Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031633a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031633a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          ZhMsI6x9HageQl+nkh+Xmpd20Dbp8XPNWi7A9eobeUw=
Subject key identifier:   EE:09:7F:3E:7F:93:11:64:27:39:C5:DC:26:14:93:5D:F2:FF:11:BD
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       52DB39AFFF437A5EE5A9E74EF03510664F905992
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031633a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:57 +0000
ROA not before:           Thu 19 Mar 2026 15:29:57 +0000
ROA not after:            Thu 18 Mar 2027 15:34:57 +0000
asID:                     272951
IP address blocks:        2803:6990:a01c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:db:39:af:ff:43:7a:5e:e5:a9:e7:4e:f0:35:10:66:4f:90:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:57 2026 GMT
            Not After : Mar 18 15:34:57 2027 GMT
        Subject: CN=EE097F3E7F9311642739C5DC2614935DF2FF11BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3b:b7:ca:ab:fd:c4:a4:4a:6f:54:f6:1f:b5:
                    ef:25:04:52:80:60:dc:bf:60:59:1a:7a:6b:85:93:
                    bb:94:51:5e:08:5e:99:08:74:55:0e:c2:7e:a5:14:
                    6d:f6:4b:98:a8:43:7e:d8:53:18:40:7d:f8:a9:60:
                    2e:de:57:2c:9c:67:9a:f6:01:53:6a:e3:8e:a8:de:
                    76:e8:17:05:9b:53:ec:a4:9c:5f:be:a6:8a:87:4f:
                    4d:71:07:c9:69:2f:60:b6:10:23:ce:cd:a7:0a:6b:
                    67:54:2c:4c:39:bf:4c:d6:c1:c5:9e:b6:76:34:c7:
                    93:e4:ea:34:de:25:cb:54:2b:3e:48:74:48:26:39:
                    3b:62:04:fc:7c:53:51:3b:e6:fc:a8:ec:d9:39:06:
                    f8:c0:20:66:45:61:81:05:e0:27:e2:da:a5:1d:40:
                    85:3f:1a:fc:36:41:c2:dd:31:c2:51:3f:d3:84:6b:
                    7d:a8:ce:4e:6d:11:14:b5:1c:85:19:84:90:c7:78:
                    d7:0e:a0:7b:b8:85:83:9a:b0:db:f3:62:3f:5e:8d:
                    82:2d:20:09:08:b1:96:77:93:bd:f3:5f:78:4f:7b:
                    c4:71:ce:e8:59:8d:02:bd:93:23:c0:45:37:3a:bb:
                    2b:99:19:eb:1f:22:ec:98:26:a9:61:25:7a:6c:02:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:09:7F:3E:7F:93:11:64:27:39:C5:DC:26:14:93:5D:F2:FF:11:BD
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031633a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a01c::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:27:3e:da:c0:aa:d1:96:20:83:bd:b4:e4:bf:a3:2f:51:
         2d:9f:3a:5d:74:56:3f:57:b2:f4:11:c5:db:1f:73:87:62:01:
         46:c8:58:16:0f:69:cf:fe:f0:2b:bd:90:b5:02:08:15:d6:2d:
         59:5e:0f:60:e9:a4:b8:f0:ad:99:e5:83:65:fe:ac:b1:9f:12:
         b2:cd:6e:97:f3:f8:0f:ca:1c:a6:ab:98:1b:e6:6a:c5:de:10:
         d7:6e:0d:97:13:80:16:e5:c3:f5:58:48:96:89:c9:c4:c0:a0:
         58:97:2f:c0:9a:f8:e8:ef:8c:59:27:b9:af:10:89:3f:bc:f2:
         d9:0d:0a:63:85:dc:84:08:76:c3:ee:56:84:02:9b:6d:f7:db:
         4e:d2:05:d1:cd:37:98:65:83:c4:ee:7d:9d:11:62:73:01:37:
         2b:25:7a:f4:12:f0:07:0f:33:bb:72:d5:1c:24:16:1a:1c:5d:
         6f:fd:f1:cb:91:37:00:14:e2:f0:f2:36:59:9b:0f:82:02:23:
         d1:57:05:36:60:6b:da:3d:d2:83:a6:c4:11:a4:02:c1:38:02:
         66:e4:95:6f:6e:1f:a4:47:22:2a:bd:b2:d2:a2:59:4e:d3:21:
         d0:e6:67:9a:74:e0:e4:e4:81:6c:ea:e5:33:b4:f1:75:81:f7:
         2f:eb:72:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:51 2026 by rpki-client