Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031663a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031663a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          CV0mXSyKSLVmgfBbVnp0ON01q5eLpqbXu9b6Fhivfy8=
Subject key identifier:   41:A3:36:EC:1F:24:82:E4:EF:2D:3A:D6:3C:08:FC:30:A5:69:6E:FF
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       4F5B852DEC0CCA48DD24C639CBDFBAC41217CF45
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031663a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:14 +0000
ROA not before:           Thu 17 Apr 2025 14:30:14 +0000
ROA not after:            Thu 16 Apr 2026 14:35:14 +0000
asID:                     272951
IP address blocks:        2803:6990:a01f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5b:85:2d:ec:0c:ca:48:dd:24:c6:39:cb:df:ba:c4:12:17:cf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:14 2025 GMT
            Not After : Apr 16 14:35:14 2026 GMT
        Subject: CN=41A336EC1F2482E4EF2D3AD63C08FC30A5696EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:c2:f1:02:91:8b:c8:7b:7f:72:eb:43:1d:
                    1f:30:52:01:23:7c:96:73:04:d6:0c:41:3d:42:05:
                    af:45:4e:aa:b5:3f:fa:bb:82:ab:46:fc:ca:05:9d:
                    e8:1a:7b:a9:82:ce:43:8a:54:05:7e:22:dd:d4:41:
                    06:d8:ae:24:93:7b:35:ee:f7:51:2d:59:56:c6:52:
                    35:ca:d6:f1:07:ff:f5:5f:64:8b:73:1a:7b:6f:da:
                    bf:6b:90:0b:3d:91:69:ec:19:a4:60:54:54:0c:64:
                    4f:66:07:7e:84:22:91:e5:86:09:c8:2d:1d:9b:64:
                    9e:bd:70:b5:de:4a:6a:ce:6d:32:57:02:8f:d6:d3:
                    35:a7:09:44:74:9e:3a:1a:48:4f:6e:38:77:b9:e3:
                    22:58:33:d2:1d:45:16:68:24:64:14:22:95:97:2d:
                    d3:6a:18:d2:83:bb:de:35:12:fc:70:d8:6d:f5:71:
                    8d:d9:8f:6b:58:ea:2d:b0:06:fa:cc:15:7b:af:c9:
                    ac:79:70:30:66:0f:3c:a6:e0:e6:14:70:c2:1b:fd:
                    0e:a7:cd:e6:45:79:1f:ff:8b:2b:2f:ec:f9:83:ba:
                    33:b6:ff:f7:25:67:6a:07:55:62:ea:ac:03:7f:2e:
                    76:54:2f:f4:4b:c2:05:75:74:0a:03:29:f6:0f:6c:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:36:EC:1F:24:82:E4:EF:2D:3A:D6:3C:08:FC:30:A5:69:6E:FF
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031663a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a01f::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:ac:41:c2:33:29:5c:46:0d:39:1b:16:16:93:f8:fe:f3:b9:
         77:20:be:53:c6:d9:f6:8f:e0:9a:a4:39:81:e6:92:33:25:11:
         11:b1:5a:81:c5:39:ad:a1:da:a9:06:90:ed:18:8b:d2:de:5d:
         dd:15:9e:29:a5:cf:0b:1f:50:a3:94:18:a8:64:f9:7a:7d:03:
         6e:7a:d8:95:99:bc:93:77:f8:71:6c:d9:c2:b7:e4:dd:e4:27:
         fe:21:c7:b4:b3:5d:54:cb:19:3e:19:d0:53:93:f4:b2:1a:bb:
         65:73:66:70:a1:30:a3:f9:af:90:f3:ef:54:64:49:29:38:aa:
         62:6d:ed:b9:31:22:9d:ef:36:22:1a:0f:95:84:5c:96:ef:95:
         11:cd:6d:42:73:34:49:4b:63:6c:a4:05:2d:d0:9b:7a:ed:fa:
         fa:55:a2:c4:55:fc:93:2f:71:89:9f:5d:31:28:92:76:ca:48:
         3e:56:ab:92:fe:39:77:fe:ea:e5:cb:e1:a2:30:3b:b9:f6:03:
         55:65:53:12:90:82:bc:7b:b6:45:6b:d1:02:68:45:c5:ea:16:
         45:a5:97:47:50:e3:19:76:51:3a:9a:50:cd:0e:f4:d3:c3:4c:
         da:32:50:cd:a0:01:7a:e9:d1:b6:cc:2e:51:d0:b3:c9:eb:f1:
         57:5c:b4:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net