Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033323a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613033323a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          tdES12nvayl1BheFf0gCM86mrycfCs9qXZ7wPwwTGTs=
Subject key identifier:   36:32:7A:6D:B2:B2:AD:5A:21:F8:A2:F1:42:48:8C:3B:EE:BB:BE:1E
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       69ECAC3B0E52636E61306D4BCA4F4704BB5935EA
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033323a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:39 +0000
ROA not before:           Thu 19 Mar 2026 15:29:39 +0000
ROA not after:            Thu 18 Mar 2027 15:34:39 +0000
asID:                     272951
IP address blocks:        2803:6990:a032::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ec:ac:3b:0e:52:63:6e:61:30:6d:4b:ca:4f:47:04:bb:59:35:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:39 2026 GMT
            Not After : Mar 18 15:34:39 2027 GMT
        Subject: CN=36327A6DB2B2AD5A21F8A2F142488C3BEEBBBE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:84:61:48:c6:bd:b5:dc:23:bf:fa:53:36:
                    fb:a2:dd:60:e7:3c:64:66:58:a0:75:c2:1b:04:5b:
                    d0:3b:ed:ba:dc:7a:52:03:bc:24:fe:86:9b:b9:8c:
                    bc:81:44:a9:3b:dc:3f:3e:80:5b:61:9f:79:dc:9d:
                    05:7d:c9:66:8b:26:a7:8d:0b:ca:e3:99:ab:dd:57:
                    90:7a:f7:47:f9:47:f4:38:f0:5a:a4:1e:b9:d2:a5:
                    e5:27:12:99:bc:f2:2c:74:50:ad:16:e4:2a:1e:0b:
                    0f:65:55:87:a3:56:d7:4b:f7:6b:b4:83:70:50:27:
                    cd:81:81:b4:47:c2:83:73:5e:1c:f1:ff:30:ce:d7:
                    15:49:b0:bc:ac:12:09:6b:09:55:b5:2f:1b:c8:bf:
                    d2:45:29:66:6d:13:e0:4e:a6:d4:78:e1:2a:af:b0:
                    aa:65:7f:29:aa:0a:32:32:03:6c:a6:6d:d2:27:a9:
                    ad:10:99:79:b6:89:55:01:db:0d:62:cd:7b:37:2f:
                    cc:5f:e5:9d:26:db:2e:fe:aa:41:a8:16:46:8d:6e:
                    d3:8a:e7:b3:a3:6c:e8:ff:22:89:3d:e6:70:b1:7a:
                    be:86:d9:b9:f8:fd:9b:0d:0e:37:0c:70:ed:c1:63:
                    93:14:23:ba:8c:d2:e3:0d:85:a8:89:3e:ff:58:13:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:32:7A:6D:B2:B2:AD:5A:21:F8:A2:F1:42:48:8C:3B:EE:BB:BE:1E
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033323a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a032::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:c8:b8:cf:fa:3e:0e:1d:e6:56:76:7b:f0:13:12:30:44:d4:
         71:31:f2:1e:3b:88:88:74:45:2d:cc:92:33:7f:b6:d8:83:78:
         3a:17:93:ca:d2:92:a0:b3:22:18:8d:23:9b:1f:be:f3:48:29:
         28:bb:03:c8:81:16:4b:10:4b:ee:f6:9a:2d:21:38:bc:51:8a:
         4c:73:cd:3f:3f:99:e7:75:33:12:f6:8c:a3:e4:1c:45:2c:54:
         db:e0:95:09:a7:fe:1c:41:93:5d:f5:56:dc:1a:e0:54:04:92:
         44:d7:74:cc:9e:7c:01:c7:6a:c4:c9:96:c5:96:84:83:18:7e:
         fa:e7:80:bb:af:69:89:d3:ba:cf:c1:10:21:86:93:3e:40:c2:
         65:ea:e1:ee:3f:04:2c:61:e1:67:0c:ad:14:ae:bb:f3:81:b7:
         07:8f:8c:d4:0c:1a:8d:24:fd:3e:5b:3c:90:fd:fb:5e:25:37:
         5b:4f:31:6e:e0:70:04:82:0a:79:5f:d1:23:3e:40:37:34:0c:
         e1:5f:96:13:85:73:86:e7:9b:59:c1:43:da:a0:f5:65:4a:72:
         48:a7:d7:2c:45:00:a5:38:0d:4e:94:4c:8c:3a:0a:12:7f:b1:
         c5:45:4e:f7:d6:c8:1b:9c:f4:f0:69:0e:bf:36:16:9d:2d:72:
         e5:65:dc:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:17 2026 by rpki-client