Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031643a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613031643a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          gcJmZIFbW3t+2zWzZVDh54ZqlmemQcVPNm92KIqvO8Y=
Subject key identifier:   E3:30:8A:B0:CD:D2:D6:AD:7A:8F:ED:89:23:FD:08:8E:6B:9A:91:AA
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       24FA454A2A34A53D7952DF77317094C7E3E9322B
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031643a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:58 +0000
ROA not before:           Thu 19 Mar 2026 15:29:58 +0000
ROA not after:            Thu 18 Mar 2027 15:34:58 +0000
asID:                     272951
IP address blocks:        2803:6990:a01d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fa:45:4a:2a:34:a5:3d:79:52:df:77:31:70:94:c7:e3:e9:32:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:58 2026 GMT
            Not After : Mar 18 15:34:58 2027 GMT
        Subject: CN=E3308AB0CDD2D6AD7A8FED8923FD088E6B9A91AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:a5:72:ca:17:b9:a9:b0:7b:72:34:69:8b:
                    fe:3a:92:ee:ce:1a:5d:f1:e5:ba:b9:b7:16:87:c4:
                    1d:e0:15:40:a1:cf:53:da:e1:6d:2f:04:40:64:94:
                    01:a9:e5:f1:3f:8a:76:64:5f:93:13:43:16:a6:7e:
                    7d:96:4f:20:fd:36:fd:da:6d:d8:39:e4:47:0b:84:
                    ba:45:fd:96:2a:d1:f3:1b:bb:07:9d:d7:75:51:0f:
                    62:b1:04:49:80:ef:0a:56:d1:59:19:c5:ee:f8:f8:
                    ca:68:e9:35:6e:56:03:f7:bf:46:1b:47:ff:cb:2c:
                    a6:b1:c9:9c:69:4c:da:66:81:1a:b4:27:00:81:30:
                    09:84:e7:3d:34:86:96:f4:61:32:01:35:d6:d0:0e:
                    c8:3a:02:81:e6:95:89:6b:b1:0a:63:07:d4:0e:d0:
                    43:68:92:d7:71:7c:f8:13:b1:02:c7:99:6c:cd:62:
                    ec:76:32:bc:e0:ce:67:b6:ad:1b:51:32:3e:c5:ec:
                    5f:f1:3c:44:42:d7:d7:ed:b8:17:05:79:dc:a0:61:
                    06:9b:08:5d:dc:8a:bc:20:fa:1a:00:b3:5d:cd:54:
                    8a:12:f6:76:fb:11:8d:c9:1c:49:7c:b4:28:14:20:
                    fb:73:69:be:b9:19:73:6f:0e:5e:67:82:1b:5d:6c:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:30:8A:B0:CD:D2:D6:AD:7A:8F:ED:89:23:FD:08:8E:6B:9A:91:AA
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613031643a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a01d::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:8a:4f:77:ac:b2:92:1e:d6:58:04:e6:23:df:96:f8:c0:5d:
         87:53:bf:fd:6d:d7:ad:52:4f:24:17:2c:27:b9:64:8f:1a:4d:
         4a:13:83:aa:f0:36:4f:a2:d5:9a:ce:40:c2:c0:76:83:a7:7d:
         76:f2:b1:4b:09:37:3b:72:31:9d:01:b3:5f:84:4f:6b:da:94:
         46:a8:bf:b7:cd:96:9f:43:f2:50:92:72:31:70:ea:bd:1f:bb:
         48:1a:27:55:57:13:88:ad:29:d7:85:3b:ac:12:01:fc:d1:17:
         cd:73:f4:fa:8d:49:99:8b:6c:70:3e:ff:30:6e:b9:af:71:08:
         77:89:1d:86:33:c4:6d:94:8a:56:34:ff:f7:d9:11:a5:0b:42:
         ca:f6:19:42:cd:71:28:16:cc:f6:0e:ab:38:8b:01:fc:b9:fe:
         f3:f7:6d:30:d6:4d:03:8c:e1:29:2f:7c:96:71:0d:b5:f2:8d:
         79:c4:47:87:d8:6b:c5:b6:21:27:8e:e4:e6:9e:32:99:fb:63:
         62:c4:0e:25:21:4a:33:3d:4a:a9:2c:e4:f9:37:1d:1d:b8:6c:
         a4:7b:c3:78:c8:8f:5c:9d:e5:a6:21:b7:56:67:5c:bb:32:d4:
         d4:24:d2:d2:8b:e3:db:32:2e:18:45:a3:44:ed:18:7f:01:7e:
         de:6e:eb:67
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUJPpFSio0pT15Ut93MXCUx+PpMiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTI5NThaFw0yNzAzMTgxNTM0NThaMDMxMTAvBgNV
BAMTKEUzMzA4QUIwQ0REMkQ2QUQ3QThGRUQ4OTIzRkQwODhFNkI5QTkxQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQ6Vyyhe5qbB7cjRpi/46ku7O
Gl3x5bq5txaHxB3gFUChz1Pa4W0vBEBklAGp5fE/inZkX5MTQxamfn2WTyD9Nv3a
bdg55EcLhLpF/ZYq0fMbuwed13VRD2KxBEmA7wpW0VkZxe74+Mpo6TVuVgP3v0Yb
R//LLKaxyZxpTNpmgRq0JwCBMAmE5z00hpb0YTIBNdbQDsg6AoHmlYlrsQpjB9QO
0ENoktdxfPgTsQLHmWzNYux2Mrzgzme2rRtRMj7F7F/xPERC19ftuBcFedygYQab
CF3cirwg+hoAs13NVIoS9nb7EY3JHEl8tCgUIPtzab65GXNvDl5nghtdbB49AgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU4zCKsM3S1q16j+2JI/0IjmuakaowHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMxNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoB0wDQYJKoZIhvcNAQELBQADggEBAH+KT3esspIe1lgE5iPflvjA
XYdTv/1t161STyQXLCe5ZI8aTUoTg6rwNk+i1ZrOQMLAdoOnfXbysUsJNztyMZ0B
s1+ET2valEaov7fNlp9D8lCScjFw6r0fu0gaJ1VXE4itKdeFO6wSAfzRF81z9PqN
SZmLbHA+/zBuua9xCHeJHYYzxG2UilY0//fZEaULQsr2GULNcSgWzPYOqziLAfy5
/vP3bTDWTQOM4SkvfJZxDbXyjXnER4fYa8W2ISeO5OaeMpn7Y2LEDiUhSjM9Sqks
5Pk3HR24bKR7w3jIj1yd5aYht1ZnXLsy1NQk0tKL49syLhhFo0TtGH8Bft5u62c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:33 2026 by rpki-client