Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033333a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613033333a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          5g1pDPyayM0J/R4UPYCXhK5ja24YloHHrIWCVxRTYXM=
Subject key identifier:   DD:C0:72:D8:E0:39:09:A0:39:31:19:B1:FD:9B:CF:25:47:46:A9:0C
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       2F9044950C1EDE682A0BFBB680DC853F979B1F10
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033333a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:48 +0000
ROA not before:           Thu 19 Mar 2026 15:29:48 +0000
ROA not after:            Thu 18 Mar 2027 15:34:48 +0000
asID:                     272951
IP address blocks:        2803:6990:a033::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:90:44:95:0c:1e:de:68:2a:0b:fb:b6:80:dc:85:3f:97:9b:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:48 2026 GMT
            Not After : Mar 18 15:34:48 2027 GMT
        Subject: CN=DDC072D8E03909A0393119B1FD9BCF254746A90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c6:3f:bf:9f:39:06:fa:be:7e:1d:ec:8a:96:
                    e8:2d:b6:e5:bf:6d:0e:cc:47:bd:0e:56:d7:35:2b:
                    31:02:6c:3a:96:f8:6c:09:d6:32:f9:eb:05:e1:69:
                    9a:b9:7c:a3:bf:53:5c:ab:a7:66:14:60:33:3f:e8:
                    cd:19:29:a8:f3:4f:6f:f9:df:aa:4f:d1:6a:0f:a5:
                    75:89:4a:a2:73:ba:e5:bb:7b:fa:52:31:ce:0c:53:
                    6f:ec:6c:3b:79:b6:31:eb:8a:1b:14:bb:25:a7:a9:
                    93:32:c4:b3:54:62:17:8d:ee:8b:cf:72:1e:4a:60:
                    f0:cc:2f:8f:d4:fd:80:a6:25:c9:50:00:f6:aa:82:
                    4b:01:c7:c3:55:28:d1:8d:8f:5e:dd:a1:05:c5:6e:
                    c2:e0:cb:bf:6c:2d:f8:a0:9d:57:4d:25:11:ba:79:
                    69:ba:bc:b8:2c:5f:d3:8b:c4:7a:28:31:8e:3a:2a:
                    b2:74:19:cf:36:60:8b:81:23:b7:09:58:c4:55:04:
                    14:66:a4:4b:12:8e:b8:00:df:69:e2:53:b4:b4:ca:
                    05:48:ee:e0:cf:d8:60:86:88:e6:9a:75:29:ef:49:
                    bd:6c:ed:50:60:b0:74:5a:81:5e:65:9a:b4:1a:f6:
                    11:11:54:3e:14:0e:98:ad:35:1a:0c:a9:21:e0:e7:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C0:72:D8:E0:39:09:A0:39:31:19:B1:FD:9B:CF:25:47:46:A9:0C
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033333a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a033::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:09:3d:c2:81:a9:0c:e5:bb:d4:2b:e0:9e:27:38:1f:2c:
         1f:cb:2a:bc:47:c7:8f:5f:d2:17:9f:40:4e:6f:2c:98:17:34:
         63:88:07:84:d5:0e:c2:b1:a5:39:1b:1f:42:e1:ad:6a:b5:f5:
         b7:1f:0c:78:7a:dc:65:74:49:9c:20:82:d2:fe:74:1a:1a:6e:
         e1:1b:9d:21:22:ca:93:83:46:fe:b0:4b:00:b8:cd:12:46:e0:
         d5:b2:57:fd:ff:b1:48:d4:42:94:6f:70:4f:91:53:1d:29:aa:
         a0:58:44:38:a5:57:91:51:b9:90:45:00:ed:8c:42:a4:a7:f0:
         a3:05:57:ec:b5:a7:db:5f:e7:00:e8:32:93:d4:b5:4b:90:98:
         c7:a5:f3:ed:c4:97:e9:8f:36:95:50:3e:a9:fc:b4:54:e3:6b:
         58:ff:2c:4b:b7:17:29:87:1b:5c:46:bf:80:1a:90:84:09:0a:
         dd:f4:76:14:72:2e:72:2d:d6:61:9c:b1:8b:61:f0:b1:24:70:
         b4:63:6c:fe:eb:46:a1:f4:19:ea:e3:3e:be:83:e4:5e:9e:17:
         04:04:55:bd:b3:14:a2:e7:d1:88:6a:9c:ff:be:86:71:f4:e9:
         37:92:9c:b2:53:aa:d0:06:1f:6b:1a:0a:62:44:55:4e:19:c1:
         f4:9c:e4:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:48 2026 by rpki-client