Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032323a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032323a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          v3Q9TOmqKhSxM6UuyfDmcKRuUvlebF3JMxlUfNqxb9o=
Subject key identifier:   45:1E:9D:A7:EA:93:CC:A7:CD:72:2A:99:34:0C:F2:25:96:8B:43:7D
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       713E0FA8F500CB16EBFA711252477C95EB123EAE
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032323a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:02 +0000
ROA not before:           Thu 17 Apr 2025 14:30:02 +0000
ROA not after:            Thu 16 Apr 2026 14:35:02 +0000
asID:                     272951
IP address blocks:        2803:6990:a022::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3e:0f:a8:f5:00:cb:16:eb:fa:71:12:52:47:7c:95:eb:12:3e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:02 2025 GMT
            Not After : Apr 16 14:35:02 2026 GMT
        Subject: CN=451E9DA7EA93CCA7CD722A99340CF225968B437D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:51:49:5c:5b:fe:a6:7c:d9:1b:06:7d:1c:
                    11:0f:c9:8c:06:cd:5f:c7:54:36:e6:01:b3:7d:a4:
                    40:9d:e7:c5:94:29:c8:c0:1b:f1:34:32:f1:3b:9d:
                    c7:c6:86:3e:7b:5b:8a:ef:92:f0:64:31:2a:8b:9f:
                    84:68:d2:04:c6:84:2e:64:bc:53:27:d4:92:11:f3:
                    fa:51:f6:bd:08:60:1e:db:97:a8:36:33:99:27:9f:
                    8c:59:c2:4c:ae:d5:dc:aa:b2:40:2e:ee:6b:57:22:
                    2b:83:03:77:5b:58:55:d6:82:02:4e:b3:97:dc:89:
                    3a:03:81:cd:c4:a5:22:c1:ff:fd:3e:e0:c7:82:98:
                    9d:dc:0d:34:eb:d3:95:b3:a5:46:72:b3:fe:77:ae:
                    3c:9d:9d:35:6e:13:1b:77:d8:7a:62:96:e2:19:8f:
                    b5:4b:e5:dc:37:d0:c0:54:58:4d:ca:b5:c3:49:22:
                    9f:18:64:e0:6c:f6:3f:81:16:7b:ec:c6:87:a8:ad:
                    30:c4:93:70:be:be:87:50:50:5e:85:26:fd:0a:b4:
                    21:7f:9c:67:43:f8:32:03:a8:ff:2b:b4:87:61:da:
                    a9:4f:7a:4f:a0:bf:25:d7:aa:96:54:9d:89:8e:97:
                    c2:ac:06:4d:e3:11:03:e5:cd:93:0b:07:8b:f0:7e:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1E:9D:A7:EA:93:CC:A7:CD:72:2A:99:34:0C:F2:25:96:8B:43:7D
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032323a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a022::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:12:6f:47:0c:41:a1:4d:40:5c:1c:ef:ec:6d:a4:d6:4b:ba:
         bc:4b:39:b2:68:37:0e:e4:ab:f8:30:f8:87:1e:b1:0a:b5:8b:
         48:e0:90:88:3a:d6:4e:42:a2:a4:ac:a6:44:37:fd:f8:a2:d7:
         17:db:9a:4a:c4:bb:0a:0f:62:fa:3a:0f:8f:ec:18:f9:40:7b:
         e2:c6:63:73:06:c3:82:e1:63:94:e2:7c:e7:db:1a:b3:0b:5a:
         5d:ba:fe:c6:e8:1d:f0:e6:69:87:88:81:f3:9b:2c:90:6c:1b:
         80:6c:28:6a:16:c6:aa:c7:61:c1:c2:a9:d3:10:06:a0:1e:3d:
         a1:93:6e:a6:6b:b0:15:11:7c:a0:1a:61:6b:3e:46:99:52:22:
         77:78:53:09:59:e0:0e:46:f2:e4:30:aa:b9:93:c3:f6:0e:2c:
         4a:ed:e5:25:af:74:8d:2a:ad:30:5b:f4:85:94:ce:0f:d3:6e:
         3d:ed:ff:57:6f:34:1a:8e:a9:6e:b6:d5:23:ae:ce:4d:23:ef:
         33:c8:25:b4:3a:c4:a0:71:d3:04:9e:48:a3:d0:6e:29:bc:06:
         8d:86:44:e2:3e:4f:e6:d9:5d:b2:c1:b4:3b:28:9f:ba:73:81:
         25:15:f4:4a:22:98:70:56:dd:fd:30:ce:c5:dc:04:93:f8:3d:
         e5:ab:1c:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net