Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633430303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633430303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          QOawD1Ypiw9/O6uxYkG24IFWfMiA7HbupQMJNw0jwPA=
Subject key identifier:   78:83:47:EB:09:5F:6D:C1:29:A1:3B:BE:BA:60:D4:1B:F4:ED:75:E5
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       100C072AA8DA57D42679C7991111AF429AE51942
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633430303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:19 +0000
ROA not before:           Thu 17 Apr 2025 14:30:19 +0000
ROA not after:            Thu 16 Apr 2026 14:35:19 +0000
asID:                     272951
IP address blocks:        2803:6990:c400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0c:07:2a:a8:da:57:d4:26:79:c7:99:11:11:af:42:9a:e5:19:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:19 2025 GMT
            Not After : Apr 16 14:35:19 2026 GMT
        Subject: CN=788347EB095F6DC129A13BBEBA60D41BF4ED75E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:50:18:19:56:d3:ee:74:11:a3:d5:18:97:
                    ab:85:34:34:0c:f4:31:29:b3:ed:66:a1:72:96:db:
                    59:28:a8:08:d0:f8:d9:07:e1:48:5e:2a:27:03:bb:
                    28:e8:35:d8:cf:26:74:af:25:1e:89:77:4c:d8:8d:
                    6f:20:2b:6d:d3:fc:d9:b0:05:a5:72:d4:4a:14:e7:
                    aa:1f:15:86:17:24:4f:fa:1f:13:b2:ab:df:07:de:
                    d0:bc:39:d4:08:2f:c9:e5:b8:10:08:b5:ea:d5:60:
                    c7:8e:da:1d:04:43:c0:1e:61:ac:d8:18:38:ca:c9:
                    09:4a:5f:9c:21:b0:5e:76:ac:52:ab:47:2a:d9:30:
                    3b:1f:b8:1a:88:de:de:58:c7:6b:c8:23:cd:e7:6f:
                    c6:91:9a:84:bb:5d:23:96:84:ba:29:92:02:56:7d:
                    ba:2d:e9:82:d5:28:52:57:1a:98:61:67:b3:b0:ab:
                    e9:8f:ea:17:ef:ef:15:07:8c:3e:6b:d7:f0:db:1e:
                    78:e4:fc:3d:8e:12:29:28:24:0d:df:95:72:3b:d2:
                    2f:2b:1f:5c:f6:f7:fd:56:cf:a1:5e:89:eb:93:69:
                    15:02:77:01:da:29:b4:04:2b:2e:8b:cd:ef:9c:b7:
                    38:23:bc:41:eb:d6:72:a1:94:e7:71:a9:81:c2:b0:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:83:47:EB:09:5F:6D:C1:29:A1:3B:BE:BA:60:D4:1B:F4:ED:75:E5
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633430303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:79:9b:89:75:90:46:09:9d:9b:e9:bd:36:29:a3:7d:fa:21:
         66:79:f0:62:ea:28:0a:bd:f7:bd:9a:d4:2c:29:68:01:2b:56:
         fc:0b:e8:cc:d5:8f:8f:6c:1c:9d:89:3d:ea:b8:71:e8:95:55:
         92:7d:bd:b1:74:06:4d:9c:94:84:cb:5e:11:e1:1e:a9:45:07:
         87:01:a8:61:ef:03:a7:53:b2:46:c6:c4:2a:07:37:07:72:90:
         24:e1:39:4b:41:6e:7c:0f:20:53:0c:b1:38:19:b7:f4:e4:48:
         d4:32:1b:66:f9:84:b5:78:3b:06:24:10:36:af:cd:0f:c8:98:
         84:30:c4:6e:8b:5d:6b:a7:d2:db:b4:65:39:27:b9:1b:fb:f6:
         da:8e:04:80:cb:c9:66:ef:14:7b:ea:69:f4:54:90:a9:3e:c0:
         72:26:47:ee:f8:28:d6:49:88:d1:32:5f:38:b1:b9:b2:fa:f7:
         36:d0:a9:04:72:5e:0b:ae:b6:65:e0:1f:8e:82:9d:48:6c:c0:
         8e:59:7b:f3:85:7a:d2:38:ca:fe:17:a7:76:05:d5:2f:29:01:
         3e:e7:ad:b0:05:ff:d6:6a:0e:36:eb:80:05:13:f3:3b:1b:73:
         89:87:9c:5c:9f:00:a3:4b:61:e5:e1:00:74:af:32:17:60:fa:
         be:72:df:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net