Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633330303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633330303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          pN0FxchaYqNpEyveXysni/TymUxkzrDfnutVSnkQz6o=
Subject key identifier:   0C:5E:84:5B:2C:63:4C:29:0F:51:5A:59:EF:74:57:A0:B0:2E:A3:1C
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       6504C7B92D2A07A7CA7A25ABE180A367219A6483
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633330303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:06 +0000
ROA not before:           Thu 17 Apr 2025 14:30:06 +0000
ROA not after:            Thu 16 Apr 2026 14:35:06 +0000
asID:                     272951
IP address blocks:        2803:6990:c300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:04:c7:b9:2d:2a:07:a7:ca:7a:25:ab:e1:80:a3:67:21:9a:64:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:06 2025 GMT
            Not After : Apr 16 14:35:06 2026 GMT
        Subject: CN=0C5E845B2C634C290F515A59EF7457A0B02EA31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:d9:70:cb:54:84:b9:0a:3a:a4:2f:b5:19:
                    74:3f:91:20:94:f6:b5:8c:14:ed:05:cc:ea:9c:12:
                    e7:e8:b1:91:25:fd:18:2c:f5:74:1f:8f:97:b1:49:
                    56:ce:df:9f:62:c0:3f:ec:c8:a2:5c:84:43:3d:9f:
                    37:02:4c:f8:0e:06:88:8f:78:bd:a0:00:61:52:ff:
                    2b:c9:4f:74:e5:ac:f5:9e:77:56:74:7e:84:f0:32:
                    f5:81:2c:b2:78:b6:59:db:9d:d1:34:6a:ba:6f:de:
                    e3:91:39:b5:97:cf:a6:44:80:0e:c7:42:de:c0:85:
                    45:26:d9:77:34:b3:fb:b4:8d:fa:2b:cb:af:dc:f0:
                    a0:a0:08:b1:ca:b6:5b:a0:38:4a:b4:5c:aa:c9:1a:
                    4f:b7:48:77:ae:40:65:9e:f6:e6:f0:0c:1d:0e:d9:
                    f2:4d:19:2c:15:2a:b1:54:13:0f:90:5c:aa:e4:8c:
                    02:64:0c:41:31:05:a1:44:c6:ef:c2:95:e0:cc:3b:
                    1f:dd:0d:c1:12:e5:02:cf:0b:23:4d:2c:7e:77:d3:
                    c0:2b:99:f6:e5:2e:e6:27:d3:4b:27:c0:eb:df:96:
                    98:45:7e:33:d4:50:38:c5:58:88:14:9f:02:41:2c:
                    84:0a:d2:30:97:14:54:0c:a8:66:6c:76:44:b0:90:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5E:84:5B:2C:63:4C:29:0F:51:5A:59:EF:74:57:A0:B0:2E:A3:1C
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633330303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:13:51:7f:50:68:b2:70:a4:52:f5:d2:57:48:8b:c4:9c:
         ad:b9:05:9c:1c:50:b1:48:c6:db:10:57:68:a2:bc:7a:84:e1:
         89:ce:15:d7:15:82:54:ee:aa:dc:cc:df:ee:40:7c:90:69:01:
         fd:cb:58:57:d1:94:c7:10:dd:f0:27:57:bd:e9:a6:a0:dc:79:
         0f:b1:01:83:18:b1:a4:4c:fc:0c:3b:98:3f:da:fc:f8:ed:dd:
         ac:67:f5:69:e0:20:c8:63:50:86:dd:5d:e8:05:ef:22:2d:24:
         ff:99:20:a5:f1:e7:c6:f2:b6:ec:e0:24:a0:eb:f6:ea:1c:82:
         ee:cd:ae:0b:d6:67:13:a4:09:b0:36:80:10:66:71:46:46:a4:
         59:3a:43:51:2b:32:8e:41:b9:9c:95:5c:6c:87:68:37:b4:04:
         01:d1:48:e0:18:4f:fd:b9:bb:e8:4d:0f:57:43:e7:33:be:d0:
         0a:09:3b:8b:9b:55:6a:4f:6d:fe:56:3f:26:02:8e:58:c9:81:
         39:27:1f:fd:3f:12:5e:ef:c7:0b:9f:f8:eb:64:94:74:9e:99:
         11:20:5b:dd:ec:03:84:2c:c0:a3:f6:65:e6:a0:60:25:a7:6b:
         33:01:08:a4:9d:62:09:0e:40:92:9c:13:87:9a:10:5e:d2:23:
         08:ca:39:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net