Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030323a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613030323a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          V2VcQPmdI7xGAkc3FdOoJFJwCFGi2mP4FhOnbRTSJko=
Subject key identifier:   35:B3:81:F4:7A:70:A8:06:8E:00:DB:2B:79:5A:85:AF:83:F7:E5:CE
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       7855FDEEDAA5A686DF381FAD4B7D02DE64B8D868
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030323a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:49 +0000
ROA not before:           Thu 19 Mar 2026 15:29:49 +0000
ROA not after:            Thu 18 Mar 2027 15:34:49 +0000
asID:                     272951
IP address blocks:        2803:6990:a002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:55:fd:ee:da:a5:a6:86:df:38:1f:ad:4b:7d:02:de:64:b8:d8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:49 2026 GMT
            Not After : Mar 18 15:34:49 2027 GMT
        Subject: CN=35B381F47A70A8068E00DB2B795A85AF83F7E5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:81:5b:0b:40:63:54:67:22:8b:3d:08:de:
                    45:71:64:ff:0d:b3:8c:2a:7f:80:ec:30:00:99:fd:
                    8e:d5:94:aa:fa:6c:d4:4d:b3:a8:b9:5d:b4:b2:bc:
                    07:2c:7b:2f:69:7c:9c:2c:06:6b:61:ac:95:03:f8:
                    91:6b:af:db:a8:e8:20:84:7d:cd:4e:a2:6f:e2:d2:
                    a6:c3:8f:24:c0:ea:3e:ef:18:29:5c:d0:35:a7:2e:
                    6e:73:9b:95:d7:39:a2:1c:4c:9d:0c:56:f2:62:75:
                    a1:00:92:47:7e:b1:15:2a:b8:02:c8:d1:e2:f6:46:
                    6e:64:e9:2f:0c:f3:8f:9d:f2:9a:09:74:bf:4f:17:
                    c0:66:eb:01:00:81:d1:5b:60:50:32:8a:40:ae:0e:
                    6a:dd:98:06:d9:70:0b:47:3a:d2:00:17:ef:4c:fd:
                    c7:04:87:ef:e1:e1:d1:d5:0e:6e:0a:2f:51:d6:fc:
                    21:a8:28:13:a6:c5:cd:ad:f8:8f:7d:72:f4:7b:91:
                    66:a7:31:73:6d:e4:56:8d:3f:9c:80:36:48:d1:07:
                    b1:53:de:be:76:fe:a5:25:c4:5f:02:93:d0:88:a6:
                    ba:22:8c:cb:5e:e3:d2:c1:24:d6:dd:fe:38:ef:5f:
                    48:5e:d4:3e:53:0b:f7:29:9d:b7:74:bc:92:bd:3b:
                    62:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B3:81:F4:7A:70:A8:06:8E:00:DB:2B:79:5A:85:AF:83:F7:E5:CE
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030323a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a002::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:14:e2:2e:93:ae:fb:3a:7e:98:fc:d1:0a:72:28:a6:69:
         02:dc:52:d4:52:31:6f:8f:a0:e7:cb:04:bf:af:a7:87:49:11:
         37:70:70:08:66:50:c7:25:af:e3:be:f8:59:02:95:8d:33:da:
         84:b9:f9:31:ac:8f:23:61:6d:ad:e1:46:28:6b:4c:3f:f8:f9:
         58:de:eb:15:2b:ed:46:9e:1a:c6:1a:e9:e6:fc:e7:0a:e7:aa:
         eb:c2:26:10:d7:08:09:a0:4f:e4:89:3c:97:a9:3d:46:c0:dc:
         c5:92:01:b4:64:06:3b:8a:80:18:8c:95:3e:dc:84:c6:7c:74:
         71:dc:8a:09:81:df:a8:1c:97:9a:54:55:f1:41:d0:d9:63:37:
         ff:99:a2:c8:a5:e7:76:6b:65:02:42:9f:ae:b9:55:20:f0:23:
         bd:b9:0b:c5:50:bf:d1:d0:2a:ab:d6:e3:46:48:45:f7:fa:90:
         85:98:0e:34:dc:40:7d:8a:60:bf:be:f8:a3:ba:66:66:89:c4:
         2f:20:dd:6a:f0:28:05:bf:13:aa:1f:11:6e:23:ac:22:dd:86:
         87:e7:0a:98:cf:4b:d7:9d:d0:36:5f:b5:35:2f:87:66:2f:5c:
         33:fa:71:67:83:26:23:2d:07:16:cc:07:7c:54:51:70:bb:7d:
         4d:65:9a:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:22 2026 by rpki-client