Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032323a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032323a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          wdtBQjTZWI0efYvJc0/KePfR5LOBva12Jjiwpa6YZ38=
Subject key identifier:   2C:C0:F6:82:07:D3:D1:4C:C9:84:88:CA:C0:38:55:F2:B1:C8:07:7A
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       07F489872982EA89727553457206D1477F03FF44
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032323a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:34 +0000
ROA not before:           Thu 19 Mar 2026 15:29:34 +0000
ROA not after:            Thu 18 Mar 2027 15:34:34 +0000
asID:                     272951
IP address blocks:        2803:6990:a022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f4:89:87:29:82:ea:89:72:75:53:45:72:06:d1:47:7f:03:ff:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:34 2026 GMT
            Not After : Mar 18 15:34:34 2027 GMT
        Subject: CN=2CC0F68207D3D14CC98488CAC03855F2B1C8077A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9f:8a:43:72:2a:42:9d:4a:45:ae:5b:cc:09:
                    6a:b3:53:ea:68:6e:33:49:a0:61:e3:3b:3c:62:45:
                    2a:36:b5:6d:a1:03:f3:8f:3d:3d:9d:7f:97:ba:57:
                    6d:b3:3d:e2:34:bb:a4:f8:24:d4:f5:fa:fe:ef:ee:
                    ee:1a:70:7c:f9:73:14:a6:74:0a:c8:04:30:7f:eb:
                    83:07:03:b0:33:89:4f:33:9f:47:81:29:cd:92:8b:
                    5a:49:c8:93:7e:9e:dd:d0:6e:79:c3:6e:fa:e4:e5:
                    5e:2c:7d:3f:0f:cf:32:87:6a:c7:4f:e4:ec:89:e2:
                    ea:75:e2:70:97:e6:c2:bb:fd:99:f8:c1:a3:0c:7f:
                    14:81:a8:02:ab:d7:45:67:40:34:01:e4:c9:a1:3e:
                    bd:ca:7b:76:7e:28:29:3f:4c:8f:0b:d0:4c:ca:52:
                    ed:87:ab:8e:62:59:1f:64:68:f9:76:8d:93:d2:a4:
                    17:f7:d4:38:c0:ce:84:f6:e6:70:ad:a3:66:d4:bf:
                    33:f0:49:83:52:04:54:65:da:07:5f:5e:83:e3:1a:
                    ba:87:ac:84:d9:4f:dd:40:8e:f4:c0:5f:e5:71:c1:
                    5b:a0:47:b4:65:ab:47:29:b2:60:08:a5:69:db:12:
                    f3:7b:77:66:1d:33:9e:a5:32:6b:04:ff:6c:e5:cb:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:F6:82:07:D3:D1:4C:C9:84:88:CA:C0:38:55:F2:B1:C8:07:7A
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032323a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a022::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:45:1f:38:9b:e8:0f:25:13:6b:2c:63:91:10:24:d4:79:
         41:6b:fe:d4:5e:fa:ab:9b:0c:5b:e9:0e:00:57:09:0a:62:ac:
         1c:26:fc:07:95:55:da:bc:da:9a:82:48:b9:87:e7:51:8a:e6:
         d9:b8:eb:f9:00:69:1e:22:a2:a7:4d:eb:5d:28:fc:f8:35:41:
         59:bb:13:b4:47:ac:11:81:ef:57:64:c8:c0:f2:d6:d5:72:bb:
         57:db:0f:71:a5:72:15:36:2c:32:73:a8:7e:c7:0b:88:10:ce:
         bb:a8:8c:8c:af:30:74:2b:06:35:fb:6f:93:83:3b:93:e4:f5:
         c0:83:a7:9c:f4:50:da:58:e0:85:46:7d:ac:89:a0:ea:ea:3a:
         78:ba:e6:50:97:95:31:96:1a:ad:82:11:75:aa:4a:27:4b:05:
         1d:62:73:2f:22:e6:15:68:72:b5:4f:65:a6:ea:16:51:88:ed:
         52:c4:9e:24:df:f5:f7:ce:03:14:35:80:97:19:37:22:9a:7a:
         ea:db:18:34:4d:94:d8:3d:22:29:87:6e:ea:be:f6:f1:ff:a1:
         8f:30:27:f0:3e:7f:31:0c:a8:5d:ba:89:fb:4c:f9:17:bc:6b:
         bd:40:69:00:c2:8f:36:b3:4e:af:32:5d:ff:63:77:47:fe:30:
         68:24:a2:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:08 2026 by rpki-client