Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032653a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613032653a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          xDQ++Skrg317CTRLUnZis1nok2YqSwqo62okHV5/39c=
Subject key identifier:   CE:48:68:B6:1E:1E:56:3D:04:3C:B6:31:52:A9:FF:7A:B9:1F:E6:46
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       489A9B849D060D2C1D20E63257C10B487458E083
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032653a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:59 +0000
ROA not before:           Thu 19 Mar 2026 15:29:59 +0000
ROA not after:            Thu 18 Mar 2027 15:34:59 +0000
asID:                     272951
IP address blocks:        2803:6990:a02e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9a:9b:84:9d:06:0d:2c:1d:20:e6:32:57:c1:0b:48:74:58:e0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:59 2026 GMT
            Not After : Mar 18 15:34:59 2027 GMT
        Subject: CN=CE4868B61E1E563D043CB63152A9FF7AB91FE646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:7d:8f:1f:d7:ee:54:a9:91:6d:08:df:0a:
                    6d:e5:4c:f5:85:a1:c3:79:82:70:f6:7f:cf:19:78:
                    f7:aa:ca:0f:86:10:70:2e:61:85:b1:54:9f:e8:93:
                    d7:f0:c8:e6:7f:25:91:b6:3f:ac:ca:71:cd:f3:2a:
                    a6:d5:aa:1e:b5:75:1c:c7:97:71:aa:a0:d9:70:e0:
                    f1:a6:d4:3c:3f:e2:41:45:6d:50:d8:d5:bf:de:58:
                    0f:56:c9:b7:d3:c6:59:46:1f:dd:8b:de:c4:6e:50:
                    5b:73:37:c2:ad:2a:9d:66:e1:d0:dc:c0:72:2e:55:
                    7c:e6:64:45:b1:8d:c3:13:5d:ae:25:00:70:16:1d:
                    d0:ec:1c:1f:26:49:0c:12:50:3f:35:aa:f2:38:51:
                    06:5c:6f:da:d4:a0:91:1f:3b:a6:c0:9c:0f:17:26:
                    3f:73:aa:17:50:df:2e:fb:76:eb:4c:d9:da:c4:a8:
                    96:73:53:7c:97:3e:c9:bc:de:c5:60:af:82:ad:df:
                    ee:b3:2e:15:e1:8b:18:f2:8c:d5:6a:82:4c:d3:3b:
                    d3:84:98:da:11:1d:30:38:08:ed:ed:64:e4:bd:27:
                    75:58:9c:09:2a:a2:ce:f9:13:24:cc:b5:1c:33:d4:
                    f9:b9:34:96:53:af:43:42:dc:4b:1a:1c:15:6a:98:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:48:68:B6:1E:1E:56:3D:04:3C:B6:31:52:A9:FF:7A:B9:1F:E6:46
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613032653a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a02e::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:98:c8:14:76:96:3e:ab:4f:67:b4:af:2e:54:0e:96:8a:1c:
         77:80:61:63:50:a0:00:61:ac:f2:1b:9b:71:6f:ab:22:33:af:
         f9:20:79:0b:f2:af:78:70:b1:8b:8e:ba:a7:41:53:6b:69:ec:
         aa:1e:e8:29:c2:84:28:45:9a:c2:53:c4:6c:51:d9:70:6b:8d:
         ec:4e:57:4c:f6:fd:3b:c4:2b:c1:af:50:00:28:ed:d0:bb:3c:
         18:82:36:dd:25:85:f9:b6:33:c8:3f:36:4f:87:2e:ed:26:05:
         e4:1e:fb:d5:05:24:dc:33:c1:78:19:f6:3b:6f:7e:ce:6f:6b:
         94:00:dd:b9:52:de:34:d7:31:7f:78:2d:74:6b:8c:07:59:d3:
         6e:1e:61:f7:69:26:f9:bd:38:60:a9:20:a7:61:1d:a0:67:31:
         38:f3:5b:f5:c9:e7:71:e2:05:0c:fd:c2:6a:dd:cb:39:76:95:
         95:6e:a2:f7:30:84:2e:04:c7:12:b7:8e:5a:a4:34:be:66:c8:
         67:7b:03:91:24:ed:18:d7:ed:20:f4:2b:51:a8:bc:54:58:77:
         f3:19:4a:70:4f:09:6c:b1:49:b2:c5:8f:30:7f:55:92:ce:a1:
         56:55:76:af:81:71:72:ba:5d:df:34:46:5d:e5:62:c6:56:a8:
         f4:49:72:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:17 2026 by rpki-client