Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032653a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032653a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          acSTyjFjW8AujQ9/hNOQPITt3rACj5q7+6LT1FCjJ5Q=
Subject key identifier:   86:EF:81:65:21:B2:E7:F8:58:ED:98:46:06:2A:19:0B:A4:D1:C1:3B
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       422BC8B5D5C84993626E08169F6144EEFBE38C32
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032653a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:10 +0000
ROA not before:           Thu 17 Apr 2025 14:30:10 +0000
ROA not after:            Thu 16 Apr 2026 14:35:10 +0000
asID:                     272951
IP address blocks:        2803:6990:a02e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:c8:b5:d5:c8:49:93:62:6e:08:16:9f:61:44:ee:fb:e3:8c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:10 2025 GMT
            Not After : Apr 16 14:35:10 2026 GMT
        Subject: CN=86EF816521B2E7F858ED9846062A190BA4D1C13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:8a:00:30:55:5e:fb:8f:51:80:d7:de:03:
                    47:cf:fb:8d:96:bc:e0:d2:f2:2e:de:4a:a8:a3:13:
                    46:94:aa:68:92:5b:05:cb:73:24:4f:ce:e2:45:27:
                    c0:4d:6c:c7:64:9e:1e:55:8f:bf:3c:3b:af:c1:75:
                    1d:ad:19:97:24:a5:fb:68:4d:fa:a3:34:aa:92:d0:
                    cb:26:96:e6:70:66:a0:44:bf:ab:be:ce:6c:69:2d:
                    62:b0:e1:24:60:b2:41:f5:db:03:0e:18:44:2c:7a:
                    47:3b:60:2b:74:ca:78:f3:94:3c:7b:98:21:e9:cb:
                    36:3b:ee:76:6c:c3:bd:71:2d:4e:77:af:5f:a7:67:
                    b6:77:5d:aa:6a:3b:32:8f:e7:b9:5d:dd:70:d9:43:
                    60:3d:a4:d7:6d:da:1f:67:98:74:68:b0:0b:c2:74:
                    37:31:24:c4:47:d6:07:3e:4b:b4:c8:04:73:59:f3:
                    25:c4:93:fe:38:54:e2:44:bb:90:e3:1d:dd:8b:ca:
                    68:3d:95:84:3b:1f:99:2f:41:15:ba:44:ba:24:06:
                    7a:bd:5a:b8:94:09:b8:6d:f6:eb:26:1c:74:d5:79:
                    32:0b:dd:65:2c:40:36:2f:30:a5:82:09:14:48:93:
                    22:2b:35:dd:5b:ad:f0:28:f0:84:80:ee:6d:8b:f4:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EF:81:65:21:B2:E7:F8:58:ED:98:46:06:2A:19:0B:A4:D1:C1:3B
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032653a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a02e::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:89:de:24:ac:1f:a5:cb:71:52:3c:7a:8f:8e:99:a1:71:d1:
         fb:7d:35:46:92:e6:26:ee:44:05:ca:f9:75:f1:20:64:a1:13:
         2c:a5:8d:fe:a4:72:69:c4:62:4d:8d:56:be:50:6e:d9:ab:86:
         00:82:0b:11:74:ad:ab:1b:45:99:f5:eb:20:e3:70:88:25:d5:
         50:df:25:8b:c8:85:80:4d:0f:d9:72:2d:67:7d:ef:76:51:1d:
         35:26:3f:b7:a5:ce:47:90:c4:9f:ab:aa:b5:b0:98:c7:ef:12:
         3a:a4:27:b6:52:0b:42:aa:52:16:e8:fb:1c:1d:f9:be:08:b7:
         51:a2:d4:3a:48:28:82:65:40:c8:3c:4c:61:81:ca:67:b2:9a:
         fc:29:9a:e7:32:ff:30:0a:a9:a8:42:33:4e:b0:69:01:ee:b2:
         9d:56:f0:fc:fb:23:63:b1:5d:4e:cc:fb:b4:85:b4:0b:00:da:
         f5:72:39:63:79:b4:32:90:c2:3b:be:78:29:db:64:cb:3f:27:
         d1:65:f1:a1:68:48:d3:c7:fb:d4:48:04:3c:bd:3f:02:e0:da:
         d2:be:4b:8e:cb:97:3d:4f:92:5c:df:29:2e:78:b8:96:1e:f4:
         80:1c:4f:73:d0:7d:62:49:70:ee:a9:0f:89:2a:b4:f8:33:28:
         7d:37:27:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net