Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031353a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031353a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          o6/TzAng7dVrFQbphOWrrGoZ3vb959Qsv/6pK7zsMd0=
Subject key identifier:   6D:B1:66:B0:24:8C:6C:FD:A8:2F:80:D4:FB:62:86:53:BA:53:CA:44
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       7744F45748F2221CFE038594229ED178C9533B25
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031353a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:59 +0000
ROA not before:           Thu 19 Mar 2026 15:29:59 +0000
ROA not after:            Thu 18 Mar 2027 15:34:59 +0000
asID:                     272951
IP address blocks:        2803:6990:a015::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:44:f4:57:48:f2:22:1c:fe:03:85:94:22:9e:d1:78:c9:53:3b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:59 2026 GMT
            Not After : Mar 18 15:34:59 2027 GMT
        Subject: CN=6DB166B0248C6CFDA82F80D4FB628653BA53CA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:12:b8:2c:7a:9d:89:2f:9b:b9:1b:27:35:
                    23:00:7d:a0:0b:3d:37:5f:b1:2c:43:5c:c3:aa:63:
                    ae:a2:e2:2a:84:96:3e:34:cc:8d:a8:a9:7e:36:52:
                    25:b2:c3:d9:99:8e:d0:a8:fa:b6:2a:dd:7d:9e:9e:
                    3c:d8:a2:3a:f6:d2:96:24:5e:ff:87:25:9a:bc:b6:
                    bc:a7:4b:b2:8c:7c:b8:80:ff:70:47:26:1f:b0:c4:
                    b8:b6:e5:32:a2:14:34:1a:90:09:02:ae:88:3e:fd:
                    e1:7b:94:86:f6:75:d9:a3:43:27:39:35:3c:56:af:
                    46:fa:25:fe:c6:de:a9:e0:f0:41:d1:c9:15:31:70:
                    20:5e:af:e5:54:af:6a:24:f7:5b:be:b3:c4:89:9f:
                    1e:cb:8b:4d:08:08:92:34:e2:d2:1f:7b:e0:19:28:
                    b4:b7:33:5f:01:fc:47:04:d1:f2:1e:4e:4b:e8:39:
                    52:d6:44:c5:25:3f:5a:59:aa:df:7a:e8:35:6e:fe:
                    58:f2:63:51:fa:47:a5:29:95:02:d4:01:d1:2c:e9:
                    9c:c1:d5:63:f5:4b:a9:fe:72:c5:e6:c1:74:1b:7a:
                    ec:82:2e:3d:e7:3b:f4:e3:cf:28:c7:c2:53:dd:0a:
                    35:f3:aa:05:7d:fa:49:20:86:ca:0c:72:e2:61:42:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B1:66:B0:24:8C:6C:FD:A8:2F:80:D4:FB:62:86:53:BA:53:CA:44
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031353a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a015::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:20:77:8b:07:c0:31:5c:64:e8:c6:d1:8c:eb:50:43:68:a9:
         20:97:c8:9a:ae:98:5c:0e:04:e4:4b:e3:ce:5e:61:fb:01:26:
         85:50:64:50:54:27:2c:76:58:be:ee:b7:1d:9b:4b:8d:93:65:
         66:85:2c:c5:f3:94:64:d2:ec:b0:0d:05:04:02:b8:41:17:21:
         ab:35:7e:a4:d0:47:8d:a5:5e:18:2f:45:d0:8c:fa:23:52:da:
         90:09:bf:a9:d9:9a:52:7e:a4:44:ae:9c:93:70:36:c6:6e:5e:
         99:f7:cc:3b:2e:26:ba:c9:ee:a7:00:44:44:a7:d3:59:a1:9a:
         5b:7d:4a:b4:48:db:cf:1c:fd:35:22:42:d5:17:02:50:a3:ac:
         2a:38:13:1a:e2:57:bd:8e:94:ed:f4:93:91:89:f7:25:af:f8:
         e6:4d:dd:c7:8e:7b:13:a9:81:23:57:0b:5c:09:fa:4e:32:ef:
         30:80:2b:ff:6c:dc:5c:db:7c:3a:cb:ec:24:98:f4:bf:85:49:
         ed:45:89:29:f0:f1:65:56:a1:f5:14:a2:2e:7c:d8:79:7a:72:
         47:73:90:04:6f:d4:6a:6d:d1:e4:7b:b0:c5:c9:b4:9d:b5:1c:
         6e:6f:eb:9e:4b:79:d0:5f:7e:e3:46:c2:ad:02:66:7c:13:8b:
         3d:ec:a8:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:42 2026 by rpki-client