Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a636330303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a636330303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          +A2GAMsYl+0V2cDCaamWFIN0v29Kx30DgH6iebx/DFc=
Subject key identifier:   6E:5C:B0:80:FF:6C:3C:91:29:FD:55:10:A9:12:B6:55:9E:AF:1A:21
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       65BFCB89716354A61601C2628D50CFFD945D3F79
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a636330303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:25 +0000
ROA not before:           Thu 17 Apr 2025 14:30:25 +0000
ROA not after:            Thu 16 Apr 2026 14:35:25 +0000
asID:                     272951
IP address blocks:        2803:6990:cc00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:bf:cb:89:71:63:54:a6:16:01:c2:62:8d:50:cf:fd:94:5d:3f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:25 2025 GMT
            Not After : Apr 16 14:35:25 2026 GMT
        Subject: CN=6E5CB080FF6C3C9129FD5510A912B6559EAF1A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:bc:e7:4f:f6:a7:74:ca:25:e3:03:5c:31:
                    59:43:e2:67:2f:45:58:77:23:d0:f6:68:48:c7:5e:
                    f6:7d:78:f8:63:6d:af:26:3f:18:9b:71:a0:7d:be:
                    2c:42:d7:3a:c8:3b:67:02:9f:2c:16:76:fb:77:37:
                    38:d8:b6:6f:73:f9:44:a2:b9:23:35:98:5f:b7:ac:
                    77:ee:ca:aa:ae:bf:25:fe:b6:86:c4:40:d5:d9:07:
                    df:13:44:f9:98:b9:50:ac:b8:63:36:2e:c1:58:eb:
                    f9:90:cc:e0:e0:0c:a6:b8:d1:76:49:b7:14:2b:c0:
                    46:f2:32:5c:c2:66:12:9e:f6:d4:ec:dc:3f:fc:8a:
                    a5:56:ba:3d:68:53:9e:f8:5c:9a:d6:5c:71:e6:d6:
                    be:25:20:88:47:57:2c:47:d6:fc:19:f4:fa:3d:b9:
                    00:69:36:cc:01:08:06:53:cf:3c:07:a1:53:7b:39:
                    70:23:6d:06:31:3b:8f:b9:1a:e5:f0:a1:6c:0f:ba:
                    cc:6c:4a:34:73:13:17:32:37:23:9b:ca:8c:32:a4:
                    c9:6e:1d:53:56:a2:2c:d5:4c:9b:80:11:38:01:62:
                    48:85:b6:09:f1:ff:1a:5f:34:b3:e2:0e:82:0f:6a:
                    22:75:5a:c4:fe:2c:44:92:24:9d:f6:82:6a:df:e7:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5C:B0:80:FF:6C:3C:91:29:FD:55:10:A9:12:B6:55:9E:AF:1A:21
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a636330303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:cc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:e1:0d:8d:71:30:74:b4:b1:10:bb:85:d6:a7:31:6f:fb:07:
         2a:b0:53:f1:bb:67:84:8a:04:5a:5a:df:14:76:ac:a6:a5:09:
         a0:7c:2e:c9:8e:3d:47:55:b2:48:8e:0f:65:19:37:48:7f:bf:
         a9:5e:83:dc:94:4c:c7:a0:74:c8:8a:5f:8d:2f:64:5a:22:e0:
         23:e1:02:42:58:ff:42:5c:19:24:90:be:26:65:37:11:b6:e7:
         bd:8b:b6:b0:35:c6:80:0f:61:35:dc:55:93:48:ff:d3:2a:aa:
         61:5e:0a:59:32:aa:37:c4:f4:94:41:6c:91:cb:72:36:74:ab:
         aa:fa:14:8a:c1:da:de:d2:cc:81:21:fb:b4:2c:f6:7e:d1:0b:
         36:d1:9d:c3:d1:5b:51:28:35:6a:ae:c5:28:e1:e2:52:48:70:
         c9:b3:ce:cc:bf:2c:4b:f6:e8:35:7d:b1:89:63:45:09:5d:41:
         81:ae:a4:6c:bc:35:0f:bc:a9:8b:b9:bf:06:51:e8:a6:6c:20:
         bd:3e:c7:b5:77:8d:d4:f2:de:b7:97:d8:67:40:e4:7b:0e:eb:
         85:6d:da:ad:74:ea:a9:4c:4d:f1:ce:29:c5:6b:70:d0:b7:31:
         c3:17:7f:86:93:bd:85:6c:27:a3:0d:4b:0e:e5:20:33:a6:4d:
         6b:23:69:11
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUZb/LiXFjVKYWAcJijVDP/ZRdP3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNTA0MTcxNDMwMjVaFw0yNjA0MTYxNDM1MjVaMDMxMTAvBgNV
BAMTKDZFNUNCMDgwRkY2QzNDOTEyOUZENTUxMEE5MTJCNjU1OUVBRjFBMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChorznT/andMol4wNcMVlD4mcv
RVh3I9D2aEjHXvZ9ePhjba8mPxibcaB9vixC1zrIO2cCnywWdvt3NzjYtm9z+USi
uSM1mF+3rHfuyqquvyX+tobEQNXZB98TRPmYuVCsuGM2LsFY6/mQzODgDKa40XZJ
txQrwEbyMlzCZhKe9tTs3D/8iqVWuj1oU574XJrWXHHm1r4lIIhHVyxH1vwZ9Po9
uQBpNswBCAZTzzwHoVN7OXAjbQYxO4+5GuXwoWwPusxsSjRzExcyNyObyowypMlu
HVNWoizVTJuAETgBYkiFtgnx/xpfNLPiDoIPaiJ1WsT+LESSJJ32gmrf53VVAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUblywgP9sPJEp/VUQqRK2VZ6vGiEwHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjM2
MzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA2mQzDANBgkqhkiG9w0BAQsFAAOCAQEAPOENjXEwdLSxELuF1qcxb/sH
KrBT8btnhIoEWlrfFHaspqUJoHwuyY49R1WySI4PZRk3SH+/qV6D3JRMx6B0yIpf
jS9kWiLgI+ECQlj/QlwZJJC+JmU3EbbnvYu2sDXGgA9hNdxVk0j/0yqqYV4KWTKq
N8T0lEFskctyNnSrqvoUisHa3tLMgSH7tCz2ftELNtGdw9FbUSg1aq7FKOHiUkhw
ybPOzL8sS/boNX2xiWNFCV1Bga6kbLw1D7ypi7m/BlHopmwgvT7HtXeN1PLet5fY
Z0Dkew7rhW3arXTqqUxN8c4pxWtw0Lcxwxd/hpO9hWwnow1LDuUgM6ZNayNpEQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net