Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030653a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613030653a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          C/TYqJfHtSRK141+YsUYxCe1lFsM1yu2Pezk2jV0Q48=
Subject key identifier:   90:D0:24:BB:45:0F:68:B2:43:0C:CF:76:34:47:C8:A7:C7:B3:24:BF
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       499633A985D84FDEDAE4FC264822901C27CD93BD
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030653a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:42 +0000
ROA not before:           Thu 19 Mar 2026 15:29:42 +0000
ROA not after:            Thu 18 Mar 2027 15:34:42 +0000
asID:                     272951
IP address blocks:        2803:6990:a00e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:96:33:a9:85:d8:4f:de:da:e4:fc:26:48:22:90:1c:27:cd:93:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:42 2026 GMT
            Not After : Mar 18 15:34:42 2027 GMT
        Subject: CN=90D024BB450F68B2430CCF763447C8A7C7B324BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:2d:18:31:0f:1e:ae:07:02:50:01:1e:dd:
                    85:82:e3:47:85:da:81:2b:20:76:d4:c1:f9:8a:8b:
                    54:08:fc:7a:18:a2:be:e1:3e:6a:37:7d:24:63:d5:
                    54:5d:ea:35:d0:e0:94:1d:37:04:da:d6:97:d5:c4:
                    54:c6:8e:4b:27:59:61:b9:9e:4c:6d:d9:af:a1:9d:
                    b3:4f:6b:b9:b0:07:46:bf:a0:5d:27:12:ea:b5:58:
                    95:5c:90:b8:4c:b7:d3:69:28:0e:a4:53:62:db:f1:
                    4b:39:e3:1a:a5:f4:73:7b:b2:ff:31:07:15:cf:e7:
                    2f:25:e1:6c:1d:aa:d9:5f:6a:fb:2c:79:d2:7f:2d:
                    af:73:d4:97:bf:c3:a8:43:2d:15:58:e4:ba:66:87:
                    bc:a6:06:3c:bb:2b:83:06:9c:bb:a0:ed:02:76:17:
                    aa:3e:ec:51:e7:f8:5e:44:38:17:06:61:4a:69:f7:
                    90:2f:ac:c3:64:41:95:7a:55:b1:29:6a:24:66:8f:
                    55:86:8e:24:f2:69:b4:7d:1f:ed:e7:34:41:d4:47:
                    96:2c:c7:af:bf:26:97:8a:b4:a8:79:1b:7e:5a:04:
                    b6:fe:30:f3:82:ba:9c:33:29:07:20:fa:9a:0a:f7:
                    c9:9c:d6:89:39:2d:ff:5b:8d:1f:3a:73:17:d9:d1:
                    37:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D0:24:BB:45:0F:68:B2:43:0C:CF:76:34:47:C8:A7:C7:B3:24:BF
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030653a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a00e::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:7f:a0:08:88:f5:66:d5:ca:1f:5f:94:d7:d8:c9:5a:fd:f3:
         8d:87:30:0e:a1:e4:a6:70:4d:9c:1b:31:20:24:9b:00:c4:c4:
         43:1b:be:8c:dc:ad:57:b4:43:55:99:7d:06:d1:bd:01:3c:23:
         e9:33:78:cd:ce:fd:14:2d:9e:7b:45:65:87:6d:5a:f6:38:d2:
         fc:21:f3:31:c6:f4:28:c8:48:47:6d:7f:d1:35:03:fd:9e:fc:
         7f:8a:ca:19:98:37:a2:a8:23:77:aa:99:08:8e:39:c5:31:e0:
         ff:f9:01:ee:96:5e:8b:95:f8:2b:da:bc:6d:13:13:f2:8f:13:
         86:95:d9:ce:dc:06:f2:97:70:3c:42:80:eb:5b:5f:b1:9d:af:
         b1:fa:46:52:31:ef:83:92:45:d5:c0:db:64:f6:26:49:5f:84:
         9d:de:18:99:ed:f2:17:88:d0:94:67:9b:a5:d1:a0:b5:df:8a:
         d7:ec:91:75:6e:4d:7c:c3:30:5e:46:8c:a7:4c:e1:11:f9:55:
         75:a7:4c:4b:43:30:ab:5f:53:1e:c9:72:69:3c:85:2b:93:c9:
         45:15:0b:30:90:f8:2f:ad:99:c8:0d:12:be:11:3f:73:45:93:
         ba:d0:47:90:3d:1e:86:04:7e:1c:a1:fc:35:a2:4f:55:5a:0c:
         a0:a4:4e:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:26 2026 by rpki-client