Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032613a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032613a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          +zIlzkWPqX9CmGM78znC5Tewa82DZBpITv8PeKf3aOE=
Subject key identifier:   99:2F:AE:83:AD:9B:CE:13:79:07:85:E9:14:D6:5A:08:75:9F:C9:C4
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       6BF1BDDF73724E67778CB4DF15B1451E60D40172
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032613a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:45 +0000
ROA not before:           Thu 19 Mar 2026 15:29:45 +0000
ROA not after:            Thu 18 Mar 2027 15:34:45 +0000
asID:                     272951
IP address blocks:        2803:6990:a02a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f1:bd:df:73:72:4e:67:77:8c:b4:df:15:b1:45:1e:60:d4:01:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:45 2026 GMT
            Not After : Mar 18 15:34:45 2027 GMT
        Subject: CN=992FAE83AD9BCE13790785E914D65A08759FC9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:01:e2:ec:a0:e2:1b:9f:e2:95:a4:d4:a6:
                    d2:90:3c:88:b5:a3:69:4d:88:1a:1a:be:60:fb:57:
                    63:ac:e8:c5:d5:28:51:e5:34:70:e6:eb:36:33:10:
                    81:28:b4:92:74:85:0b:62:7a:f3:d5:18:65:f9:21:
                    3c:12:46:bf:0e:88:e0:25:4b:01:99:a7:a1:13:20:
                    4c:e7:bf:fa:5d:0f:18:bf:65:46:b7:c8:a1:13:dd:
                    a0:65:67:ff:87:2c:18:9b:31:a7:f6:36:7c:84:7b:
                    0e:6d:57:99:c3:98:2e:29:e2:a2:a5:0c:35:4e:1f:
                    e5:7a:47:91:44:35:a6:f5:9e:0e:16:01:39:fc:e2:
                    ea:6d:bd:64:86:e6:db:17:81:46:13:e8:e0:1e:21:
                    95:d8:c8:7b:3b:2b:44:56:df:b4:44:e4:e2:79:57:
                    84:35:f8:e9:0d:47:eb:ec:8b:e2:dc:cd:f4:2c:20:
                    b9:e8:f0:7f:2e:f7:7e:01:d7:96:85:32:f5:43:ca:
                    61:43:aa:f6:f4:9f:11:e3:d4:7e:2d:b8:31:c8:a3:
                    8d:09:ac:d4:55:02:e9:4a:82:56:9f:63:ba:23:67:
                    b7:8a:f9:81:ba:a5:d1:29:bb:dd:c9:35:63:7d:4f:
                    8f:f4:9f:04:0a:cc:f4:a5:88:98:e1:3b:94:06:d5:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2F:AE:83:AD:9B:CE:13:79:07:85:E9:14:D6:5A:08:75:9F:C9:C4
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032613a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a02a::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:a7:ab:76:29:96:e3:72:ba:3b:20:47:71:66:bc:e0:ab:f2:
         70:f8:37:b4:c4:08:3a:4f:44:69:14:55:59:95:3a:b7:38:5b:
         42:96:e6:13:16:9d:ab:88:da:4f:94:d5:60:fe:1b:a8:c8:e6:
         cd:c4:34:b1:cc:59:a7:e2:af:9f:9f:b8:17:d3:e1:bf:6f:55:
         c3:d0:94:f1:4c:51:8b:b0:c4:5d:74:c3:51:30:cf:89:d0:80:
         82:5d:6b:44:31:57:db:f9:87:28:3d:ed:52:79:f8:fa:07:40:
         b2:dc:63:74:82:e7:75:aa:3f:e0:3f:a5:ad:da:2a:ba:8f:56:
         43:c3:f5:38:7f:8c:4c:a1:c2:12:25:88:f9:8a:da:37:e9:99:
         d7:89:c9:b7:0b:c0:40:c4:f8:69:96:08:18:41:6a:82:64:24:
         c0:b2:43:d3:6a:39:62:d3:9d:47:a5:af:1e:8a:ce:67:29:39:
         58:0a:20:f5:21:9d:43:b3:46:f2:56:37:b2:4b:7c:ed:fa:b2:
         50:b7:73:60:76:bf:ee:dd:da:a3:b7:5a:80:75:56:72:ed:b6:
         01:be:7a:2b:23:62:48:eb:95:88:44:21:eb:9a:22:29:a9:22:
         08:77:67:55:3a:3e:23:bb:de:15:55:3f:e1:fc:41:b2:3b:42:
         96:a2:d9:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:03 2026 by rpki-client