Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a356563303a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a356563303a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          bHQw0Zx8w9/vZb5S+qvttSxZ09kaCEGnu3Nf7r3OtfE=
Subject key identifier:   92:15:21:70:CD:78:2B:AA:E7:2B:C3:DD:80:D9:08:AD:76:35:BE:DA
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       59E8F6E942D7253723E9DE9F759551FDDF050673
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a356563303a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:36 +0000
ROA not before:           Thu 19 Mar 2026 15:29:36 +0000
ROA not after:            Thu 18 Mar 2027 15:34:36 +0000
asID:                     272951
IP address blocks:        2803:6990:5ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e8:f6:e9:42:d7:25:37:23:e9:de:9f:75:95:51:fd:df:05:06:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:36 2026 GMT
            Not After : Mar 18 15:34:36 2027 GMT
        Subject: CN=92152170CD782BAAE72BC3DD80D908AD7635BEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:73:fd:3f:3f:ad:77:c6:90:2b:22:e0:d1:
                    5d:bb:d9:01:22:5f:bb:d7:66:c2:a7:b6:ae:12:eb:
                    30:6f:51:3f:26:32:87:f5:6e:bb:8a:44:eb:6a:b5:
                    8e:66:1c:f0:0a:ec:00:f4:84:44:bc:e5:cf:8e:f0:
                    6d:ff:4f:17:b7:68:29:52:b5:7d:53:fa:d2:37:ac:
                    99:66:19:95:a2:39:95:83:cb:cc:e7:55:35:53:98:
                    eb:3d:ba:ec:5a:57:4b:ba:27:ca:ce:cb:12:60:2d:
                    88:b1:79:58:cd:25:e7:ab:a6:24:2e:c3:7e:e8:fd:
                    2b:3c:6a:cd:80:6c:1c:40:ab:0f:4b:3e:38:8d:cf:
                    eb:06:1c:2a:8a:e6:e9:a0:7a:26:12:40:69:10:6a:
                    27:7c:2c:ed:19:b6:20:e3:9d:31:02:12:d8:ab:07:
                    a4:fd:d5:42:1e:df:97:08:84:2c:6a:ed:dc:97:16:
                    e3:9f:0a:b5:ea:c0:d4:92:1f:b3:d8:80:08:91:58:
                    56:3b:a0:f1:48:81:b3:df:03:37:66:24:b0:6c:16:
                    12:b6:8a:22:d4:38:f6:57:25:d4:57:e4:b2:79:24:
                    c7:d7:7b:37:1d:ca:a6:00:60:a3:0d:ac:91:da:4b:
                    cb:d4:0c:23:79:97:19:a6:1f:f5:a7:e1:74:29:e6:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:15:21:70:CD:78:2B:AA:E7:2B:C3:DD:80:D9:08:AD:76:35:BE:DA
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a356563303a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:5ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:16:ea:37:a9:5b:0e:cc:40:29:65:05:68:31:99:e3:e2:
         1b:db:40:34:79:c6:0a:ab:50:54:b1:8d:23:37:f2:c8:0b:81:
         18:4f:79:90:c6:54:2d:c9:c2:57:7b:29:6a:58:d6:15:5d:b7:
         05:8b:60:4d:2e:ed:0b:62:8f:01:46:48:2c:0d:07:87:6a:6a:
         1d:f5:e0:d4:7b:2f:47:25:e1:36:51:6d:8b:7f:3e:f3:30:31:
         c4:34:e5:d4:c9:11:3f:40:66:35:f2:64:eb:b9:ba:d0:f9:75:
         8c:b5:f6:25:53:01:54:58:7e:32:fb:72:d4:f4:24:aa:90:4b:
         92:c5:af:d1:5b:4c:85:bc:80:a5:8b:11:06:c5:2b:72:b3:8b:
         1c:ff:08:9b:58:7f:ce:13:79:0e:cb:97:83:86:68:04:da:34:
         ae:97:8f:f9:e3:48:dc:ef:91:bc:e8:c1:7d:61:64:c8:11:d4:
         5d:4a:53:56:09:a2:ab:99:15:e9:62:6e:e3:81:52:84:aa:4a:
         3b:38:51:aa:63:96:a2:cf:ff:61:79:22:c6:04:73:1f:4c:a8:
         07:18:8d:de:70:a3:6e:63:df:2e:0b:dc:1c:f1:e5:40:42:07:
         53:bc:fa:92:ed:c6:db:f7:4a:de:62:c8:fc:36:e8:31:ee:70:
         a2:38:03:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:26 2026 by rpki-client