Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633130303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633130303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          bfu3EKz4bKeePbZ3Tz3VXqsEk2GGbedbLE1sHEUaRjY=
Subject key identifier:   2A:FA:C7:B3:19:EB:99:69:50:AE:E5:E9:73:F6:E2:50:02:59:3A:65
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       4955F85F1D3772300C65FBBA7AC3D63F74EC9E41
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633130303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:54 +0000
ROA not before:           Thu 19 Mar 2026 15:29:54 +0000
ROA not after:            Thu 18 Mar 2027 15:34:54 +0000
asID:                     272951
IP address blocks:        2803:6990:c100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:55:f8:5f:1d:37:72:30:0c:65:fb:ba:7a:c3:d6:3f:74:ec:9e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:54 2026 GMT
            Not After : Mar 18 15:34:54 2027 GMT
        Subject: CN=2AFAC7B319EB996950AEE5E973F6E25002593A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:fc:75:c8:57:e4:92:38:9b:c7:11:92:f3:
                    fe:11:30:08:b7:24:57:14:b3:6b:ac:22:94:d9:80:
                    1f:09:ee:89:43:27:a7:4a:a9:5e:b5:00:4c:bd:8a:
                    d2:49:fc:a8:2a:44:d6:98:9a:f0:16:3e:d3:c5:f4:
                    1e:ff:b9:cf:2c:f5:a7:db:b7:6b:ab:8f:cb:41:cf:
                    9c:e2:aa:58:68:54:ad:ee:1d:1a:70:23:f2:23:6e:
                    0e:c6:09:67:ab:f4:20:ce:75:cc:34:fd:4c:40:90:
                    bf:da:9e:0f:94:21:bb:b1:83:64:91:51:b1:47:36:
                    12:8e:bd:62:34:a3:e8:80:b8:6c:86:80:61:12:41:
                    fa:21:b9:dc:21:12:e0:cc:8b:25:bc:76:b7:9f:32:
                    ba:41:57:34:bd:ff:48:c1:6c:4e:81:10:9d:bd:f2:
                    e2:18:ff:3e:0a:0a:cb:84:35:81:db:ff:24:3f:3e:
                    6f:7a:66:3c:82:4c:aa:53:42:1d:7e:3c:f3:f4:c1:
                    3f:fe:be:22:d6:5d:ca:f0:a9:5c:f7:bd:72:80:77:
                    68:50:17:5b:18:4f:b2:a0:c0:df:58:ac:2e:a4:0d:
                    6a:58:aa:8f:a3:42:17:19:90:0d:dd:14:aa:a4:a6:
                    87:5d:db:33:ae:b1:6d:17:ec:1a:72:aa:d5:1d:42:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FA:C7:B3:19:EB:99:69:50:AE:E5:E9:73:F6:E2:50:02:59:3A:65
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633130303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:37:36:8e:3b:0a:3d:d8:b4:fd:d4:fe:0d:44:90:b8:e2:
         3d:d3:69:52:ef:90:18:46:98:6b:55:b4:3f:60:bc:83:98:c2:
         db:17:d9:d7:a8:5f:20:30:f8:f9:76:7a:6d:d3:f9:7a:5e:f7:
         76:4b:de:8a:b0:be:a1:66:bd:43:a3:f8:6e:06:32:fa:81:32:
         83:d9:e4:33:65:00:93:2d:2e:90:94:9c:cd:2a:a7:49:88:c7:
         0a:78:dc:7f:cb:40:02:95:dc:7f:92:83:bf:61:b7:61:7a:37:
         e8:c5:12:0d:26:9e:5f:24:7f:d2:1e:45:9a:ba:5a:4d:8c:10:
         90:ee:43:61:21:ad:ed:7e:ca:70:71:01:f5:ba:2a:e6:22:15:
         d4:81:7f:d2:43:2e:85:99:9c:b0:67:dc:31:9b:ff:b9:2a:53:
         81:d8:2f:0d:6d:9a:c5:8a:0a:5e:28:48:26:9c:5f:a1:83:c9:
         bb:85:30:ed:79:66:35:d8:fe:30:9d:e3:09:73:02:63:14:65:
         8a:e5:5a:77:ba:9f:c8:1d:97:ce:64:46:82:1f:c6:e2:90:d1:
         75:23:90:d7:33:b3:5d:b0:70:80:c1:a6:f3:2c:28:7c:75:b8:
         ac:37:ff:df:5f:fc:39:99:32:fd:10:af:26:a3:b8:2b:1e:3f:
         5b:85:25:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:37 2026 by rpki-client