Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a646530313a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a646530313a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          jHT7rcFGOAD4y9H+SgUB9zw1olqy+OEfCmuxEvbAtPQ=
Subject key identifier:   F1:4E:2B:AA:8D:F2:94:E9:47:84:B0:C8:7B:AD:71:9A:BA:4B:64:17
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       5A78DC72541D88151BAED9627F223D49612C24D6
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a646530313a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:20 +0000
ROA not before:           Thu 17 Apr 2025 14:30:20 +0000
ROA not after:            Thu 16 Apr 2026 14:35:20 +0000
asID:                     272951
IP address blocks:        2803:6990:de01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:78:dc:72:54:1d:88:15:1b:ae:d9:62:7f:22:3d:49:61:2c:24:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:20 2025 GMT
            Not After : Apr 16 14:35:20 2026 GMT
        Subject: CN=F14E2BAA8DF294E94784B0C87BAD719ABA4B6417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:50:af:89:c3:a3:d8:16:95:48:77:ec:3c:
                    a8:b8:12:47:ac:ea:97:6c:25:df:38:89:32:f4:92:
                    0d:03:1c:80:a5:87:a9:a1:3d:14:d5:66:cf:29:94:
                    88:cc:9d:c1:71:51:31:2d:8c:78:eb:dd:9a:ba:d6:
                    59:ab:38:86:3f:b1:d5:a5:75:b2:13:b5:57:5b:cd:
                    8b:d8:b0:ab:18:80:5a:fb:be:6d:75:64:8f:cc:fd:
                    b9:c1:b3:06:7e:3c:07:74:ea:fb:cb:c9:af:30:f5:
                    7f:fd:db:74:f9:89:f2:37:5a:35:c6:f2:b6:9a:34:
                    7c:47:be:7a:42:3b:ff:7b:ed:3f:12:3d:7b:b4:eb:
                    68:e1:0a:15:d8:da:49:e9:b3:2c:c8:15:d2:f1:62:
                    6b:7f:6a:e0:14:23:4a:e3:d6:41:4b:ea:1c:0e:e4:
                    79:e6:70:f5:35:ac:5a:17:ea:1f:1b:16:d0:24:62:
                    fa:56:18:44:cc:25:8a:cd:0b:2a:6c:b3:01:8f:02:
                    fd:cb:e0:37:4c:e0:85:dc:1c:a4:0a:b2:f1:87:61:
                    5e:94:f0:00:38:9f:02:c1:79:ce:b0:96:08:e3:70:
                    a6:fb:ea:0e:9b:52:28:0e:b2:2e:33:97:f3:4a:49:
                    cb:dd:6f:94:a5:c9:d5:46:93:08:25:ee:a4:34:1a:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4E:2B:AA:8D:F2:94:E9:47:84:B0:C8:7B:AD:71:9A:BA:4B:64:17
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a646530313a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:de01::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:a7:18:78:08:6c:6b:ae:31:b4:08:82:4c:61:bd:58:3a:
         4d:fc:e6:89:06:24:48:99:f0:3d:13:d5:bf:af:e4:00:58:d7:
         4c:64:33:97:2d:80:a3:01:f1:c3:4e:38:59:7d:13:9e:3b:44:
         cf:46:37:47:18:fb:95:ea:4a:dd:68:a1:58:ca:0d:14:4e:5a:
         f9:40:98:c1:f9:c6:45:a7:27:57:f2:3e:dd:30:85:f8:64:92:
         d6:65:81:5f:d9:78:69:d7:d5:8e:a7:98:e7:6b:8b:48:ec:e0:
         af:ca:81:27:af:c4:15:eb:03:c5:eb:82:04:27:87:ad:93:4e:
         72:ce:b9:79:96:64:e8:66:16:61:de:08:99:6b:1c:c8:f5:38:
         23:fc:d5:f2:f9:3b:d9:cd:d0:2f:3b:83:fc:f7:a3:5a:cb:18:
         ff:17:99:53:99:b0:98:8f:bb:e4:b0:61:55:b2:0f:cd:06:39:
         4f:67:79:ba:54:ea:57:a6:b1:6f:aa:43:4d:9a:c2:eb:c0:dc:
         92:4a:8b:c2:e9:27:a2:a2:12:01:1a:5c:d3:57:40:a7:c7:08:
         68:81:6b:27:42:49:0e:a3:39:d8:af:c4:98:f1:91:06:ed:05:
         f7:cb:94:1f:f5:03:cd:2b:27:ae:33:e0:2b:bf:ab:f1:91:11:
         ec:09:2c:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net