Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633530303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633530303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          UYptVdX2UMFdTa2yXIiDkYIlegy2FAMykarLLEyYRdY=
Subject key identifier:   D3:3D:5B:71:3C:98:F8:6E:6B:C1:03:0C:D8:BC:D1:65:51:65:EC:B3
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       5461A294DBBE41B0478FE795D7450EABFBF4EAB0
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633530303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:50 +0000
ROA not before:           Thu 19 Mar 2026 15:29:50 +0000
ROA not after:            Thu 18 Mar 2027 15:34:50 +0000
asID:                     272951
IP address blocks:        2803:6990:c500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:61:a2:94:db:be:41:b0:47:8f:e7:95:d7:45:0e:ab:fb:f4:ea:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:50 2026 GMT
            Not After : Mar 18 15:34:50 2027 GMT
        Subject: CN=D33D5B713C98F86E6BC1030CD8BCD1655165ECB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a9:d8:0d:fd:66:28:48:70:bb:77:3e:3a:d6:
                    5a:63:d7:e9:64:a4:b8:a4:b3:a6:ca:fd:bd:b1:9e:
                    ac:20:3a:c7:a7:c9:14:e0:a5:97:26:5e:ef:cb:c1:
                    8e:bd:2d:f1:b4:51:8b:52:31:40:35:8b:79:c2:d1:
                    cd:16:ab:0c:a4:c4:e0:c5:52:af:56:fb:9e:b8:42:
                    a4:bb:05:06:99:4a:ec:b4:0a:47:5a:df:ac:e9:b3:
                    55:a9:ea:e5:e3:9a:d0:cf:c8:c5:ad:09:e8:34:9a:
                    a8:6b:2a:f5:04:4f:e8:2b:21:e7:9c:38:af:7b:dd:
                    d1:d1:3c:9e:1e:05:04:10:e1:13:6e:34:63:d0:a5:
                    b9:71:f8:31:83:35:af:2a:b0:a4:d7:f4:8b:5f:e7:
                    0b:d4:ea:8c:ee:89:81:d7:98:13:25:75:af:bf:55:
                    82:0e:07:53:d0:0f:18:86:a9:a3:6f:85:45:5c:2b:
                    31:ac:96:c3:38:fc:a6:c2:22:ca:9e:9b:bb:1d:b7:
                    d5:14:48:02:b5:29:80:d4:16:6d:c5:69:57:af:08:
                    95:35:53:a9:2e:e1:01:87:1c:d5:07:62:11:21:8b:
                    4b:f9:c9:ef:49:34:41:dd:74:8c:82:76:28:f6:05:
                    43:18:bb:55:a7:61:6c:c9:a7:86:6d:be:40:8e:ad:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:5B:71:3C:98:F8:6E:6B:C1:03:0C:D8:BC:D1:65:51:65:EC:B3
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633530303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:f9:8c:1a:61:c1:4c:b8:aa:0a:8b:52:5f:6b:b8:ff:28:c3:
         ab:5a:cb:5f:01:94:6e:32:9d:df:c9:15:2a:34:3d:26:92:d6:
         15:96:44:01:6f:65:7a:ef:e0:c8:b7:8a:17:26:ce:be:0e:20:
         52:07:f5:70:43:8a:ec:19:dd:e5:0e:5b:27:93:2f:65:b2:dd:
         69:ed:f4:a2:aa:12:d2:ce:e9:30:59:f1:c0:26:2e:da:0a:4a:
         fa:dc:8f:58:9a:c4:66:61:85:5b:15:d5:54:b6:8d:b8:43:a9:
         b8:2d:25:bc:0a:b9:8e:6b:0b:b6:fb:bc:e2:d4:21:3a:66:17:
         af:47:54:71:a3:7b:0c:b2:a3:a2:ab:95:d7:1a:a1:21:92:4e:
         35:9d:84:27:13:f8:f9:31:15:11:8b:1c:42:3f:cd:d7:a0:10:
         cb:09:8e:e2:2a:03:fb:53:82:41:a6:91:30:46:f3:44:c9:e8:
         dd:cb:04:ef:a9:03:e3:e6:84:f5:cd:37:64:f5:23:ea:08:98:
         54:51:75:31:c5:ec:bd:d9:1c:4b:81:31:63:5a:6d:57:1c:96:
         74:2f:fe:03:78:78:00:1a:e5:5d:f4:e7:ee:73:50:e3:72:c7:
         57:d4:82:b7:c4:39:06:a9:1d:9a:3e:92:9c:cb:10:61:9c:ae:
         75:7d:2e:9d
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUVGGilNu+QbBHj+eV10UOq/v06rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTI5NTBaFw0yNzAzMTgxNTM0NTBaMDMxMTAvBgNV
BAMTKEQzM0Q1QjcxM0M5OEY4NkU2QkMxMDMwQ0Q4QkNEMTY1NTE2NUVDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoqdgN/WYoSHC7dz461lpj1+lk
pLiks6bK/b2xnqwgOsenyRTgpZcmXu/LwY69LfG0UYtSMUA1i3nC0c0WqwykxODF
Uq9W+564QqS7BQaZSuy0Ckda36zps1Wp6uXjmtDPyMWtCeg0mqhrKvUET+grIeec
OK973dHRPJ4eBQQQ4RNuNGPQpblx+DGDNa8qsKTX9Itf5wvU6ozuiYHXmBMlda+/
VYIOB1PQDxiGqaNvhUVcKzGslsM4/KbCIsqem7sdt9UUSAK1KYDUFm3FaVevCJU1
U6ku4QGHHNUHYhEhi0v5ye9JNEHddIyCdij2BUMYu1WnYWzJp4ZtvkCOrQRpAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU0z1bcTyY+G5rwQMM2LzRZVFl7LMwHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjMz
NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA2mQxTANBgkqhkiG9w0BAQsFAAOCAQEAifmMGmHBTLiqCotSX2u4/yjD
q1rLXwGUbjKd38kVKjQ9JpLWFZZEAW9leu/gyLeKFybOvg4gUgf1cEOK7Bnd5Q5b
J5MvZbLdae30oqoS0s7pMFnxwCYu2gpK+tyPWJrEZmGFWxXVVLaNuEOpuC0lvAq5
jmsLtvu84tQhOmYXr0dUcaN7DLKjoquV1xqhIZJONZ2EJxP4+TEVEYscQj/N16AQ
ywmO4ioD+1OCQaaRMEbzRMno3csE76kD4+aE9c03ZPUj6giYVFF1McXsvdkcS4Ex
Y1ptVxyWdC/+A3h4ABrlXfTn7nNQ43LHV9SCt8Q5Bqkdmj6SnMsQYZyudX0unQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:46 2026 by rpki-client