Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032333a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032333a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          Db34UTeOMMYmnrwQSvpo9tWjf6vbstl4p+zHcwrhjYs=
Subject key identifier:   22:34:AA:4C:DA:DB:C0:30:C5:4F:C5:B5:F2:0B:36:21:30:EB:6C:AD
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       4B98A198836F130A1E644C284D42AE4BAB38A4C7
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032333a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:35:00 +0000
ROA not before:           Thu 19 Mar 2026 15:30:00 +0000
ROA not after:            Thu 18 Mar 2027 15:35:00 +0000
asID:                     272951
IP address blocks:        2803:6990:a023::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:98:a1:98:83:6f:13:0a:1e:64:4c:28:4d:42:ae:4b:ab:38:a4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:30:00 2026 GMT
            Not After : Mar 18 15:35:00 2027 GMT
        Subject: CN=2234AA4CDADBC030C54FC5B5F20B362130EB6CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:43:3e:09:16:6f:38:3b:07:c0:bb:3b:69:
                    c2:1f:a2:22:ca:e9:03:71:de:4a:89:d8:93:e6:49:
                    3d:f9:14:e2:b8:86:cd:f0:91:5a:a9:e9:cc:ad:72:
                    7e:d0:e0:93:3e:85:66:0d:f0:12:c3:74:bc:79:6c:
                    e6:70:b2:35:ee:50:be:30:2e:97:14:db:aa:78:aa:
                    f6:5e:41:f0:4d:22:82:2e:49:ce:36:34:f0:e5:b3:
                    60:bc:54:9c:79:88:e0:f0:39:f7:06:db:a3:17:9f:
                    dd:c1:d9:49:41:5d:37:44:6e:99:a4:49:db:eb:59:
                    1d:5b:3b:eb:36:9d:f9:64:75:76:cc:6c:05:30:78:
                    8f:02:3b:61:b1:7a:2b:f3:26:51:ad:a2:d4:d8:cf:
                    78:2a:f7:85:34:ff:0d:3c:bc:3e:86:b4:0f:ad:bf:
                    34:79:97:3c:0d:bf:be:0c:0a:87:7d:cd:46:2f:55:
                    9e:41:a9:86:c7:51:9f:a1:1a:cf:d2:8c:62:aa:94:
                    a9:0c:b5:c9:61:4b:63:d4:97:e4:82:ff:8b:6a:0f:
                    a8:5c:9a:be:f6:ea:b2:31:74:0a:8c:01:32:c4:c1:
                    c0:a6:f8:f8:c9:b4:0b:f1:fc:b4:a8:e0:54:a8:84:
                    3e:8b:22:85:d5:8a:84:ef:1e:58:49:76:46:18:05:
                    0d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:34:AA:4C:DA:DB:C0:30:C5:4F:C5:B5:F2:0B:36:21:30:EB:6C:AD
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032333a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a023::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:a6:85:3a:7b:df:2b:88:5f:34:ef:6d:b4:35:3a:c9:1f:25:
         1a:4f:34:3d:b7:05:29:5b:03:0c:5f:d5:fe:93:1c:3b:e5:de:
         ef:0d:d2:8d:94:7b:96:3c:a4:71:c7:c2:0b:90:57:5a:03:4f:
         2e:c3:9f:79:6c:c6:53:68:d8:06:c2:69:b0:b9:09:2b:2b:70:
         80:0b:19:bf:d8:5c:2d:29:18:58:7c:4c:a1:09:f4:e4:cd:47:
         0a:dc:db:0b:eb:34:e6:a7:9a:fc:e1:55:30:f5:37:b2:7f:c5:
         65:d6:05:8f:4b:6c:19:4d:e9:7f:f7:7e:42:6b:2d:f4:21:1c:
         a4:4e:3d:83:60:b6:d6:2e:a1:bf:3d:d0:f7:32:2f:4a:7a:2a:
         be:6b:77:28:29:a1:41:15:41:d6:01:53:21:ca:e5:0d:33:85:
         24:ef:74:42:6d:b7:db:f4:8e:a2:46:ab:f0:3a:80:89:49:d6:
         24:07:ca:2d:9a:e5:96:e0:e4:23:a6:b9:d2:cd:24:ab:7a:6a:
         23:5c:17:6c:11:0e:14:11:73:ca:a7:32:e0:6c:71:54:b6:48:
         97:eb:25:43:10:02:57:11:a2:8c:dd:54:6f:54:35:1f:62:0a:
         78:60:e5:15:f2:8d:1e:56:99:4e:41:b6:3c:a6:55:dc:52:dc:
         da:db:e1:a5
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUS5ihmINvEwoeZEwoTUKuS6s4pMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTMwMDBaFw0yNzAzMTgxNTM1MDBaMDMxMTAvBgNV
BAMTKDIyMzRBQTRDREFEQkMwMzBDNTRGQzVCNUYyMEIzNjIxMzBFQjZDQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZEM+CRZvODsHwLs7acIfoiLK
6QNx3kqJ2JPmST35FOK4hs3wkVqp6cytcn7Q4JM+hWYN8BLDdLx5bOZwsjXuUL4w
LpcU26p4qvZeQfBNIoIuSc42NPDls2C8VJx5iODwOfcG26MXn93B2UlBXTdEbpmk
SdvrWR1bO+s2nflkdXbMbAUweI8CO2GxeivzJlGtotTYz3gq94U0/w08vD6GtA+t
vzR5lzwNv74MCod9zUYvVZ5BqYbHUZ+hGs/SjGKqlKkMtclhS2PUl+SC/4tqD6hc
mr726rIxdAqMATLEwcCm+PjJtAvx/LSo4FSohD6LIoXVioTvHlhJdkYYBQ2NAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUIjSqTNrbwDDFT8W18gs2ITDrbK0wHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMyMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoCMwDQYJKoZIhvcNAQELBQADggEBAC6mhTp73yuIXzTvbbQ1Oskf
JRpPND23BSlbAwxf1f6THDvl3u8N0o2Ue5Y8pHHHwguQV1oDTy7Dn3lsxlNo2AbC
abC5CSsrcIALGb/YXC0pGFh8TKEJ9OTNRwrc2wvrNOanmvzhVTD1N7J/xWXWBY9L
bBlN6X/3fkJrLfQhHKROPYNgttYuob890PcyL0p6Kr5rdygpoUEVQdYBUyHK5Q0z
hSTvdEJtt9v0jqJGq/A6gIlJ1iQHyi2a5Zbg5COmudLNJKt6aiNcF2wRDhQRc8qn
MuBscVS2SJfrJUMQAlcRoozdVG9UNR9iCnhg5RXyjR5WmU5BtjymVdxS3Nrb4aU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:38 2026 by rpki-client