Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032643a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032643a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          I1pWe4sO2MTxljcaGCDHKWSAvHXFa3mCzKhvH+c/Zuw=
Subject key identifier:   78:CC:3F:A4:54:42:EB:E0:7D:37:C0:83:98:E5:DB:B7:FD:9F:48:4B
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       63B3833A65CB06BB1E3B3885F98FB0080C87C7F4
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032643a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:27 +0000
ROA not before:           Thu 17 Apr 2025 14:30:27 +0000
ROA not after:            Thu 16 Apr 2026 14:35:27 +0000
asID:                     272951
IP address blocks:        2803:6990:a02d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b3:83:3a:65:cb:06:bb:1e:3b:38:85:f9:8f:b0:08:0c:87:c7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:27 2025 GMT
            Not After : Apr 16 14:35:27 2026 GMT
        Subject: CN=78CC3FA45442EBE07D37C08398E5DBB7FD9F484B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:b1:7c:10:b0:82:95:e8:ff:b8:09:f4:01:
                    fa:bc:da:65:0c:a7:d8:3c:f7:a6:1e:60:03:3d:d2:
                    40:d7:da:09:ba:8c:8c:fd:c1:e5:94:dc:2a:b0:53:
                    9b:16:bb:62:85:63:29:cc:a0:ac:22:89:c5:0f:da:
                    ec:1a:06:95:c3:ef:c9:96:f9:60:78:db:f7:a3:97:
                    c6:23:c1:9f:01:e9:0a:38:a8:e2:13:db:2c:c0:0e:
                    35:2b:62:85:8b:4d:5f:51:53:ea:86:11:ae:68:95:
                    9e:7e:4c:ea:cf:66:87:ca:e1:fe:7f:58:5a:56:9b:
                    a6:41:9e:73:79:9d:4f:43:93:42:ca:38:3e:58:3d:
                    40:d8:88:56:03:5c:a9:0b:95:bb:e2:9c:ca:5c:a4:
                    7a:a1:f6:a5:6f:46:c0:e4:a9:94:aa:6d:eb:dd:85:
                    14:e6:84:a4:4e:e7:7c:cd:40:13:5e:4a:8e:07:77:
                    5c:59:41:28:39:c2:47:98:61:f8:73:79:70:f0:d2:
                    ab:fa:cc:ec:09:c0:95:e7:e0:4b:40:33:92:00:f8:
                    3c:e5:a1:3f:97:dc:c8:23:70:ba:d7:f7:3b:01:a2:
                    9b:e7:19:ef:b3:e3:8f:08:ab:65:23:c5:6e:13:a8:
                    f9:be:1c:a7:a7:29:d5:b6:ad:cd:31:99:d9:b4:48:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CC:3F:A4:54:42:EB:E0:7D:37:C0:83:98:E5:DB:B7:FD:9F:48:4B
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032643a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a02d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:2e:81:63:b5:42:d0:1a:45:37:8b:5e:59:24:89:9c:c0:
         31:76:d0:d9:52:56:9f:f7:b0:2a:c0:c3:e8:82:a3:c0:26:a1:
         95:9b:e3:94:08:2c:b7:68:e6:6b:a6:8a:76:80:e6:7e:49:c4:
         a3:93:df:73:38:42:19:05:bd:07:10:6c:90:e9:57:e5:95:ce:
         ea:b0:f9:84:83:09:77:49:e5:14:32:20:7a:db:e9:bf:30:35:
         5c:c7:9e:91:c5:52:93:d2:b6:b6:2c:e8:93:1d:a9:6b:a5:f7:
         af:0b:be:d5:a5:f7:11:ea:cc:7b:be:b9:31:7f:81:e6:02:5f:
         f4:a7:b1:de:da:97:43:99:07:d6:d4:ff:f0:7b:81:b0:83:83:
         c9:6e:ce:2c:5d:e6:26:95:6a:ea:dc:4c:6d:42:a6:48:2b:c4:
         2c:cc:bd:bc:e7:df:cf:bb:60:f1:cd:1f:96:f8:27:af:79:72:
         63:4c:ca:81:96:bd:be:65:a4:7e:37:d4:61:25:e6:46:d9:d6:
         f9:1e:7a:1c:24:45:4d:6a:55:8d:3d:7b:86:15:67:eb:71:d4:
         ee:05:fe:ac:c6:8a:83:0a:46:26:cb:1f:00:10:a1:64:03:31:
         4e:31:4e:9f:13:0f:ee:ad:fa:1f:f8:63:dc:1f:3d:1d:26:03:
         45:8f:55:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net