Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031313a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031313a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          nMCeJStVQQqWFLbm+t8d2xsBm2Za0gB6PuOhWjbEkNo=
Subject key identifier:   66:BA:32:D7:EA:F9:1E:9E:E0:31:BA:36:63:A2:F4:B5:76:4E:0A:09
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       72641E0CA4CC7CE018FDF3140378FD774AF36DFA
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031313a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:44 +0000
ROA not before:           Thu 19 Mar 2026 15:29:44 +0000
ROA not after:            Thu 18 Mar 2027 15:34:44 +0000
asID:                     272951
IP address blocks:        2803:6990:a011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:64:1e:0c:a4:cc:7c:e0:18:fd:f3:14:03:78:fd:77:4a:f3:6d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:44 2026 GMT
            Not After : Mar 18 15:34:44 2027 GMT
        Subject: CN=66BA32D7EAF91E9EE031BA3663A2F4B5764E0A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:10:0d:e5:4d:e8:9f:2f:a3:9d:4c:43:23:
                    c0:31:f5:ea:99:cc:1f:39:ac:2b:7b:41:c8:2c:32:
                    fe:bc:cf:46:97:ea:0d:ae:14:cc:e9:0b:62:fe:19:
                    36:6f:59:a9:64:e2:fd:6d:27:c1:9c:84:21:bd:18:
                    9a:df:7d:8b:36:e0:ac:ea:3f:02:e6:e1:a9:66:19:
                    ab:57:d4:96:2c:db:12:f9:1d:25:19:16:65:eb:7e:
                    48:11:e9:29:e3:14:44:46:0d:e5:54:25:c3:c9:fb:
                    cd:71:cc:c3:62:03:fa:1a:1e:ad:f4:81:52:5d:61:
                    aa:49:6e:b8:da:20:02:7d:86:b2:ed:a4:2f:88:09:
                    e6:f7:2c:ce:2d:67:d6:ee:95:3e:fd:1e:ec:2b:bd:
                    e2:fd:95:48:3e:89:26:a7:e2:38:85:e2:b3:1e:d5:
                    bb:95:38:84:a8:13:99:4b:e2:17:eb:16:fe:72:38:
                    b5:ed:15:65:12:be:33:63:8f:42:03:3d:60:2a:a1:
                    e7:07:98:a0:55:7d:1a:7f:cd:61:2a:2b:0b:6c:25:
                    16:a1:01:d5:50:d1:c8:5a:4b:98:71:82:d2:d6:80:
                    b4:41:65:af:85:0f:f0:88:f5:eb:cb:4c:37:79:43:
                    18:14:76:eb:60:a6:96:f7:06:c1:6e:d0:ba:49:a5:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:32:D7:EA:F9:1E:9E:E0:31:BA:36:63:A2:F4:B5:76:4E:0A:09
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031313a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a011::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:6b:bb:f3:66:38:d6:73:db:f8:98:ef:d4:b2:03:b9:ec:
         75:82:c7:4b:24:49:b3:cb:04:b1:94:78:a9:66:22:c2:62:d0:
         8d:43:eb:d9:9a:c8:01:21:10:46:c0:86:54:c7:b2:89:51:57:
         6d:62:93:9a:f2:35:ae:9e:b1:7c:0f:28:e4:01:72:6e:47:fa:
         57:29:9c:38:f4:b0:9b:70:19:4b:2c:14:c9:e1:6a:30:8d:9f:
         6f:81:18:44:07:39:46:e9:01:05:6c:17:8d:69:cb:78:c4:48:
         1f:84:ae:1e:a5:ba:c0:59:63:27:a9:25:59:e7:ed:d4:ac:75:
         2a:c1:fd:be:3b:54:ff:81:b9:65:85:c1:94:03:67:0a:9e:62:
         89:0c:74:7c:f3:d3:e3:7b:99:79:5e:62:dc:e7:13:58:ba:72:
         cb:d0:82:a0:a9:b8:52:36:a0:9d:1a:94:95:b8:d4:5d:1a:27:
         ea:07:46:f3:e4:ef:6f:06:30:b1:2d:ab:c2:ac:40:a0:be:df:
         f4:50:e2:97:82:50:eb:b3:35:30:94:be:11:77:9a:d8:46:ff:
         4d:86:37:e9:ad:84:46:02:aa:8c:38:9b:32:ac:cb:49:81:41:
         1d:2c:3d:c3:05:a0:26:f0:bc:f7:e2:fa:a0:fe:45:48:c8:ac:
         f5:29:b2:4b
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUcmQeDKTMfOAY/fMUA3j9d0rzbfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTI5NDRaFw0yNzAzMTgxNTM0NDRaMDMxMTAvBgNV
BAMTKDY2QkEzMkQ3RUFGOTFFOUVFMDMxQkEzNjYzQTJGNEI1NzY0RTBBMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/hAN5U3ony+jnUxDI8Ax9eqZ
zB85rCt7QcgsMv68z0aX6g2uFMzpC2L+GTZvWalk4v1tJ8GchCG9GJrffYs24Kzq
PwLm4almGatX1JYs2xL5HSUZFmXrfkgR6SnjFERGDeVUJcPJ+81xzMNiA/oaHq30
gVJdYapJbrjaIAJ9hrLtpC+ICeb3LM4tZ9bulT79HuwrveL9lUg+iSan4jiF4rMe
1buVOISoE5lL4hfrFv5yOLXtFWUSvjNjj0IDPWAqoecHmKBVfRp/zWEqKwtsJRah
AdVQ0chaS5hxgtLWgLRBZa+FD/CI9evLTDd5QxgUdutgppb3BsFu0LpJpaSlAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUZroy1+r5Hp7gMbo2Y6L0tXZOCgkwHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMxMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoBEwDQYJKoZIhvcNAQELBQADggEBABs5a7vzZjjWc9v4mO/UsgO5
7HWCx0skSbPLBLGUeKlmIsJi0I1D69mayAEhEEbAhlTHsolRV21ik5ryNa6esXwP
KOQBcm5H+lcpnDj0sJtwGUssFMnhajCNn2+BGEQHOUbpAQVsF41py3jESB+Erh6l
usBZYyepJVnn7dSsdSrB/b47VP+BuWWFwZQDZwqeYokMdHzz0+N7mXleYtznE1i6
csvQgqCpuFI2oJ0alJW41F0aJ+oHRvPk728GMLEtq8KsQKC+3/RQ4peCUOuzNTCU
vhF3mthG/02GN+mthEYCqow4mzKsy0mBQR0sPcMFoCbwvPfi+qD+RUjIrPUpsks=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:23 2026 by rpki-client