Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033613a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613033613a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          sBH5glVwIuSb6O0dowVIeybJVvPmuf0jfP349Zki+u0=
Subject key identifier:   48:08:DA:C0:FC:67:AC:36:07:85:5F:33:71:2E:81:0C:4A:EB:D3:D3
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       20E040286D931E758105B544B38BD18D8CC16A9E
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033613a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:25 +0000
ROA not before:           Thu 17 Apr 2025 14:30:25 +0000
ROA not after:            Thu 16 Apr 2026 14:35:25 +0000
asID:                     272951
IP address blocks:        2803:6990:a03a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e0:40:28:6d:93:1e:75:81:05:b5:44:b3:8b:d1:8d:8c:c1:6a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:25 2025 GMT
            Not After : Apr 16 14:35:25 2026 GMT
        Subject: CN=4808DAC0FC67AC3607855F33712E810C4AEBD3D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:8d:0d:93:7f:d1:3f:52:a6:51:e8:67:8e:
                    48:c2:c0:41:2c:08:0e:5f:26:09:d6:5c:50:88:0b:
                    ce:f9:45:a6:72:eb:42:8c:b5:8b:2d:37:68:8c:51:
                    17:33:77:48:40:69:b4:83:41:ae:1e:6e:94:b9:de:
                    e4:66:3c:72:5c:c4:30:3e:26:91:4b:4b:36:c8:32:
                    3f:88:56:0f:af:f3:6a:8f:e3:2c:56:ca:f7:98:fb:
                    f0:e1:fb:69:5e:dd:e6:9f:b0:77:11:a2:16:5f:c3:
                    fa:17:98:34:ad:c8:07:58:3a:07:b1:bd:68:d3:60:
                    ba:41:7b:37:e2:9f:de:78:2e:c2:53:8d:6c:a5:e9:
                    e6:2e:54:bf:07:bb:3d:30:a3:73:99:9a:b2:da:f1:
                    97:8b:6c:6f:1c:92:73:32:81:be:a5:a0:21:f4:85:
                    b4:3e:79:4f:d9:d7:e4:08:02:e0:f9:7b:49:e3:36:
                    f2:a7:f1:23:cd:44:6b:cd:90:f4:91:09:58:27:9e:
                    ab:ba:ae:b3:73:34:8b:40:18:49:cc:c3:8f:ec:93:
                    3b:dc:23:e1:32:b1:9c:2a:48:0d:ad:a5:f0:79:79:
                    9c:15:e1:fc:8d:3d:8d:7a:fa:a3:30:72:3d:c3:a5:
                    00:6b:b7:45:62:3c:73:f0:c2:7e:7e:b1:1a:57:14:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:08:DA:C0:FC:67:AC:36:07:85:5F:33:71:2E:81:0C:4A:EB:D3:D3
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033613a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a03a::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:07:35:12:6c:d9:8d:e4:cf:52:ae:71:9c:bb:b2:1b:20:
         9d:42:24:27:95:e9:3e:2b:53:bd:bf:66:2f:ae:e6:a5:64:76:
         80:62:16:07:c3:4d:6e:81:92:e1:9e:83:88:42:63:d8:85:89:
         c1:71:16:46:a7:52:7d:68:88:40:98:a6:66:c5:52:c0:c8:f6:
         d0:67:d7:14:d2:26:4b:0f:d5:05:6d:c8:a5:f9:2c:f7:68:7a:
         98:e8:38:9e:f3:97:c4:cf:80:e1:db:20:51:16:10:94:7c:da:
         f3:63:a7:75:12:9a:da:a4:f7:b8:b2:68:15:b9:14:ed:0d:28:
         aa:3e:52:a8:09:59:32:81:bc:50:22:be:47:3a:8c:59:67:54:
         68:78:75:4f:24:75:7e:90:25:5d:5d:ba:09:de:a3:df:8d:d9:
         8a:d3:07:54:d7:82:6f:a7:bf:33:f7:06:d1:1c:da:ad:b2:99:
         fc:64:f7:09:96:6c:ca:ab:63:21:a2:97:aa:e8:59:88:16:67:
         19:36:43:83:4d:3d:24:8f:c5:7a:fb:ce:b6:a7:43:82:ae:21:
         58:e8:df:01:1b:b1:a7:05:2f:58:8f:78:d0:fe:12:58:cb:31:
         bc:bd:7d:d6:19:2d:86:d8:f4:05:17:e0:f4:19:e8:39:85:35:
         b7:76:9e:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net