Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030353a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613030353a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          mXcMsYLYDsN8l9wrVSYBEpRICK6FauPlJSUDmhPhl0k=
Subject key identifier:   15:77:B9:43:7A:5F:28:66:DB:7F:85:7B:68:E0:5D:C1:B2:4D:3C:D6
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       53AE37155C3C611A2C7A0519E33289E0A55F6237
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030353a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:17 +0000
ROA not before:           Thu 17 Apr 2025 14:30:17 +0000
ROA not after:            Thu 16 Apr 2026 14:35:17 +0000
asID:                     272951
IP address blocks:        2803:6990:a005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 06:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ae:37:15:5c:3c:61:1a:2c:7a:05:19:e3:32:89:e0:a5:5f:62:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:17 2025 GMT
            Not After : Apr 16 14:35:17 2026 GMT
        Subject: CN=1577B9437A5F2866DB7F857B68E05DC1B24D3CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:a9:09:a3:bd:bf:30:f8:53:20:6b:77:30:
                    42:53:bb:0d:49:a2:70:1b:bf:0f:50:e7:78:56:cd:
                    0c:07:1e:db:bc:1f:51:11:96:c4:b3:4c:1a:6b:1c:
                    90:cb:fa:ed:a3:b7:70:09:bf:51:39:c4:05:c0:90:
                    f7:11:6d:0b:01:9a:08:0e:4d:6e:a9:58:67:04:2a:
                    4d:ca:8a:74:42:ed:44:bf:48:77:54:79:9d:48:75:
                    6c:e7:97:54:e2:a6:13:37:c4:b4:53:48:6f:f7:4f:
                    8b:b1:51:34:d7:e3:46:a9:b7:c3:9b:d8:13:81:c4:
                    10:a3:3a:60:31:00:f2:68:ce:af:fb:14:f9:71:91:
                    53:d6:6e:7c:fb:8c:76:09:ec:19:7e:33:e8:cd:c0:
                    19:a8:a4:d4:1b:d4:39:f1:75:51:f5:41:3e:44:57:
                    3f:15:5d:a8:ed:39:1d:ab:00:6e:5d:19:db:5b:52:
                    56:48:09:a9:e9:4c:21:b6:50:83:7e:e4:14:c7:6b:
                    cb:c6:b6:2a:77:b9:ef:b0:12:66:97:6b:51:59:4f:
                    fe:49:2f:ca:f3:31:a1:8f:2a:63:60:79:5c:23:1b:
                    5b:7d:48:49:b6:70:3d:db:dd:c3:e4:b4:c7:d3:0e:
                    9d:89:d8:a8:eb:f2:20:bd:64:a3:60:60:95:d6:4d:
                    5f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:B9:43:7A:5F:28:66:DB:7F:85:7B:68:E0:5D:C1:B2:4D:3C:D6
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030353a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a005::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:94:68:0a:05:71:b3:98:06:8a:23:42:5e:30:3b:be:c4:50:
         98:8a:83:6d:01:55:c8:a0:bb:c6:22:77:07:47:4c:dc:54:6e:
         ea:7a:9b:0a:11:5f:3f:9e:a8:91:a3:7d:96:97:bc:62:92:c1:
         a0:3c:47:05:ab:1a:31:5f:78:83:40:13:d4:1d:bc:42:ab:cb:
         f5:6d:f1:21:95:30:42:5b:58:fd:15:a2:f0:8e:3e:95:1d:a9:
         2c:bb:cf:15:bf:21:88:6d:8a:43:9f:b6:71:7f:17:67:04:28:
         60:45:2b:f6:5f:a3:47:8d:72:10:44:42:40:e0:47:d8:29:54:
         7f:fa:7f:d2:b1:b0:8f:00:45:ec:05:a3:2a:f7:cd:25:6b:53:
         18:39:16:13:ef:94:0d:00:65:ae:ae:99:f8:82:da:77:d7:b7:
         c5:a1:2b:de:48:4b:ff:ea:cb:27:bf:6e:e9:0a:1c:39:04:cd:
         73:45:b7:de:62:dc:2f:6e:fb:8c:7e:7f:fa:24:9d:c8:18:d5:
         45:2d:b2:f5:d1:38:32:ae:c2:d5:4d:ce:78:b7:c6:95:1a:47:
         a0:27:26:db:2f:49:d8:53:f8:6a:de:49:19:4d:8c:fe:c4:f3:
         ba:b2:4d:09:97:92:0f:1d:27:e6:94:f6:75:e3:6a:02:8c:5a:
         d6:ad:40:01
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUU643FVw8YRosegUZ4zKJ4KVfYjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNTA0MTcxNDMwMTdaFw0yNjA0MTYxNDM1MTdaMDMxMTAvBgNV
BAMTKDE1NzdCOTQzN0E1RjI4NjZEQjdGODU3QjY4RTA1REMxQjI0RDNDRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4KkJo72/MPhTIGt3MEJTuw1J
onAbvw9Q53hWzQwHHtu8H1ERlsSzTBprHJDL+u2jt3AJv1E5xAXAkPcRbQsBmggO
TW6pWGcEKk3KinRC7US/SHdUeZ1IdWznl1TiphM3xLRTSG/3T4uxUTTX40apt8Ob
2BOBxBCjOmAxAPJozq/7FPlxkVPWbnz7jHYJ7Bl+M+jNwBmopNQb1DnxdVH1QT5E
Vz8VXajtOR2rAG5dGdtbUlZICanpTCG2UIN+5BTHa8vGtip3ue+wEmaXa1FZT/5J
L8rzMaGPKmNgeVwjG1t9SEm2cD3b3cPktMfTDp2J2Kjr8iC9ZKNgYJXWTV+PAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUFXe5Q3pfKGbbf4V7aOBdwbJNPNYwHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMwMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoAUwDQYJKoZIhvcNAQELBQADggEBAImUaAoFcbOYBoojQl4wO77E
UJiKg20BVcigu8YidwdHTNxUbup6mwoRXz+eqJGjfZaXvGKSwaA8RwWrGjFfeINA
E9QdvEKry/Vt8SGVMEJbWP0VovCOPpUdqSy7zxW/IYhtikOftnF/F2cEKGBFK/Zf
o0eNchBEQkDgR9gpVH/6f9KxsI8ARewFoyr3zSVrUxg5FhPvlA0AZa6umfiC2nfX
t8WhK95IS//qyye/bukKHDkEzXNFt95i3C9u+4x+f/okncgY1UUtsvXRODKuwtVN
zni3xpUaR6AnJtsvSdhT+GreSRlNjP7E87qyTQmXkg8dJ+aU9nXjagKMWtatQAE=
-----END CERTIFICATE-----
Generated at Thu May 8 15:43:48 2025 by rpki-client