Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031653a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031653a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          64dJ8cBQ4c2QebX3JTvkBy/AJ0vr3cfjXVspN/fX+qs=
Subject key identifier:   B2:42:C7:A5:1D:48:FC:CE:5D:69:4D:20:9D:90:7B:B4:32:94:B6:9E
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       761EC414B5AADD98A6EC04D71DC8637DC115A37A
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031653a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:19 +0000
ROA not before:           Thu 17 Apr 2025 14:30:19 +0000
ROA not after:            Thu 16 Apr 2026 14:35:19 +0000
asID:                     272951
IP address blocks:        2803:6990:a01e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1e:c4:14:b5:aa:dd:98:a6:ec:04:d7:1d:c8:63:7d:c1:15:a3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:19 2025 GMT
            Not After : Apr 16 14:35:19 2026 GMT
        Subject: CN=B242C7A51D48FCCE5D694D209D907BB43294B69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:bc:12:9b:ee:3d:2c:46:3d:c8:01:2a:dc:
                    28:98:ad:35:4b:f9:58:5d:4b:22:e4:02:af:85:85:
                    75:60:bc:60:c8:42:a1:51:0b:11:7b:de:a2:86:6b:
                    7b:ae:41:e8:49:c7:a2:20:11:91:61:6f:c7:fe:18:
                    a8:ae:50:0a:80:1f:03:05:dc:b8:60:d6:ad:88:b1:
                    fc:b9:aa:31:5a:7a:b4:22:fc:19:31:44:4e:97:90:
                    3c:24:0e:7b:90:90:e0:3a:55:6e:ba:f7:a7:15:29:
                    7f:c3:0b:78:53:05:5f:ce:2b:fa:20:aa:af:2a:55:
                    e8:74:4a:96:41:0e:c4:ff:44:09:b7:cf:d6:0b:23:
                    60:f3:ef:8d:ba:16:33:08:cb:ea:64:98:7e:02:c7:
                    17:2a:b2:9b:2a:2d:b0:ff:2d:be:d5:9a:28:50:86:
                    c4:75:51:6f:24:c2:02:2d:18:fe:2a:0c:8c:74:f8:
                    d0:2c:2f:56:12:88:c5:e8:fb:3c:23:23:ea:28:34:
                    46:b4:39:13:9a:55:a8:a7:f9:c8:4f:6d:0d:37:95:
                    76:59:53:b0:0a:dd:74:8f:0c:28:a9:b6:69:f0:ba:
                    b2:7a:28:3a:57:ab:18:99:c2:15:83:ae:9c:79:bc:
                    0a:76:da:e0:7f:6a:b2:d4:ac:4d:84:79:d2:af:11:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:42:C7:A5:1D:48:FC:CE:5D:69:4D:20:9D:90:7B:B4:32:94:B6:9E
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031653a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a01e::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:be:6c:73:4a:a1:98:c0:ef:24:88:af:b4:c5:aa:f3:36:ae:
         12:87:76:0c:75:86:1d:d3:2a:44:c6:4f:91:a9:b0:9e:ec:7c:
         34:65:32:76:6f:94:53:eb:19:95:0c:b0:fa:3f:d2:14:b4:5f:
         5d:19:c6:a5:6b:1c:74:14:b1:04:57:94:7e:8c:1a:09:ab:1e:
         38:30:4f:3a:ce:dd:d7:cd:63:f3:8f:e3:8e:99:86:97:20:8a:
         83:ed:1d:30:d8:89:69:c3:86:d1:a7:71:9c:ee:45:14:0d:dd:
         49:27:b1:64:c9:68:58:b0:e1:0c:cc:24:e7:bb:79:47:d7:6b:
         a2:17:06:6f:70:a4:48:41:8f:b3:77:39:17:73:ab:46:a3:d5:
         74:b0:f8:e1:0e:6d:88:04:99:09:b3:a0:b2:16:91:10:b4:e1:
         75:ad:f0:47:ef:0f:af:30:e2:64:77:e8:21:13:d8:da:10:62:
         76:2d:92:d9:26:84:c7:f4:e8:0f:fa:5c:c9:75:0e:aa:fd:ed:
         d7:0f:5d:3f:e2:dd:cb:15:16:37:1d:dd:f9:38:f5:f0:7b:93:
         e3:5a:d0:50:a5:4f:46:f2:92:4a:82:f9:e1:5f:5b:0d:98:c7:
         dd:04:ca:a4:ae:20:c4:ed:84:fc:ff:11:79:7e:c9:7a:3f:33:
         ce:c6:9a:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net