Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032373a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032373a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          uMvDL96ee7CuL8s2M24gbyZZrLY/QoxzvmIyDDCDErQ=
Subject key identifier:   9D:E7:E6:2E:7D:A1:5A:1D:23:2D:12:EC:55:88:B1:84:96:0E:40:6B
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       3261BA2E0C6A0DA42670A4B3B4AA258A79CAE3C9
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032373a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:26 +0000
ROA not before:           Thu 17 Apr 2025 14:30:26 +0000
ROA not after:            Thu 16 Apr 2026 14:35:26 +0000
asID:                     272951
IP address blocks:        2803:6990:a027::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:61:ba:2e:0c:6a:0d:a4:26:70:a4:b3:b4:aa:25:8a:79:ca:e3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:26 2025 GMT
            Not After : Apr 16 14:35:26 2026 GMT
        Subject: CN=9DE7E62E7DA15A1D232D12EC5588B184960E406B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:cb:4f:68:e0:79:91:ad:8b:cb:e6:1d:a7:
                    6c:ba:04:5d:32:d0:a5:0c:d2:c8:3c:59:19:9a:b6:
                    e0:be:7c:d1:3b:85:ae:08:8a:dc:90:24:18:16:92:
                    d8:3e:cb:79:0d:37:69:fc:ab:32:15:22:90:6d:5f:
                    d0:f1:78:5f:a9:3a:94:1c:a4:12:94:e1:87:1a:e1:
                    34:94:b5:18:79:12:18:4b:35:95:d7:1e:e6:66:b9:
                    80:ae:46:c3:ac:73:2e:56:f5:aa:c3:7d:ac:56:5a:
                    f2:ea:f0:33:ec:e5:43:4e:93:5f:7b:70:69:dc:32:
                    4e:89:8e:db:51:d5:db:75:a8:ed:25:57:35:f9:80:
                    db:12:9e:fc:2e:a1:fe:96:a0:15:f9:70:59:59:87:
                    14:d3:ff:d7:d7:e3:dd:88:8e:79:e6:4e:a9:34:9e:
                    ee:b8:3b:f9:c2:a1:17:3c:cd:c1:d7:c7:39:a2:b6:
                    69:4a:e7:ea:33:90:75:c8:0e:db:df:47:ab:f7:5a:
                    ab:6c:97:f7:82:90:66:56:cc:49:ef:c2:8c:ec:50:
                    88:eb:f5:12:39:20:a4:f4:99:bc:df:25:72:39:33:
                    24:a2:3f:af:46:e8:70:6a:57:a8:41:15:79:26:5d:
                    e2:0b:57:17:21:0e:53:1f:2b:e0:83:07:3d:64:43:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E7:E6:2E:7D:A1:5A:1D:23:2D:12:EC:55:88:B1:84:96:0E:40:6B
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032373a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a027::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:71:94:5f:54:b0:94:27:7d:64:76:dd:32:1c:64:5a:0c:b5:
         93:68:d8:18:3d:7c:16:77:64:0a:05:0b:65:b3:96:86:c4:43:
         73:e3:36:75:55:07:89:39:0d:79:fd:ce:5c:5b:c3:cb:37:fa:
         91:07:7b:a9:75:9e:89:8e:1a:28:55:3b:43:42:75:d8:bf:70:
         91:a2:4d:ae:fd:f6:07:4a:7d:b9:98:12:c0:c1:f0:6e:a7:8d:
         d8:e6:08:fa:39:44:1c:ae:42:04:10:5f:e1:d3:5e:4d:72:9f:
         eb:e3:13:ee:2e:06:30:e3:d9:f2:e8:7d:d3:36:98:08:85:64:
         e7:79:84:1e:73:e6:6e:d8:7d:94:bc:1e:64:59:22:5e:3b:9c:
         fb:39:ca:06:06:ab:4f:6f:d9:a0:41:05:87:c4:58:f1:8b:89:
         74:27:cc:96:9c:70:66:d9:81:4f:23:9e:4d:13:23:4c:ab:c2:
         26:bd:8c:bc:57:29:42:6f:80:12:5b:c7:38:1a:99:45:44:5c:
         78:fe:77:9f:31:60:41:ab:08:40:57:1b:ee:f9:cc:b8:04:0f:
         8c:0c:5c:eb:55:f6:f0:2d:42:05:a3:35:31:98:eb:f0:c3:aa:
         97:6a:89:d2:03:8f:22:d3:fd:3c:ef:52:3a:46:4f:44:74:dc:
         ca:da:dc:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net