4:23:55:67:73:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6E:E6:C4:62:94:F8:78:0A:63:7A:26:87:90:1A:0B:38:09:67:D4
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031333a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a013::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:55:bf:f1:9b:31:6a:30:77:ef:18:16:2a:fa:cb:69:e4:ff:
         92:01:39:fa:43:c6:9a:4b:5f:b8:cb:28:58:91:61:c1:92:83:
         8d:47:11:0a:1b:67:07:a8:7e:bb:d9:a4:6a:33:07:04:9c:5c:
         54:86:81:c8:44:0d:a5:8a:a4:33:01:70:a9:16:ae:c3:fc:bb:
         31:37:8b:ff:64:de:cc:47:f1:e0:35:43:f8:a2:a5:2e:fc:46:
         86:35:80:19:93:03:39:de:90:44:78:e1:3f:a6:f9:8a:ae:1d:
         ad:16:7e:b1:49:eb:31:91:7f:35:bb:14:cf:e7:5b:64:e1:d5:
         71:3f:dd:08:52:b9:ed:3a:d7:7d:be:08:2e:11:70:aa:e7:e6:
         2a:37:88:93:35:43:6b:3d:a4:b1:6c:0c:15:fe:75:ae:84:24:
         35:cb:a9:92:b7:ba:22:30:75:b0:67:36:ca:19:47:6a:4d:9e:
         4a:b7:b1:52:26:05:6e:75:66:3e:f2:2c:4d:7d:c2:3b:73:8e:
         8e:58:48:e5:cb:1e:01:e6:a6:99:4b:32:c8:55:5b:8b:15:07:
         b4:41:36:73:02:15:46:a9:3a:9a:8b:f3:d0:3d:69:d2:3c:0d:
         4d:6d:70:47:83:36:39:c3:35:fc:0f:41:c7:26:5a:99:13:57:
         c2:28:53:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net