Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033623a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613033623a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          9Pv0ebBp2SwJHaLhJLOPb6xMlI4IQgSVbZuLvRHj5V8=
Subject key identifier:   EB:16:91:89:E8:BD:A7:39:BF:73:25:06:14:19:59:EF:A1:5E:00:37
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       796BAC3CAC45A02732DA8BEC03467778CA6DBF32
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033623a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:40 +0000
ROA not before:           Thu 19 Mar 2026 15:29:40 +0000
ROA not after:            Thu 18 Mar 2027 15:34:40 +0000
asID:                     272951
IP address blocks:        2803:6990:a03b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6b:ac:3c:ac:45:a0:27:32:da:8b:ec:03:46:77:78:ca:6d:bf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:40 2026 GMT
            Not After : Mar 18 15:34:40 2027 GMT
        Subject: CN=EB169189E8BDA739BF732506141959EFA15E0037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:06:cc:6d:c5:8f:83:1d:95:d5:1f:c5:5d:
                    ae:91:6f:ac:ca:6f:3e:ab:4a:ec:f7:f4:22:ff:54:
                    23:bf:3c:08:f9:d0:79:6f:68:17:06:3e:60:cd:0b:
                    89:79:ed:fb:ed:ee:59:17:4e:c2:2e:96:a3:6f:f4:
                    dd:1f:88:84:7c:10:54:61:31:4d:c4:8a:39:b0:15:
                    7b:c9:e9:06:1c:75:6c:fd:04:bc:70:f7:dd:f1:a6:
                    2a:dc:45:80:93:bb:68:99:94:01:51:75:12:24:0e:
                    72:5b:18:bc:bb:9d:9f:ff:63:76:95:f5:a3:27:29:
                    0c:87:57:5a:ba:78:38:4c:17:a6:47:5d:71:24:f0:
                    b4:0b:9a:43:68:8e:7e:b8:49:d9:19:ff:80:f5:c0:
                    d5:fb:ae:0d:35:dc:1b:27:9a:b8:56:a8:6f:9d:6d:
                    54:36:ad:cd:05:93:62:5e:55:32:ff:3b:6b:ce:a9:
                    92:24:46:eb:21:a5:2a:c3:b8:e7:0d:f3:5e:fc:b5:
                    99:a2:49:dd:16:40:e1:df:3a:47:e0:43:2e:1c:27:
                    0c:96:13:12:13:88:25:36:f3:b7:a2:7d:ab:bc:95:
                    99:51:59:3e:80:b9:e7:c9:42:60:60:49:4e:00:63:
                    56:4b:ca:55:69:b8:e3:ed:20:b9:25:fb:52:cd:bc:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:16:91:89:E8:BD:A7:39:BF:73:25:06:14:19:59:EF:A1:5E:00:37
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613033623a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a03b::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:14:92:b6:77:57:42:87:a2:d6:0a:e0:9c:90:a3:8b:64:24:
         fb:fe:8b:ca:3a:db:1c:2d:ca:2b:6b:76:4c:a4:75:e2:a9:42:
         00:cc:fd:19:09:e2:73:6f:e5:96:64:9e:25:bd:7c:e0:d0:2b:
         9d:fd:48:ad:b5:ce:74:4b:c0:01:1d:6a:2f:5b:c8:54:8e:8e:
         a3:da:13:3e:3a:9a:cf:4b:24:93:6c:02:d1:97:54:c7:4e:0f:
         ff:74:b7:24:70:10:ea:bb:ac:e2:5c:a3:0d:f9:3a:23:f7:79:
         59:48:cd:29:06:a3:a6:96:c7:9b:4f:7c:16:7c:98:18:ea:b9:
         00:e7:0a:22:db:25:c9:27:e5:cc:df:fb:77:a9:ba:a9:19:4f:
         ae:9f:8e:27:0d:82:60:89:c3:5a:ad:90:d3:1b:25:17:28:a6:
         94:1f:f6:89:84:4a:1d:39:6f:95:dd:e3:b5:7a:1e:e3:18:ce:
         88:3f:fb:04:5b:86:ed:71:3e:ab:13:04:a6:d4:80:e5:fd:05:
         73:44:ee:02:34:9f:b2:33:5a:f5:a9:33:d5:0d:24:5f:db:76:
         b5:18:bb:91:a5:b2:93:ec:d4:ac:f6:ad:7f:b0:e6:82:ed:e6:
         03:c5:9f:d5:30:c0:6a:66:80:09:57:98:80:fe:57:47:93:b4:
         2a:1c:ca:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:35 2026 by rpki-client