Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030663a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613030663a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          lqJm0/O+FnDVU7bOkZYkoSHuoiYblrQhsw4oIciOXmQ=
Subject key identifier:   78:A7:B4:2C:F5:EE:14:0E:40:85:1A:F2:FA:30:05:54:08:00:47:D6
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       5C2D5140DBC3C39C31D17171F60DC79F9AA05447
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030663a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:51 +0000
ROA not before:           Thu 19 Mar 2026 15:29:51 +0000
ROA not after:            Thu 18 Mar 2027 15:34:51 +0000
asID:                     272951
IP address blocks:        2803:6990:a00f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2d:51:40:db:c3:c3:9c:31:d1:71:71:f6:0d:c7:9f:9a:a0:54:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:51 2026 GMT
            Not After : Mar 18 15:34:51 2027 GMT
        Subject: CN=78A7B42CF5EE140E40851AF2FA300554080047D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ef:65:70:2c:5b:60:8c:b8:05:1d:06:b1:60:
                    a3:7e:e1:b8:6e:ca:8c:8a:16:9d:51:7b:71:ac:03:
                    ac:3f:91:a6:cd:b3:3d:f4:06:c3:be:11:02:c0:24:
                    ac:35:0d:99:50:a2:a6:b1:71:17:39:1f:0b:00:fb:
                    b8:2e:fd:57:b1:b8:71:d6:47:d0:f2:6c:29:f5:b6:
                    d0:e9:8e:ce:59:c8:30:34:61:3d:a5:5c:2b:45:c6:
                    f1:93:ae:c4:3a:c1:3c:fe:78:17:c4:e2:f6:e1:46:
                    b8:00:8c:0f:f9:34:36:6a:bb:b3:63:42:ba:63:44:
                    e3:f3:44:9d:73:bc:1d:f9:da:21:01:09:de:49:e9:
                    f5:f0:2e:1a:03:f4:ee:13:3b:5d:9c:c9:17:81:0d:
                    6d:32:a5:98:ba:94:48:f5:e4:bb:bc:ca:70:26:be:
                    07:68:4b:27:bf:87:da:97:ca:bd:8d:61:15:04:df:
                    41:d0:4d:c4:89:e8:6e:fc:87:24:a9:28:2c:15:0c:
                    da:51:67:be:78:26:ca:07:40:ef:39:79:eb:28:8a:
                    41:fc:bd:cb:a4:b6:f5:3d:09:89:0d:f2:48:5b:fd:
                    1c:d1:c5:7f:64:96:16:99:c3:d3:32:e9:55:3a:9c:
                    89:43:bb:b8:c2:83:ce:77:b7:c7:b5:52:8c:da:23:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A7:B4:2C:F5:EE:14:0E:40:85:1A:F2:FA:30:05:54:08:00:47:D6
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613030663a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a00f::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:32:66:0d:cd:6c:1f:53:b0:44:aa:cc:cd:92:63:df:3b:89:
         17:8f:b2:d2:25:8c:d0:73:8d:1a:82:d3:23:a1:a3:de:c6:0f:
         1b:ee:af:24:10:a5:16:52:f4:ed:fb:56:7f:bc:9e:6b:7d:ae:
         9d:c4:20:a7:09:bd:ef:a7:ca:87:5c:73:df:39:e5:c2:47:64:
         ef:1e:e5:20:07:ad:19:85:17:10:e0:6f:95:70:22:67:b1:62:
         0f:cf:ee:94:dc:0a:73:6b:ea:cf:55:86:79:7d:8e:fd:23:9c:
         1f:fd:c0:a1:73:d5:ae:6a:c3:42:58:83:f3:79:2f:e0:00:fc:
         4e:97:f1:ef:dd:a7:4e:6c:c9:a8:13:d3:48:f4:6d:23:b2:1e:
         06:ff:b8:f2:9a:39:60:b5:7b:07:19:c8:ff:92:56:b9:41:34:
         ce:50:f5:74:78:26:fd:5b:0c:6b:1d:9b:26:be:79:7a:55:bc:
         ac:76:94:7f:ed:94:be:bb:b6:66:28:36:e1:44:5c:e4:e4:f2:
         95:15:7e:3b:8b:de:17:3a:90:1a:51:5b:7e:80:5b:ec:f9:b8:
         80:19:c7:87:95:d8:3c:1b:fc:ba:ef:5e:22:1e:44:ab:b1:a3:
         77:e3:d0:f9:f0:1c:e5:ca:e1:66:d0:c5:2c:81:1a:ba:c3:4e:
         57:bc:1c:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:45:06 2026 by rpki-client