Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633330303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633330303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          wDoO5oP0aPxSoLrUwM57MNZKKYz7dYjrQgpSZiXJEcU=
Subject key identifier:   FD:CB:8C:EB:8F:E6:45:75:B2:98:D1:89:54:A8:6F:66:94:7A:3A:57
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       6734740266C046178C61A615A402142C9AAFF732
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633330303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:45 +0000
ROA not before:           Thu 19 Mar 2026 15:29:45 +0000
ROA not after:            Thu 18 Mar 2027 15:34:45 +0000
asID:                     272951
IP address blocks:        2803:6990:c300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:34:74:02:66:c0:46:17:8c:61:a6:15:a4:02:14:2c:9a:af:f7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:45 2026 GMT
            Not After : Mar 18 15:34:45 2027 GMT
        Subject: CN=FDCB8CEB8FE64575B298D18954A86F66947A3A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:52:7a:96:4f:8b:32:61:b6:4e:d5:a2:87:
                    26:38:fb:77:af:f9:28:46:5e:da:89:40:7a:df:19:
                    40:5f:75:f1:c5:30:eb:f2:21:9d:7e:36:1f:54:31:
                    0c:e7:c3:07:c3:e6:33:b1:9b:9d:98:b4:39:c7:4b:
                    92:89:d1:ee:7a:0c:00:16:45:09:cc:45:e4:3c:f5:
                    07:48:d7:75:88:18:64:7c:29:9c:00:4a:c9:01:ea:
                    c4:86:b0:5d:63:ce:87:e8:10:a2:41:5e:81:67:10:
                    f9:b9:fe:22:08:df:e7:56:73:33:bb:e1:42:3c:80:
                    f9:bd:66:43:11:22:f1:57:62:8d:51:db:57:4f:7b:
                    1b:cd:f7:51:c4:dd:e8:8b:bf:d8:d5:d5:b4:e5:03:
                    79:e4:1b:fb:6f:ca:46:17:fc:cc:bf:20:65:3c:77:
                    fe:e4:91:de:b4:31:6a:44:fd:d9:fa:20:f3:9c:46:
                    03:7f:bb:3a:4e:96:1d:ba:f8:f4:28:29:11:31:4e:
                    66:9f:92:4c:89:f0:42:1e:a9:90:df:f0:3b:ef:b6:
                    5b:11:0c:33:a8:b2:20:0b:44:d0:47:da:d5:09:08:
                    51:79:d7:10:4c:d2:32:f9:a6:d5:e1:29:fb:ae:7d:
                    f7:61:9e:3c:fd:a5:93:a6:25:93:66:9f:c4:9b:d8:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CB:8C:EB:8F:E6:45:75:B2:98:D1:89:54:A8:6F:66:94:7A:3A:57
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633330303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:cb:64:fd:56:3b:6c:ef:e3:7f:69:0c:2c:07:b8:9d:29:f0:
         76:8f:30:42:84:bb:a8:46:bc:cd:88:20:9d:b7:d6:d1:39:86:
         c5:0a:5e:ee:ab:5a:93:f5:72:3b:3b:4e:8b:61:80:ba:ec:2a:
         99:8e:0d:ca:f3:f7:5c:09:97:bc:4e:ed:9a:30:1f:8c:7f:30:
         5e:1c:42:2d:80:3a:34:28:56:dc:96:8a:df:f0:1c:e0:f9:eb:
         79:7a:ed:58:32:f6:f2:96:40:e6:7e:65:ab:e7:f5:95:18:81:
         b4:2e:d4:94:a0:34:f2:74:0d:b8:06:8c:1d:07:03:cc:a2:30:
         d1:c1:2b:b7:71:62:0a:d1:22:85:79:2a:70:ff:90:03:72:96:
         b3:c3:e8:b0:9b:f8:f1:a0:fa:84:47:13:13:b6:ac:28:5f:87:
         d4:36:e9:bb:06:bd:08:e7:e3:a6:5a:b2:0c:1d:22:4f:82:28:
         f8:df:a6:c0:66:6b:74:86:db:fc:1f:72:06:2f:99:31:f5:f7:
         48:b6:7d:a3:4f:b1:3d:fb:8d:4e:ba:d4:4b:59:b7:b5:68:c7:
         a1:32:73:9e:bc:03:0a:0a:51:bc:15:06:d6:24:16:a6:c0:59:
         dd:f3:a6:2a:50:2a:1b:98:d2:b6:12:f3:e5:23:01:e7:1d:fe:
         02:ed:5c:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:47 2026 by rpki-client