Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a3a2f33322d3438203d3e20323732393531.roa
File:                     323830333a363939303a3a2f33322d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          gmlz4qyXwyy5bs9Afqb3oVi6qYcyntbTV8ISnF11gvI=
Subject key identifier:   09:1C:04:7D:FE:00:23:A8:BE:5C:1B:D7:68:A3:6B:21:CD:90:21:39
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       4F8D76BE72D6E169197770B98EFA07F942450020
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a3a2f33322d3438203d3e20323732393531.roa
Signing time:             Fri 21 Feb 2025 18:10:38 +0000
ROA not before:           Fri 21 Feb 2025 18:05:38 +0000
ROA not after:            Fri 20 Feb 2026 18:10:38 +0000
asID:                     272951
IP address blocks:        2803:6990::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8d:76:be:72:d6:e1:69:19:77:70:b9:8e:fa:07:f9:42:45:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Feb 21 18:05:38 2025 GMT
            Not After : Feb 20 18:10:38 2026 GMT
        Subject: CN=091C047DFE0023A8BE5C1BD768A36B21CD902139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:cd:ae:61:4f:61:fd:33:a9:da:a5:72:a7:
                    22:fa:cf:34:96:87:2a:12:96:e2:36:88:8a:46:6c:
                    dc:82:7b:e8:df:d3:b2:b7:dd:91:82:15:fa:92:94:
                    88:21:b3:d9:d0:2d:5d:af:f2:5b:45:18:ef:a9:15:
                    56:04:53:69:29:5f:ca:6e:79:e8:ec:d6:11:45:e2:
                    18:66:d2:8c:be:53:c6:76:e9:f9:68:00:39:58:c6:
                    be:41:b7:b4:a9:4e:f5:b3:d0:53:d0:80:34:2f:16:
                    b1:ee:97:13:c3:e8:63:5a:af:a9:23:e5:3f:83:ae:
                    70:fc:4d:ff:ea:83:b5:cb:27:7c:b9:3e:cb:6e:69:
                    8e:fd:cc:04:95:85:7e:74:33:1e:c3:bb:e2:53:7a:
                    e4:d3:78:94:d3:23:c4:71:a9:3e:8b:d3:82:c5:df:
                    63:cc:7a:e5:42:ba:c4:e9:d9:37:a2:72:47:bf:a6:
                    f0:86:73:59:59:e6:a9:30:4e:8a:68:d0:70:0a:23:
                    c0:9b:4f:0c:2c:f7:ca:a5:82:8d:85:97:42:66:8a:
                    fa:ce:aa:99:b5:5f:7e:9b:d2:4a:f9:2d:eb:15:0b:
                    fb:b7:9a:9a:7b:d2:9c:8a:94:78:4d:97:18:d5:e0:
                    c4:0c:02:05:6c:ba:f0:7f:64:bb:8b:ff:9a:f9:22:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:04:7D:FE:00:23:A8:BE:5C:1B:D7:68:A3:6B:21:CD:90:21:39
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a3a2f33322d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:9b:fa:d0:83:fb:0b:ac:8c:c6:51:c6:cf:ab:2e:db:cd:88:
         68:5c:af:38:0a:0a:2b:03:63:f9:aa:05:d9:18:07:a8:d3:94:
         72:5f:07:03:75:98:70:24:10:77:00:0a:df:a6:74:33:8a:f3:
         74:2d:0a:a5:c6:49:66:a8:fb:d9:db:58:4e:75:b0:32:8c:b7:
         dd:a7:bd:e0:f0:18:6b:d2:8f:f1:1c:f7:f6:b5:a2:b0:d8:ce:
         35:1b:83:ae:47:02:6b:0a:7f:22:a4:04:fc:36:7d:30:52:85:
         47:f0:f5:d8:f3:c0:b1:ca:42:d4:d6:a3:e7:ee:7d:d1:fc:14:
         b3:d0:6d:66:51:63:b4:f6:05:22:e8:38:97:4e:73:f8:f7:e3:
         e2:ec:5e:e9:12:f2:ce:8c:5c:5a:04:65:3a:aa:33:80:dd:0a:
         94:b2:98:21:91:61:24:3f:b5:cb:f7:0d:ac:9c:cd:3e:aa:15:
         0d:02:40:32:78:9c:82:12:a2:6f:3c:d5:b7:13:08:d9:cc:c5:
         57:4a:72:76:38:73:c7:81:92:dd:9e:60:2d:c3:6d:46:eb:cb:
         d9:e7:23:2c:58:4f:d6:70:19:8d:d9:9e:9e:f9:10:9b:a2:0f:
         22:c9:68:6a:6d:d5:d5:dd:b9:f1:a7:48:f7:0b:f5:f5:71:35:
         0b:58:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:31 2025 by rpki-client