Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031353a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031353a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          xD9x3Qz/rvHKA8JkE+aMrJEhnip//P4aCUdVj9ly65w=
Subject key identifier:   EF:74:18:60:7F:4B:19:67:81:27:1B:DB:50:FC:E6:91:B4:F6:88:BF
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       0360A907786F45FEC38F2B3202E839A9BB7F8633
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031353a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:07 +0000
ROA not before:           Thu 17 Apr 2025 14:30:07 +0000
ROA not after:            Thu 16 Apr 2026 14:35:07 +0000
asID:                     272951
IP address blocks:        2803:6990:a015::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:a9:07:78:6f:45:fe:c3:8f:2b:32:02:e8:39:a9:bb:7f:86:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:07 2025 GMT
            Not After : Apr 16 14:35:07 2026 GMT
        Subject: CN=EF7418607F4B196781271BDB50FCE691B4F688BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:30:c6:d6:eb:81:f2:6c:b8:ca:29:0e:52:
                    e6:ac:a2:5f:14:0a:de:51:dc:7d:a0:37:05:d9:08:
                    f4:a2:0b:fc:fa:c2:f8:1d:15:b4:e6:bd:f7:f7:20:
                    7b:39:09:f3:00:ca:af:09:90:f0:5c:22:b2:27:04:
                    d7:1c:f1:b3:e7:0e:0d:04:79:fa:c0:a3:70:41:92:
                    2d:95:a4:f2:88:dd:12:1b:0c:ce:ee:a6:61:5f:96:
                    7c:77:ca:fa:8c:59:05:a4:d3:cd:ef:b4:35:26:f0:
                    d3:29:af:f8:34:f7:d1:3c:bc:bb:35:20:3b:0c:26:
                    db:b3:e6:4f:39:bd:c5:18:b3:99:a4:27:9b:2b:ed:
                    16:f6:ee:27:40:02:14:c5:0c:3c:a1:39:b1:4c:5f:
                    12:cf:1c:99:ee:e3:f0:d1:3a:67:4c:26:a0:71:8f:
                    91:9c:3e:a4:fe:08:78:41:e1:69:dd:f6:b0:a1:a6:
                    35:5b:38:15:30:07:5e:38:6d:d2:e3:fe:7e:ee:9f:
                    8d:8a:6e:72:c5:10:06:73:78:ee:ec:e1:bc:fe:dd:
                    19:c4:5c:db:f9:02:da:b5:53:6b:81:90:f3:23:eb:
                    8c:64:0a:e0:9c:e7:16:a2:61:b3:af:1c:9f:9c:c4:
                    ab:65:ca:53:7a:01:13:78:63:a4:ca:69:43:27:3a:
                    50:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:18:60:7F:4B:19:67:81:27:1B:DB:50:FC:E6:91:B4:F6:88:BF
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031353a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a015::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:d0:4d:31:27:e6:60:b0:df:8f:35:5b:1e:bb:8a:9a:3f:d6:
         27:7c:7a:d0:56:fe:e5:42:3f:93:e4:12:67:1b:97:5e:7a:6d:
         9c:00:18:7e:a2:fb:fd:5d:97:31:45:1b:32:4a:d2:29:4b:b2:
         6d:2e:71:50:38:8c:f2:f5:29:46:da:53:d8:61:73:18:a2:ea:
         c9:bb:d1:9d:23:b4:fe:f7:96:ed:3d:a4:4d:7f:d7:88:0e:22:
         ae:1a:d8:e8:3a:20:4c:32:b3:20:fb:f6:8f:f1:73:29:c6:fe:
         71:e1:1d:e4:60:4f:aa:3d:ed:3a:96:31:7a:08:5c:15:51:e0:
         7b:c9:1d:4e:66:e3:78:04:05:3e:fd:0c:96:ae:76:05:e9:fc:
         ec:ee:34:19:ff:81:3a:ea:2b:d6:82:97:5c:ed:16:68:e1:a1:
         25:06:06:2d:fd:ad:18:7c:1d:7d:e0:cb:40:81:c8:95:b8:61:
         e1:0e:ac:db:a5:76:a7:94:dd:9f:e1:fe:34:9a:db:e1:99:4a:
         c9:02:9c:ab:fc:aa:e5:e4:18:d2:f7:f5:72:f6:56:ac:a6:2b:
         ab:91:de:73:08:cb:76:da:23:71:59:ed:0b:90:b7:07:38:69:
         0f:14:64:bf:3b:a5:a8:b8:17:f7:1c:8c:da:ce:c8:92:06:ea:
         05:68:35:fd
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUA2CpB3hvRf7DjysyAug5qbt/hjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNTA0MTcxNDMwMDdaFw0yNjA0MTYxNDM1MDdaMDMxMTAvBgNV
BAMTKEVGNzQxODYwN0Y0QjE5Njc4MTI3MUJEQjUwRkNFNjkxQjRGNjg4QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tTDG1uuB8my4yikOUuasol8U
Ct5R3H2gNwXZCPSiC/z6wvgdFbTmvff3IHs5CfMAyq8JkPBcIrInBNcc8bPnDg0E
efrAo3BBki2VpPKI3RIbDM7upmFflnx3yvqMWQWk083vtDUm8NMpr/g099E8vLs1
IDsMJtuz5k85vcUYs5mkJ5sr7Rb27idAAhTFDDyhObFMXxLPHJnu4/DROmdMJqBx
j5GcPqT+CHhB4Wnd9rChpjVbOBUwB144bdLj/n7un42KbnLFEAZzeO7s4bz+3RnE
XNv5Atq1U2uBkPMj64xkCuCc5xaiYbOvHJ+cxKtlylN6ARN4Y6TKaUMnOlCLAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU73QYYH9LGWeBJxvbUPzmkbT2iL8wHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMxMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoBUwDQYJKoZIhvcNAQELBQADggEBAADQTTEn5mCw3481Wx67ipo/
1id8etBW/uVCP5PkEmcbl156bZwAGH6i+/1dlzFFGzJK0ilLsm0ucVA4jPL1KUba
U9hhcxii6sm70Z0jtP73lu09pE1/14gOIq4a2Og6IEwysyD79o/xcynG/nHhHeRg
T6o97TqWMXoIXBVR4HvJHU5m43gEBT79DJaudgXp/OzuNBn/gTrqK9aCl1ztFmjh
oSUGBi39rRh8HX3gy0CByJW4YeEOrNuldqeU3Z/h/jSa2+GZSskCnKv8quXkGNL3
9XL2VqymK6uR3nMIy3baI3FZ7QuQtwc4aQ8UZL87pai4F/ccjNrOyJIG6gVoNf0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net