Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030303a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613030303a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          6yiGctyfdGtcM8QssHll3QPLd9H31CLOI7tZme2bVlY=
Subject key identifier:   CE:2A:CE:AA:88:03:FA:3B:55:DD:BA:0E:42:BC:AA:06:7C:F5:F5:31
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       38A4FC6E4B97D2CD4252507DADA884DFA0F86D02
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030303a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:40 +0000
ROA not before:           Thu 19 Mar 2026 15:29:40 +0000
ROA not after:            Thu 18 Mar 2027 15:34:40 +0000
asID:                     272951
IP address blocks:        2803:6990:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a4:fc:6e:4b:97:d2:cd:42:52:50:7d:ad:a8:84:df:a0:f8:6d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:40 2026 GMT
            Not After : Mar 18 15:34:40 2027 GMT
        Subject: CN=CE2ACEAA8803FA3B55DDBA0E42BCAA067CF5F531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:c6:13:2f:31:df:84:76:e0:04:e8:51:a5:
                    6a:27:b5:df:aa:fd:5d:0d:51:c0:bf:df:66:ae:77:
                    6d:f5:1c:da:51:a6:b6:d0:e4:66:f0:5f:56:90:51:
                    b7:40:69:91:6e:69:27:bb:54:ce:97:f3:99:12:ad:
                    87:3f:30:ad:9d:ce:5f:ec:8b:2e:fb:52:a3:e0:fc:
                    03:a2:c7:2d:9a:22:03:cd:8f:08:aa:eb:db:2e:0f:
                    08:07:3e:45:6a:10:4d:06:17:6e:8a:ad:c3:71:7a:
                    e2:93:07:a8:5a:69:a5:8b:3d:35:6c:81:00:27:87:
                    c0:7a:0d:24:ca:57:ab:5f:db:e4:52:f6:70:5e:0a:
                    0e:c7:67:60:41:9b:06:59:a0:6d:34:07:30:19:b4:
                    c5:09:c9:f6:b0:73:46:ca:47:09:65:c1:0f:79:63:
                    a4:f9:c9:5f:d9:31:2a:b2:6a:fe:59:24:ba:3a:68:
                    d1:34:86:74:82:a7:cc:df:51:80:8c:32:3e:45:58:
                    d0:2c:b1:60:92:80:7f:58:6e:0a:74:1e:b4:0c:09:
                    61:73:b6:37:dc:34:bd:a6:93:12:e9:41:ae:80:41:
                    c1:b0:b5:94:f0:f9:29:54:61:3d:48:01:6f:86:ab:
                    f9:a8:d1:7b:4f:88:c7:9d:5a:d6:87:f1:04:d9:b7:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2A:CE:AA:88:03:FA:3B:55:DD:BA:0E:42:BC:AA:06:7C:F5:F5:31
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030303a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:38:f1:ce:4b:4a:cb:33:44:ab:4e:46:a7:06:73:b6:b4:19:
         94:56:5e:d7:40:75:03:d4:f5:04:88:58:4c:58:c0:a6:45:6d:
         dc:26:22:89:b4:4a:b0:7a:5e:6b:e8:b3:06:83:60:5c:13:35:
         13:eb:72:69:09:59:e7:9b:5d:05:9e:54:e7:30:48:5e:2f:8c:
         f5:32:13:f3:80:64:f5:86:63:c0:1a:e3:c2:5d:ac:52:e4:4b:
         db:c6:45:12:99:52:83:f0:a3:cd:3e:2e:85:d4:7a:33:af:46:
         e2:e2:76:4d:77:85:2a:04:d6:0e:5b:4e:76:81:85:93:f8:75:
         f3:36:56:53:e9:0e:fc:5c:62:96:af:18:c6:fb:4b:09:75:7f:
         9c:b8:b1:5a:02:60:69:ee:27:06:f7:fc:2a:17:c6:76:4f:34:
         cb:7c:82:6c:6a:18:c1:d6:6f:e5:61:56:a3:c9:23:c4:b3:6a:
         08:ae:04:8b:14:7c:f2:4a:f3:02:03:3a:c0:8d:c4:5f:5e:0f:
         63:cd:e9:18:cc:b3:dd:eb:87:c7:44:2a:e8:46:8e:3b:37:88:
         bd:55:41:01:c5:08:b9:2a:72:e6:77:4f:ba:39:95:cf:2f:33:
         61:fb:e2:82:03:c0:45:31:7e:1a:a0:5e:7b:53:ba:47:40:57:
         00:3d:80:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:29 2026 by rpki-client