Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032353a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032353a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          fBO88TJ+ZWIci8t9TxuGYsBHhU0UKQoTR5jS+RT2ZI0=
Subject key identifier:   61:8B:87:BB:BC:0C:52:4C:53:C0:45:38:EB:61:87:EC:7D:90:E5:9D
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       389F0048159A9431AF356B62CE6EF9C5ACBA8F
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032353a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:19 +0000
ROA not before:           Thu 17 Apr 2025 14:30:19 +0000
ROA not after:            Thu 16 Apr 2026 14:35:19 +0000
asID:                     272951
IP address blocks:        2803:6990:a025::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9f:00:48:15:9a:94:31:af:35:6b:62:ce:6e:f9:c5:ac:ba:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:19 2025 GMT
            Not After : Apr 16 14:35:19 2026 GMT
        Subject: CN=618B87BBBC0C524C53C04538EB6187EC7D90E59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:19:cd:78:f7:27:72:47:06:c5:1b:b6:5a:
                    dc:a9:7c:07:65:d6:ba:0c:32:ea:c0:82:38:43:3d:
                    3f:2d:ef:71:1c:5a:10:8c:8c:b2:97:94:c2:5c:81:
                    d4:3f:0d:e0:e3:e7:20:1d:b7:11:78:e0:77:a3:a4:
                    4a:1d:5c:6e:0e:5c:f3:5d:e9:ca:a3:1b:65:ab:80:
                    c9:4d:46:90:b7:8a:01:4d:32:4c:73:17:98:50:0d:
                    14:5b:4e:23:a9:99:9d:63:c0:1d:7e:16:07:79:07:
                    b6:d7:06:ed:2c:7c:8b:8e:00:fb:22:c5:48:f3:b0:
                    09:0c:c8:69:78:56:34:ea:6d:4f:a1:73:f0:76:a5:
                    de:33:f7:6c:ca:2d:57:84:1d:bc:f1:b6:d6:b1:1b:
                    eb:05:5b:c2:94:e9:b7:e2:56:05:48:50:27:a7:11:
                    9a:79:98:d6:2a:61:50:cd:b7:e1:46:0f:05:cd:b6:
                    66:c9:57:f9:b4:82:8f:ff:2d:5c:df:ae:d7:2f:43:
                    7c:30:af:c4:3d:34:b5:a9:cc:af:17:a8:1c:1d:1e:
                    00:e5:cf:16:2c:3b:0d:c7:4b:50:6f:08:c9:b1:c7:
                    42:0c:3e:ff:92:f2:10:17:b7:f6:0b:24:b2:2c:89:
                    41:67:54:ab:19:9a:e3:b0:53:b4:d3:96:2b:83:ec:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8B:87:BB:BC:0C:52:4C:53:C0:45:38:EB:61:87:EC:7D:90:E5:9D
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032353a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a025::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:32:3b:04:57:0c:a8:93:7d:ec:6d:76:7f:81:18:76:73:55:
         a6:e9:06:cd:d9:8b:49:46:ec:58:31:12:5f:6e:5d:31:42:5a:
         87:24:5a:06:1e:d3:a0:51:a5:b3:4a:bd:5d:1f:46:5a:36:40:
         fd:2e:ad:08:87:a4:35:d1:be:78:a1:2f:cb:70:e3:bb:b3:da:
         b4:d3:38:cf:18:0b:88:e5:85:44:70:31:94:d1:ce:11:5e:e3:
         bb:c5:c4:9a:67:b8:85:8f:51:3b:22:4c:8e:d3:35:73:5e:76:
         8f:38:50:24:9b:d6:28:aa:c9:5c:9b:dc:84:9a:82:50:08:71:
         57:f0:2d:bc:6d:e2:76:b5:19:fa:2f:9d:2c:d7:52:07:01:ba:
         19:83:6f:aa:4f:5e:16:17:6a:53:b0:58:d1:65:72:65:90:b3:
         7a:5c:b9:be:ee:f1:63:f9:e1:71:6e:4c:47:3e:ee:14:23:ec:
         1e:eb:96:6e:15:08:99:c6:81:43:70:9f:be:66:6b:c6:b4:cb:
         0b:8e:50:2d:fe:1e:68:a4:b2:d5:dc:f3:1e:20:63:b1:3b:db:
         e8:a0:63:8b:e2:14:be:b4:f5:d1:3d:cd:7b:01:88:a7:53:1a:
         ff:15:75:53:c4:a7:37:d9:7e:10:69:70:16:44:aa:d6:6d:18:
         fd:39:0b:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net