Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031393a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031393a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          5J0mqqSKHqsAumrNEqgF1VaKNjmmY0R9aFQmGZ/Kt1Q=
Subject key identifier:   30:C0:C1:7C:37:30:DB:28:20:1F:82:32:CF:C6:D8:1F:68:5A:DD:B4
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       619C9CAE7793E536DB8CD66F25DFBD2C7927CF90
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031393a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:36 +0000
ROA not before:           Thu 19 Mar 2026 15:29:36 +0000
ROA not after:            Thu 18 Mar 2027 15:34:36 +0000
asID:                     272951
IP address blocks:        2803:6990:a019::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9c:9c:ae:77:93:e5:36:db:8c:d6:6f:25:df:bd:2c:79:27:cf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:36 2026 GMT
            Not After : Mar 18 15:34:36 2027 GMT
        Subject: CN=30C0C17C3730DB28201F8232CFC6D81F685ADDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:63:5c:3c:0b:7d:dc:39:58:21:f0:a5:c5:
                    82:09:e2:df:c7:55:af:6d:0e:c3:2f:80:74:45:03:
                    af:34:5c:0c:da:de:61:13:49:8c:94:fc:9f:c5:84:
                    92:c9:0d:a2:fe:f5:3e:b0:4e:b9:8d:99:2a:5f:6b:
                    de:01:13:92:c1:00:94:25:a3:d1:d8:eb:c2:58:1e:
                    1f:19:0b:67:ff:7e:da:3d:da:57:ce:d4:02:ee:13:
                    2f:e3:f1:98:18:1f:1f:6c:b1:b3:a3:ae:25:e6:9e:
                    0f:d9:6b:ba:84:6e:32:9f:41:8c:f7:1f:1f:a1:27:
                    40:5e:a0:cc:94:23:e0:e2:e1:75:cb:6d:31:85:e8:
                    89:6d:e4:88:82:37:ca:64:eb:c5:a7:36:52:cd:d3:
                    7c:bf:24:33:60:f6:73:2d:b7:13:b1:9e:61:b0:5f:
                    11:fb:0e:fc:3c:7a:17:b0:4f:e1:a8:21:ec:1c:61:
                    c2:c4:be:a3:d2:78:45:a9:0c:00:ea:f6:56:e0:98:
                    8f:99:ac:6f:af:0a:ba:bd:5e:79:23:2e:0e:d7:ea:
                    b3:f7:ec:d6:6c:72:65:8a:fa:2c:fa:08:62:e6:3e:
                    59:ee:10:01:39:ca:31:3a:67:b3:a3:9d:a6:3f:1f:
                    f5:5d:7f:9e:37:eb:6b:d8:d0:c7:3d:01:2d:48:ed:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C0:C1:7C:37:30:DB:28:20:1F:82:32:CF:C6:D8:1F:68:5A:DD:B4
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031393a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a019::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:f3:49:52:c9:17:13:ac:09:10:2c:b4:6b:9b:23:73:17:
         09:79:ab:8a:23:d0:cb:f0:60:15:5d:8f:59:1c:d9:a2:a8:e0:
         2f:0a:ae:ec:b3:b5:ba:a0:bf:57:71:0b:f8:59:b8:13:d5:fb:
         a8:cc:8c:f1:3a:e8:e0:ce:99:ec:50:80:bf:f4:86:bf:09:0c:
         43:a0:b0:93:6b:b9:12:e6:32:af:b3:fd:d2:33:80:ba:81:06:
         be:44:bb:0a:08:da:51:32:80:48:ed:4f:4f:c4:0c:85:7a:d7:
         4b:9b:1d:3a:4b:65:8d:3b:2d:20:98:56:47:8c:9b:ba:1a:83:
         16:f9:e1:7b:04:d3:b2:98:60:61:53:b4:3d:47:ab:98:d7:6b:
         a0:9b:c0:a6:4b:47:df:d1:10:fe:e4:2d:83:9d:07:82:a3:7c:
         5e:95:cd:61:3c:55:78:46:7e:54:83:54:07:d0:b0:48:b2:08:
         0d:c6:b5:53:bf:44:89:73:d6:52:e3:58:71:7d:f9:19:d6:18:
         0c:f7:cf:93:fb:91:86:a0:69:e0:00:9e:a7:14:76:da:d9:b7:
         cb:7b:9a:f9:7d:51:03:4d:38:c9:d0:f9:92:43:d1:91:d5:98:
         59:ca:bd:ee:4f:35:ad:5e:74:8c:3f:4f:04:64:ee:31:e4:71:
         08:5a:b4:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:03 2026 by rpki-client