Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633630303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633630303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          djUf6ydjcwQTJBddSO5Fu1MzciCrkc9oQ6x8JlsK+qw=
Subject key identifier:   1C:CC:15:BD:BE:61:E4:78:8B:2C:B8:AC:83:22:87:66:E6:9C:6E:EE
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       0CF27C63E947CF600014BB67A20501F231C74380
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633630303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:52 +0000
ROA not before:           Thu 19 Mar 2026 15:29:52 +0000
ROA not after:            Thu 18 Mar 2027 15:34:52 +0000
asID:                     272951
IP address blocks:        2803:6990:c600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f2:7c:63:e9:47:cf:60:00:14:bb:67:a2:05:01:f2:31:c7:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:52 2026 GMT
            Not After : Mar 18 15:34:52 2027 GMT
        Subject: CN=1CCC15BDBE61E4788B2CB8AC83228766E69C6EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:be:10:f6:14:bc:7b:ef:d0:b9:f5:48:a8:
                    27:47:90:9f:dd:cc:35:2e:64:b0:ab:4f:3a:dd:58:
                    4c:78:29:2e:88:6e:72:77:97:10:22:dc:f8:44:ed:
                    f5:a2:56:81:81:25:8b:c8:e2:71:17:43:a6:0d:16:
                    64:3a:61:e3:9d:67:91:b5:03:cc:99:cf:5c:eb:93:
                    35:67:82:6f:cb:00:85:35:60:47:2c:df:46:d3:44:
                    78:8f:47:0e:23:d8:72:91:46:89:61:30:5e:15:df:
                    4d:ac:a1:b4:8a:7b:70:fd:fe:e8:00:3a:38:c6:a1:
                    fa:8b:e2:0a:03:fc:5e:4d:55:ec:4a:71:8f:ef:25:
                    42:8b:73:f2:64:95:60:07:32:20:b6:52:b9:4c:4a:
                    d7:3c:d0:cd:43:2e:c2:82:a4:97:31:f3:d2:74:92:
                    74:d8:91:b6:56:b7:57:da:5a:6c:e3:b3:db:04:c0:
                    39:95:7f:74:a2:36:73:8e:f9:40:71:33:32:66:ed:
                    cc:7f:12:eb:e7:94:47:8b:7d:34:cb:ba:d7:ec:ab:
                    ca:80:76:d1:16:8b:5e:3c:d8:c8:71:50:fd:88:6d:
                    3c:c2:21:37:e8:61:e2:b9:0e:c2:f4:51:ec:4e:c8:
                    20:a6:d7:55:32:e5:cb:2a:32:dd:ef:68:4a:13:58:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CC:15:BD:BE:61:E4:78:8B:2C:B8:AC:83:22:87:66:E6:9C:6E:EE
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633630303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c600::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:33:e6:04:64:cf:e0:c6:cd:23:69:86:80:fc:7f:d6:a8:10:
         21:3e:99:71:22:95:96:26:12:8b:a7:82:19:1e:9a:27:05:4c:
         4a:69:77:94:e0:82:ca:d6:69:e8:94:01:24:b6:08:58:bc:90:
         e7:54:e3:64:79:e8:17:27:78:23:63:ed:8e:76:90:51:f7:f1:
         8c:72:48:c7:81:bd:49:93:af:4e:23:2e:94:66:06:56:8b:3c:
         61:7a:bd:13:8f:4b:e8:33:77:67:61:f0:1e:a5:e6:c7:7b:a7:
         b1:79:64:b3:39:bb:22:45:96:6e:8f:78:cb:17:a8:6e:c1:e9:
         f3:66:0d:e4:d9:8a:a5:60:31:bb:f6:c7:b5:8f:18:83:a1:ac:
         61:f6:cb:1b:7a:8f:6b:e1:6e:cc:83:9a:6a:de:4c:81:41:71:
         6a:4d:e1:69:b3:bf:15:80:19:56:82:e0:b6:27:ad:9a:2c:9d:
         2c:7d:9d:e5:7d:f5:65:21:53:97:9a:3c:05:98:31:b9:73:02:
         50:47:bf:5b:09:65:94:a0:7d:a5:b4:83:cf:de:40:e0:c7:76:
         7b:a9:a5:a0:2c:e4:d4:36:dc:d2:b5:dd:0a:b9:43:fc:3d:77:
         bd:66:c0:12:38:7e:64:f9:9d:71:53:c9:80:2b:3b:b2:05:d9:
         fb:fe:2d:0a
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUDPJ8Y+lHz2AAFLtnogUB8jHHQ4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTI5NTJaFw0yNzAzMTgxNTM0NTJaMDMxMTAvBgNV
BAMTKDFDQ0MxNUJEQkU2MUU0Nzg4QjJDQjhBQzgzMjI4NzY2RTY5QzZFRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlL4Q9hS8e+/QufVIqCdHkJ/d
zDUuZLCrTzrdWEx4KS6IbnJ3lxAi3PhE7fWiVoGBJYvI4nEXQ6YNFmQ6YeOdZ5G1
A8yZz1zrkzVngm/LAIU1YEcs30bTRHiPRw4j2HKRRolhMF4V302sobSKe3D9/ugA
OjjGofqL4goD/F5NVexKcY/vJUKLc/JklWAHMiC2UrlMStc80M1DLsKCpJcx89J0
knTYkbZWt1faWmzjs9sEwDmVf3SiNnOO+UBxMzJm7cx/EuvnlEeLfTTLutfsq8qA
dtEWi1482MhxUP2IbTzCITfoYeK5DsL0UexOyCCm11Uy5csqMt3vaEoTWBJNAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUHMwVvb5h5HiLLLisgyKHZuacbu4wHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjMz
NjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA2mQxjANBgkqhkiG9w0BAQsFAAOCAQEAJTPmBGTP4MbNI2mGgPx/1qgQ
IT6ZcSKVliYSi6eCGR6aJwVMSml3lOCCytZp6JQBJLYIWLyQ51TjZHnoFyd4I2Pt
jnaQUffxjHJIx4G9SZOvTiMulGYGVos8YXq9E49L6DN3Z2HwHqXmx3unsXlkszm7
IkWWbo94yxeobsHp82YN5NmKpWAxu/bHtY8Yg6GsYfbLG3qPa+FuzIOaat5MgUFx
ak3habO/FYAZVoLgtietmiydLH2d5X31ZSFTl5o8BZgxuXMCUEe/WwlllKB9pbSD
z95A4Md2e6mloCzk1Dbc0rXdCrlD/D13vWbAEjh+ZPmdcVPJgCs7sgXZ+/4tCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:27 2026 by rpki-client