Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033393a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613033393a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          6jmRPtWHq8xbbIwszsqYjKKEWxhc6FCrd7sDfTZ+FxA=
Subject key identifier:   23:B9:E6:69:37:DC:B6:3B:06:49:AD:84:4D:45:F0:B0:2C:86:89:93
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       1876F0E347DFDBC664BAC03B2FB1393E8F103F20
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033393a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:35:00 +0000
ROA not before:           Thu 19 Mar 2026 15:30:00 +0000
ROA not after:            Thu 18 Mar 2027 15:35:00 +0000
asID:                     272951
IP address blocks:        2803:6990:a039::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:76:f0:e3:47:df:db:c6:64:ba:c0:3b:2f:b1:39:3e:8f:10:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:30:00 2026 GMT
            Not After : Mar 18 15:35:00 2027 GMT
        Subject: CN=23B9E66937DCB63B0649AD844D45F0B02C868993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:fe:dc:4e:e5:60:50:35:df:5c:59:76:d9:
                    1b:a9:14:18:f6:0c:9c:51:56:42:36:24:fc:1e:e4:
                    ca:2f:54:56:cc:0b:22:f7:97:77:b7:87:c6:c2:87:
                    47:e6:12:32:5c:0a:a6:3c:ea:82:2e:28:bc:49:3d:
                    0a:b6:b7:30:34:60:cc:be:74:78:18:08:e6:b8:2c:
                    ad:ef:5c:52:a1:5d:c1:3c:60:4f:bc:65:40:00:73:
                    fe:8b:f5:b0:b5:59:8e:3d:84:21:8f:0f:98:a1:40:
                    1f:5c:bb:75:24:4d:13:e9:de:51:19:99:f0:ca:54:
                    07:e8:34:79:1a:11:95:13:30:4a:0c:74:c7:5e:83:
                    2e:95:c2:09:f6:29:e2:1c:dc:c7:0c:71:0e:01:b0:
                    63:8d:da:53:64:c8:6e:b0:ac:12:55:85:4b:63:9a:
                    50:e1:43:0d:02:02:ec:1f:7f:fd:06:c1:b2:db:e9:
                    0a:f2:ef:5f:82:ad:f1:e1:d6:02:c6:5f:85:79:67:
                    40:5c:ba:d1:63:9b:b6:d7:20:43:43:29:48:ee:fb:
                    03:8e:24:30:db:ca:7f:c4:db:b8:bf:1b:d3:bb:fa:
                    6d:bf:75:e8:93:c0:15:be:fe:c9:a5:03:48:4a:e6:
                    f1:ed:42:54:0b:1c:a9:1e:9d:8f:85:14:15:69:11:
                    da:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:E6:69:37:DC:B6:3B:06:49:AD:84:4D:45:F0:B0:2C:86:89:93
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033393a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a039::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:fb:7b:72:5c:f8:a3:b0:e2:34:5e:cf:da:7c:c1:b4:f4:
         49:00:f8:64:ce:f4:cb:e9:eb:40:7c:1c:6a:ec:6c:db:f5:06:
         4d:e6:42:3f:bb:65:dc:af:1d:b8:17:f3:76:01:ea:2c:32:d7:
         7c:58:42:76:ca:dc:f3:ea:45:7a:d9:17:88:12:56:52:a8:1f:
         87:f9:38:75:17:4e:a0:da:64:5e:7c:9e:a1:a6:0a:be:e6:3d:
         a2:ec:49:4f:ec:7b:81:1a:31:03:b5:9a:fc:ce:75:9c:73:21:
         dd:69:1f:6d:1b:02:46:90:aa:80:73:df:16:6e:e9:ef:99:64:
         bd:e4:b0:92:03:b4:6f:33:40:31:ae:53:fa:49:dd:e2:45:a6:
         f6:07:10:65:1d:39:41:2b:dc:8b:4f:ce:3d:96:20:0d:66:93:
         6b:a0:48:0e:a7:16:f6:0c:10:74:7b:8c:55:72:ee:00:e5:fc:
         01:ed:58:81:77:f2:a0:c0:e2:5b:8d:00:ac:5a:56:5e:a3:70:
         2f:a9:5c:f2:65:ca:95:02:86:29:c6:dd:cd:e7:c9:65:ec:06:
         2d:a5:95:7b:3c:b5:38:8a:bb:15:00:1e:73:07:fc:20:04:1f:
         b6:88:2a:3f:f2:a5:42:57:4f:76:43:2d:f3:4d:4c:68:d8:b4:
         f4:a2:3c:80
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUGHbw40ff28ZkusA7L7E5Po8QPyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTMwMDBaFw0yNzAzMTgxNTM1MDBaMDMxMTAvBgNV
BAMTKDIzQjlFNjY5MzdEQ0I2M0IwNjQ5QUQ4NDRENDVGMEIwMkM4Njg5OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvv/7cTuVgUDXfXFl22RupFBj2
DJxRVkI2JPwe5MovVFbMCyL3l3e3h8bCh0fmEjJcCqY86oIuKLxJPQq2tzA0YMy+
dHgYCOa4LK3vXFKhXcE8YE+8ZUAAc/6L9bC1WY49hCGPD5ihQB9cu3UkTRPp3lEZ
mfDKVAfoNHkaEZUTMEoMdMdegy6Vwgn2KeIc3McMcQ4BsGON2lNkyG6wrBJVhUtj
mlDhQw0CAuwff/0GwbLb6Qry71+CrfHh1gLGX4V5Z0BcutFjm7bXIENDKUju+wOO
JDDbyn/E27i/G9O7+m2/deiTwBW+/smlA0hK5vHtQlQLHKkenY+FFBVpEdoPAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUI7nmaTfctjsGSa2ETUXwsCyGiZMwHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjEz
MDMzMzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA2mQoDkwDQYJKoZIhvcNAQELBQADggEBAJvB+3tyXPijsOI0Xs/afMG0
9EkA+GTO9Mvp60B8HGrsbNv1Bk3mQj+7ZdyvHbgX83YB6iwy13xYQnbK3PPqRXrZ
F4gSVlKoH4f5OHUXTqDaZF58nqGmCr7mPaLsSU/se4EaMQO1mvzOdZxzId1pH20b
AkaQqoBz3xZu6e+ZZL3ksJIDtG8zQDGuU/pJ3eJFpvYHEGUdOUEr3ItPzj2WIA1m
k2ugSA6nFvYMEHR7jFVy7gDl/AHtWIF38qDA4luNAKxaVl6jcC+pXPJlypUChinG
3c3nyWXsBi2llXs8tTiKuxUAHnMH/CAEH7aIKj/ypUJXT3ZDLfNNTGjYtPSiPIA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:16 2026 by rpki-client