Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613766343a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a613766343a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          3hsZkk3JgFMCq6JkcIEDLwE9ORyrrL8pmKY99GPItZM=
Subject key identifier:   C9:5F:9C:F9:2A:94:11:34:99:F4:6E:6E:28:EB:15:D4:BA:19:E5:F3
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       40746357EA44E342AFA57417D068C2836FBB7796
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613766343a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:43 +0000
ROA not before:           Thu 19 Mar 2026 15:29:43 +0000
ROA not after:            Thu 18 Mar 2027 15:34:43 +0000
asID:                     272951
IP address blocks:        2803:6990:a7f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:74:63:57:ea:44:e3:42:af:a5:74:17:d0:68:c2:83:6f:bb:77:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:43 2026 GMT
            Not After : Mar 18 15:34:43 2027 GMT
        Subject: CN=C95F9CF92A94113499F46E6E28EB15D4BA19E5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:02:f7:a5:a9:ca:3c:99:bd:ba:d8:7f:e9:
                    94:f0:e3:85:85:42:b0:ea:7b:4c:f6:15:14:cd:57:
                    66:d5:ed:3e:48:5a:e8:26:6f:e2:4f:37:a1:af:cb:
                    ec:0d:cd:23:0d:16:c9:b4:1b:88:b5:01:7d:5b:84:
                    8b:3f:b4:3c:92:9e:a5:88:5f:9a:a3:d2:22:93:2a:
                    ed:ac:18:cf:b0:84:bb:8b:c0:13:dd:44:db:34:17:
                    c1:d4:80:8f:7b:4e:16:9c:c9:a0:c5:a5:48:6c:4c:
                    ae:32:24:a8:18:ea:15:90:57:37:48:61:e3:1a:15:
                    1d:66:7b:fb:97:99:a3:53:9f:e9:6a:61:55:11:24:
                    dc:d9:67:3b:11:a6:74:3c:8a:17:79:31:c0:c1:67:
                    15:3b:88:6a:2a:ea:1f:6a:5f:ab:2f:99:f1:4e:9a:
                    f6:45:63:78:15:2b:56:af:f3:11:d3:82:c7:08:0e:
                    9a:cd:58:c4:9d:be:aa:36:cd:80:13:7e:47:01:07:
                    81:cf:90:9a:67:b2:1b:c4:19:b1:c4:22:16:a6:f3:
                    f1:8d:06:31:7b:dc:61:e2:f3:1b:c5:32:bd:95:15:
                    46:f8:2f:31:2a:04:57:e2:3a:b0:42:e3:5f:c6:2e:
                    e3:da:28:89:d5:e7:24:b3:bc:2c:8a:df:e7:f7:fc:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5F:9C:F9:2A:94:11:34:99:F4:6E:6E:28:EB:15:D4:BA:19:E5:F3
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a613766343a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:a7f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:f6:fb:b9:7a:31:f8:41:b5:39:01:aa:f6:bc:bc:a5:ee:de:
         85:6c:28:7c:6a:cb:fa:ac:11:31:be:88:5d:4c:94:ed:d3:c8:
         aa:bf:e8:09:2e:eb:84:6e:0e:47:c2:a5:63:42:b6:f4:f5:e7:
         62:db:35:df:94:91:26:f6:e9:62:03:52:02:ed:63:ff:6a:b5:
         42:09:78:23:00:db:6c:7e:0a:3b:7c:30:1a:78:f1:c1:8e:30:
         72:37:d7:3c:ff:51:03:c9:71:cb:ec:53:46:b8:b1:e2:de:54:
         63:29:90:63:a1:d2:e9:b4:e5:d4:bc:49:61:f3:79:f6:b5:ce:
         5e:84:1d:a1:61:21:66:a3:31:4b:a6:a3:55:0c:03:45:4d:74:
         44:30:95:75:e6:c5:17:91:8d:c7:bf:57:86:fd:63:2c:00:b0:
         fd:db:bd:6c:ef:62:98:9b:56:38:3d:22:cf:8e:50:34:2f:88:
         78:d8:44:cc:42:87:f8:48:29:e1:3d:fe:23:0b:98:3d:42:83:
         ac:38:a0:bb:e5:6e:11:f4:d2:39:21:81:22:43:b4:d4:30:70:
         b7:c1:93:73:12:2d:50:6a:ed:ff:3c:3a:70:82:0e:6e:41:ee:
         54:87:20:21:68:06:75:16:d2:87:af:c5:bc:91:fc:a0:8f:29:
         a2:32:93:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:05 2026 by rpki-client