Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032383a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032383a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          shP8LuEcRlqNFhugBQGRNnY7m37N7vtMhxpckx9lAoY=
Subject key identifier:   12:AC:C3:32:A9:2E:EA:1B:89:38:30:3D:E2:C7:B6:B4:B2:6C:07:3E
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       324FCEC3FAEA1550D138AAB0402C72213B66870B
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032383a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:45 +0000
ROA not before:           Thu 19 Mar 2026 15:29:45 +0000
ROA not after:            Thu 18 Mar 2027 15:34:45 +0000
asID:                     272951
IP address blocks:        2803:6990:a028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4f:ce:c3:fa:ea:15:50:d1:38:aa:b0:40:2c:72:21:3b:66:87:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:45 2026 GMT
            Not After : Mar 18 15:34:45 2027 GMT
        Subject: CN=12ACC332A92EEA1B8938303DE2C7B6B4B26C073E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:ee:45:cb:00:bf:ab:d7:b8:e6:f8:0a:35:
                    84:11:d6:56:8c:78:2c:c5:7f:ff:73:d5:aa:26:79:
                    82:57:8a:f0:2e:1e:5c:98:aa:29:24:6f:ec:3b:33:
                    75:cf:90:d0:a1:4d:fe:4e:23:43:e0:3d:4e:fc:ed:
                    2f:92:cd:d3:cd:9f:66:e0:39:ad:a6:34:9d:13:f9:
                    e7:cb:13:0a:28:28:01:fc:ab:5d:b8:a0:65:8a:e5:
                    60:7b:73:f2:79:69:1e:8f:7b:ae:34:a2:b6:b9:00:
                    2e:51:c8:37:12:ae:fc:fb:8c:fd:d1:78:73:cd:56:
                    e0:42:3c:ac:ae:bb:bd:96:17:28:61:0d:dd:a1:94:
                    21:d7:a4:df:de:0a:ef:c2:28:7c:2d:d5:b7:52:bc:
                    5c:da:8f:f2:e9:a5:ef:1a:e3:96:4e:ad:23:b2:30:
                    a2:74:d3:89:57:e8:83:fe:fa:f0:80:9f:a3:c9:a4:
                    70:02:fa:9a:ea:5f:6e:72:a9:c9:1b:d5:2a:5d:17:
                    54:50:39:f0:85:06:97:c3:86:8f:db:3e:6c:78:80:
                    71:af:04:37:52:08:fc:1f:ff:0d:81:3f:c5:be:74:
                    71:18:1a:90:e3:2a:a6:a8:7c:ff:25:f3:62:cc:20:
                    26:09:8d:c1:be:2f:ed:51:28:3d:66:67:fa:58:ea:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AC:C3:32:A9:2E:EA:1B:89:38:30:3D:E2:C7:B6:B4:B2:6C:07:3E
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032383a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a028::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:91:de:1a:36:86:a9:97:e9:4e:cf:f9:ac:ed:47:79:59:35:
         15:4b:53:bb:30:76:6b:de:ed:f9:42:f8:9e:b7:89:3c:03:79:
         83:da:9a:b1:e0:d1:75:32:78:35:00:55:9f:c4:b3:06:f2:8c:
         df:c2:d2:eb:09:e7:2d:91:5c:eb:b5:81:76:27:0f:2c:82:6c:
         65:d0:8b:13:59:5c:9b:9b:85:1d:b5:38:59:7a:a7:b3:23:57:
         2c:34:5e:be:da:c6:8e:3f:c0:5a:45:4c:2a:8e:b9:ca:02:6e:
         20:26:0f:0c:dc:06:41:79:47:0a:32:73:1d:17:4d:c3:40:72:
         2c:11:93:dd:9b:e9:dc:15:57:07:0d:0c:fc:f9:a1:46:7c:25:
         94:11:8b:b5:9c:b4:14:0e:03:88:90:b2:78:52:1d:0e:5e:c5:
         8a:eb:0f:77:05:ed:4b:d4:75:35:00:28:74:55:ff:ff:4a:50:
         4c:40:a8:7a:09:63:84:14:2b:9f:c9:0c:d5:08:dd:1a:17:f0:
         37:6b:2e:fe:9c:43:2b:9e:9f:44:83:6a:05:05:84:fa:80:5d:
         c0:63:35:35:99:07:6b:af:3e:30:bd:2b:01:63:f1:85:b8:c0:
         18:d8:47:a6:94:c1:4d:11:e7:ba:89:fb:a0:a7:1d:ae:fe:f1:
         3c:61:b5:b3
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUMk/Ow/rqFVDROKqwQCxyITtmhwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTI5NDVaFw0yNzAzMTgxNTM0NDVaMDMxMTAvBgNV
BAMTKDEyQUNDMzMyQTkyRUVBMUI4OTM4MzAzREUyQzdCNkI0QjI2QzA3M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ou5FywC/q9e45vgKNYQR1laM
eCzFf/9z1aomeYJXivAuHlyYqikkb+w7M3XPkNChTf5OI0PgPU787S+SzdPNn2bg
Oa2mNJ0T+efLEwooKAH8q124oGWK5WB7c/J5aR6Pe640ora5AC5RyDcSrvz7jP3R
eHPNVuBCPKyuu72WFyhhDd2hlCHXpN/eCu/CKHwt1bdSvFzaj/Lppe8a45ZOrSOy
MKJ004lX6IP++vCAn6PJpHAC+prqX25yqckb1SpdF1RQOfCFBpfDho/bPmx4gHGv
BDdSCPwf/w2BP8W+dHEYGpDjKqaofP8l82LMICYJjcG+L+1RKD1mZ/pY6nt7AgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUEqzDMqku6huJODA94se2tLJsBz4wHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMyMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoCgwDQYJKoZIhvcNAQELBQADggEBAFWR3ho2hqmX6U7P+aztR3lZ
NRVLU7swdmve7flC+J63iTwDeYPamrHg0XUyeDUAVZ/EswbyjN/C0usJ5y2RXOu1
gXYnDyyCbGXQixNZXJubhR21OFl6p7MjVyw0Xr7axo4/wFpFTCqOucoCbiAmDwzc
BkF5Rwoycx0XTcNAciwRk92b6dwVVwcNDPz5oUZ8JZQRi7WctBQOA4iQsnhSHQ5e
xYrrD3cF7UvUdTUAKHRV//9KUExAqHoJY4QUK5/JDNUI3RoX8DdrLv6cQyuen0SD
agUFhPqAXcBjNTWZB2uvPjC9KwFj8YW4wBjYR6aUwU0R57qJ+6CnHa7+8TxhtbM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:24 2026 by rpki-client