Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633630303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633630303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          4dY5pIQbVFcO5HydzcN0XO9qYIYud47VMO5Knt8XPBY=
Subject key identifier:   71:70:4E:98:E5:02:B9:EB:48:92:BE:97:2C:01:62:93:C5:A9:E2:3B
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       04F405442B1247BEC79F9B0B751667961C2075A9
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633630303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:02 +0000
ROA not before:           Thu 17 Apr 2025 14:30:02 +0000
ROA not after:            Thu 16 Apr 2026 14:35:02 +0000
asID:                     272951
IP address blocks:        2803:6990:c600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f4:05:44:2b:12:47:be:c7:9f:9b:0b:75:16:67:96:1c:20:75:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:02 2025 GMT
            Not After : Apr 16 14:35:02 2026 GMT
        Subject: CN=71704E98E502B9EB4892BE972C016293C5A9E23B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:5e:30:57:9d:33:7f:c0:d5:77:70:bd:d9:
                    ce:cd:14:bc:fa:6c:d8:49:4d:46:70:e8:dd:9f:88:
                    e7:ae:cd:3d:e4:e0:5f:17:e8:61:bd:22:f1:7c:ee:
                    91:d5:00:dd:e9:e1:3b:d5:4e:73:65:84:48:b4:2b:
                    15:9a:9e:6c:2a:20:ab:9f:0b:38:b5:f5:8d:70:2a:
                    fe:3f:56:a3:fc:ca:56:70:a4:3e:c1:9b:a0:34:3d:
                    2b:ad:58:f0:24:f7:d6:9f:fb:bb:f2:39:95:20:a6:
                    3a:98:75:fd:c9:46:e4:07:ca:ab:db:7d:d5:c9:3b:
                    53:4d:bd:d8:b9:28:83:24:1c:2c:ed:b7:a4:30:99:
                    fe:04:b1:80:bb:62:25:ee:13:2e:df:38:ec:c3:51:
                    e4:1a:08:d0:41:82:0c:f9:19:6d:7b:91:1a:8d:d9:
                    75:b2:e5:5f:c4:14:e1:d4:17:c1:13:53:92:6b:d0:
                    54:bb:a1:8f:0f:21:31:36:2a:41:f2:3d:33:9f:5f:
                    f3:32:12:8d:08:af:8b:55:7f:29:fc:80:fc:53:54:
                    88:60:2b:b6:62:6f:0a:03:fa:ed:12:03:dd:a7:f3:
                    f0:e2:8b:e4:39:0e:67:9b:30:14:5e:0f:ef:1f:64:
                    cf:bc:7c:68:1a:37:e1:a7:c9:0b:fb:57:ad:e0:a9:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:70:4E:98:E5:02:B9:EB:48:92:BE:97:2C:01:62:93:C5:A9:E2:3B
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633630303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c600::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:ad:ff:56:a3:86:e2:9f:58:f4:df:84:d4:65:dd:8c:31:
         d3:eb:d9:4a:27:77:11:5f:06:f4:28:8c:ac:8f:5b:8a:7e:ad:
         a2:1a:1b:48:53:8d:e6:ff:71:89:5f:71:f0:ee:60:f3:10:e1:
         43:9a:db:bf:6e:cf:bc:9e:3e:a4:45:82:a8:2f:4d:f1:ac:b1:
         86:30:de:69:f9:2b:86:08:64:2d:4c:10:4d:ed:7f:a7:6d:61:
         2b:01:6e:21:b8:63:72:e3:f3:70:12:48:5f:6d:bf:ce:0d:bd:
         20:a6:cd:1a:f8:a5:6c:0f:70:ce:5c:5d:15:03:1a:8e:af:08:
         6f:1e:0f:a9:6f:31:0c:a0:d3:99:8f:31:2a:27:76:6f:87:0f:
         b7:3e:dd:36:8d:0e:93:8e:e0:68:d1:40:c1:f2:33:97:ac:6d:
         f3:8e:ed:57:85:1e:c3:8d:9c:e0:fe:f1:8c:24:56:d6:bc:08:
         06:7f:ec:3c:d0:b8:c5:1a:42:60:21:e8:7e:fa:d9:59:64:15:
         69:8f:88:a5:8d:51:d0:57:05:74:a5:02:6b:96:76:4d:d5:12:
         94:49:05:1b:9e:e8:2b:18:b6:c7:96:7e:c8:d0:7d:d6:dd:c5:
         fc:2a:65:23:f2:c8:ad:c4:83:ee:4d:22:09:37:8c:10:71:d3:
         81:1a:11:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net