Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031373a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031373a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          swidaxsNETcs06TQmDggYug3MN/KxBdbiUcnOOM7ybU=
Subject key identifier:   C5:93:D1:3F:90:14:1D:94:AF:07:38:0A:AC:20:F5:C5:D7:20:B1:BF
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       6FBD0EF9B230E939E163A0307DE71929158BCF64
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031373a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:42 +0000
ROA not before:           Thu 19 Mar 2026 15:29:42 +0000
ROA not after:            Thu 18 Mar 2027 15:34:42 +0000
asID:                     272951
IP address blocks:        2803:6990:a017::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bd:0e:f9:b2:30:e9:39:e1:63:a0:30:7d:e7:19:29:15:8b:cf:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:42 2026 GMT
            Not After : Mar 18 15:34:42 2027 GMT
        Subject: CN=C593D13F90141D94AF07380AAC20F5C5D720B1BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:16:7c:e7:7b:a5:44:f0:83:8c:d3:e5:55:
                    c5:91:6b:8b:c4:bd:ce:f7:d8:d0:4f:c1:e5:f3:23:
                    1c:9c:70:0d:22:95:c2:c3:63:76:c9:7b:30:69:88:
                    69:6b:a4:f6:77:53:5f:28:5f:43:32:f2:57:3c:7a:
                    3b:75:e1:1d:09:d2:b7:d2:86:3b:00:78:ef:63:ec:
                    1f:1e:da:ed:2b:82:25:d4:d4:1b:de:f8:1e:24:34:
                    72:8c:1f:86:0c:17:df:f4:87:62:ef:50:30:07:34:
                    8a:f2:27:78:e4:e9:42:44:81:c3:a4:99:82:ce:94:
                    20:db:33:2e:99:f6:ba:b4:2e:61:b3:23:0c:43:18:
                    60:38:57:a9:1a:30:66:88:93:51:60:14:9b:11:dd:
                    45:1b:94:55:d6:f2:20:44:0d:b0:b6:14:39:85:1a:
                    99:f5:b2:8c:75:40:5a:d4:09:e5:c7:61:b6:0c:ca:
                    b6:ff:8d:a2:59:48:b7:8a:72:68:8e:9b:70:09:e3:
                    18:06:01:2c:06:90:db:42:0b:88:e9:6b:04:0d:d0:
                    a1:f4:04:5d:ee:1c:a4:15:07:f2:ff:d5:f8:61:5c:
                    64:53:c5:14:6a:db:73:9d:27:99:d3:9b:19:e9:35:
                    41:3b:b7:6a:9b:2e:ea:a2:a0:f7:b0:c4:11:c7:d6:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:93:D1:3F:90:14:1D:94:AF:07:38:0A:AC:20:F5:C5:D7:20:B1:BF
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031373a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a017::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:c7:4e:77:7e:8d:52:2e:4b:b6:4d:79:24:3c:4f:1a:30:
         78:05:0a:20:9f:cf:46:90:36:6d:65:9b:fa:2e:33:dc:7a:9f:
         9a:24:53:14:f3:9f:09:7f:1b:ae:5c:0a:3e:2c:28:a0:10:9b:
         c5:5e:49:f4:f6:42:6c:d0:b2:20:8b:7e:63:07:53:31:d1:2e:
         a3:6f:31:e1:72:04:b1:df:42:bf:e7:db:f4:00:d0:38:78:9e:
         84:af:e5:03:f3:b7:41:ac:94:1b:b7:23:46:78:ac:38:8b:6b:
         2e:5f:b7:08:8e:c2:5e:4d:14:f4:d3:a1:ee:aa:67:37:99:10:
         38:d9:66:81:ba:90:8d:a0:6c:04:ad:20:0f:7b:9d:71:81:59:
         1f:c4:98:6f:11:e9:35:fa:d0:cf:e1:8c:12:fd:e2:73:20:c3:
         75:40:e5:6a:44:ac:aa:ec:2c:18:0f:20:d0:7c:48:18:3c:ef:
         20:00:51:77:c8:ca:aa:c5:ac:db:4e:13:74:46:dd:4e:97:2c:
         e5:5e:9a:32:bd:c9:0a:06:ea:1a:b1:42:a2:4c:58:ca:95:06:
         00:be:91:42:64:2f:03:1e:5d:55:a6:2d:d3:87:09:32:28:a7:
         8b:ad:96:dc:1a:78:ea:f8:7a:20:e3:5c:e4:3a:a0:04:63:84:
         e5:cc:6e:99
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUb70O+bIw6TnhY6AwfecZKRWLz2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTI5NDJaFw0yNzAzMTgxNTM0NDJaMDMxMTAvBgNV
BAMTKEM1OTNEMTNGOTAxNDFEOTRBRjA3MzgwQUFDMjBGNUM1RDcyMEIxQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPwBZ853ulRPCDjNPlVcWRa4vE
vc732NBPweXzIxyccA0ilcLDY3bJezBpiGlrpPZ3U18oX0My8lc8ejt14R0J0rfS
hjsAeO9j7B8e2u0rgiXU1Bve+B4kNHKMH4YMF9/0h2LvUDAHNIryJ3jk6UJEgcOk
mYLOlCDbMy6Z9rq0LmGzIwxDGGA4V6kaMGaIk1FgFJsR3UUblFXW8iBEDbC2FDmF
Gpn1sox1QFrUCeXHYbYMyrb/jaJZSLeKcmiOm3AJ4xgGASwGkNtCC4jpawQN0KH0
BF3uHKQVB/L/1fhhXGRTxRRq23OdJ5nTmxnpNUE7t2qbLuqioPewxBHH1rtbAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUxZPRP5AUHZSvBzgKrCD1xdcgsb8wHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMxMzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoBcwDQYJKoZIhvcNAQELBQADggEBAE72x053fo1SLku2TXkkPE8a
MHgFCiCfz0aQNm1lm/ouM9x6n5okUxTznwl/G65cCj4sKKAQm8VeSfT2QmzQsiCL
fmMHUzHRLqNvMeFyBLHfQr/n2/QA0Dh4noSv5QPzt0GslBu3I0Z4rDiLay5ftwiO
wl5NFPTToe6qZzeZEDjZZoG6kI2gbAStIA97nXGBWR/EmG8R6TX60M/hjBL94nMg
w3VA5WpErKrsLBgPINB8SBg87yAAUXfIyqrFrNtOE3RG3U6XLOVemjK9yQoG6hqx
QqJMWMqVBgC+kUJkLwMeXVWmLdOHCTIop4utltwaeOr4eiDjXOQ6oARjhOXMbpk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:17 2026 by rpki-client