Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633930303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633930303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          MMEozEaUrf5lITbTjeyzMinoUhvHEo+8TGjYzo1cFVY=
Subject key identifier:   B7:EC:8E:79:A8:E8:DF:84:73:D4:41:4D:B9:4E:F3:8F:12:1B:5E:A9
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       25BAA2E389DC45E2DA37C7FB96B4D67E3E78D041
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633930303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 17 Apr 2025 14:35:16 +0000
ROA not before:           Thu 17 Apr 2025 14:30:16 +0000
ROA not after:            Thu 16 Apr 2026 14:35:16 +0000
asID:                     272951
IP address blocks:        2803:6990:c900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 02:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ba:a2:e3:89:dc:45:e2:da:37:c7:fb:96:b4:d6:7e:3e:78:d0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Apr 17 14:30:16 2025 GMT
            Not After : Apr 16 14:35:16 2026 GMT
        Subject: CN=B7EC8E79A8E8DF8473D4414DB94EF38F121B5EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:1a:32:0d:45:7e:78:ad:1c:d6:a7:9a:90:
                    4b:56:d2:84:b7:53:95:23:9a:df:75:f1:d4:44:10:
                    ce:74:53:cf:36:32:57:cd:a6:af:45:0c:de:fb:fe:
                    c0:0f:6c:83:b0:0b:d8:4f:41:95:89:3a:c9:12:53:
                    2a:82:2a:37:bf:87:c7:c1:8e:72:24:5b:7d:b4:3b:
                    be:13:65:8a:fb:91:30:a1:ac:2e:c7:b7:2d:5a:8c:
                    b0:88:ff:f1:fc:f5:b0:48:59:1c:01:11:ab:dd:00:
                    49:75:39:23:5a:91:dc:f5:06:e3:27:24:92:69:f1:
                    04:6a:21:21:16:9b:f6:97:67:b7:73:cf:5c:cb:58:
                    55:34:23:07:08:27:ff:19:5b:6b:70:d4:cb:7c:77:
                    44:e0:3c:1d:9c:d7:8e:34:a1:21:56:38:37:07:6c:
                    6e:41:f8:c8:57:1c:0f:0c:59:60:dd:da:98:e8:21:
                    bc:d8:e2:47:28:2d:18:8c:f9:1d:6d:b2:1a:91:66:
                    fd:bb:5d:9f:e5:f4:ec:ed:d5:04:96:32:ed:a9:cb:
                    35:36:0b:13:6d:1b:94:7a:7c:81:e2:71:ee:5e:38:
                    d7:22:b4:f9:49:21:85:f3:99:13:e8:6c:c2:12:2e:
                    97:92:87:3a:7f:24:2d:20:cf:b9:26:85:f1:58:12:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:8E:79:A8:E8:DF:84:73:D4:41:4D:B9:4E:F3:8F:12:1B:5E:A9
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633930303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c900::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:b3:38:4c:7c:ce:53:93:ad:b6:f4:ea:87:c7:af:b4:7c:b8:
         15:20:58:c0:09:34:8f:4a:09:46:67:28:b8:3e:63:86:3e:7a:
         4a:88:e4:2e:32:a1:18:9a:67:4b:4e:5f:f0:f8:ba:7d:20:6d:
         b9:0c:e0:0d:bc:16:23:f6:60:9e:9a:03:72:8e:c3:7f:8e:14:
         8f:5e:e7:55:c6:c1:d7:fb:c8:7a:f8:f8:3a:bb:d6:a5:a6:da:
         d0:59:ed:ff:6c:ac:db:fc:80:93:98:4b:9f:58:8f:60:68:36:
         4e:8a:df:b6:85:00:4a:75:73:db:ee:71:2f:26:5d:f8:4e:c5:
         8c:49:92:8d:a0:42:b8:12:a7:d7:36:89:b3:2d:46:2e:a4:c2:
         33:14:00:ca:fe:ac:17:7a:39:1b:46:33:ed:10:8e:1c:c9:37:
         df:d1:75:44:2b:e2:c6:6d:e6:60:fc:b6:72:ef:75:fb:1c:1e:
         32:9b:45:8e:27:c4:98:ac:3b:22:5b:af:e2:3b:bf:90:11:94:
         2d:d2:08:8e:69:d2:55:1b:37:76:d2:31:67:f2:8a:95:9d:6f:
         3c:79:fc:d3:08:f4:ca:ee:c4:ae:b0:d6:d0:d5:21:f9:94:a8:
         07:7f:b4:27:03:b1:18:e8:be:18:67:c2:f2:77:a9:c0:2e:22:
         fc:f6:92:f2
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUJbqi44ncReLaN8f7lrTWfj540EEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNTA0MTcxNDMwMTZaFw0yNjA0MTYxNDM1MTZaMDMxMTAvBgNV
BAMTKEI3RUM4RTc5QThFOERGODQ3M0Q0NDE0REI5NEVGMzhGMTIxQjVFQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRoRoyDUV+eK0c1qeakEtW0oS3
U5Ujmt918dREEM50U882MlfNpq9FDN77/sAPbIOwC9hPQZWJOskSUyqCKje/h8fB
jnIkW320O74TZYr7kTChrC7Hty1ajLCI//H89bBIWRwBEavdAEl1OSNakdz1BuMn
JJJp8QRqISEWm/aXZ7dzz1zLWFU0IwcIJ/8ZW2tw1Mt8d0TgPB2c1440oSFWODcH
bG5B+MhXHA8MWWDd2pjoIbzY4kcoLRiM+R1tshqRZv27XZ/l9Ozt1QSWMu2pyzU2
CxNtG5R6fIHice5eONcitPlJIYXzmRPobMISLpeShzp/JC0gz7kmhfFYEnmZAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUt+yOeajo34Rz1EFNuU7zjxIbXqkwHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjMz
OTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA2mQyTANBgkqhkiG9w0BAQsFAAOCAQEAeLM4THzOU5OttvTqh8evtHy4
FSBYwAk0j0oJRmcouD5jhj56SojkLjKhGJpnS05f8Pi6fSBtuQzgDbwWI/ZgnpoD
co7Df44Uj17nVcbB1/vIevj4OrvWpaba0Fnt/2ys2/yAk5hLn1iPYGg2TorftoUA
SnVz2+5xLyZd+E7FjEmSjaBCuBKn1zaJsy1GLqTCMxQAyv6sF3o5G0Yz7RCOHMk3
39F1RCvixm3mYPy2cu91+xweMptFjifEmKw7Iluv4ju/kBGULdIIjmnSVRs3dtIx
Z/KKlZ1vPHn80wj0yu7ErrDW0NUh+ZSoB3+0JwOxGOi+GGfC8nepwC4i/PaS8g==
-----END CERTIFICATE-----
Generated at Sun May 18 03:55:41 2025 by rpki-client