Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633830303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633830303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          OMunc7FUmetBh+SwPpIBh+giLMkuNoWeBF+yCmcItq4=
Subject key identifier:   63:03:85:A4:86:EE:A7:54:01:A8:E5:51:55:5E:C1:12:55:94:6A:5D
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       393E70957CF961CF1CF7AB3B6C98981181DBB8B7
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633830303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:58 +0000
ROA not before:           Thu 19 Mar 2026 15:29:58 +0000
ROA not after:            Thu 18 Mar 2027 15:34:58 +0000
asID:                     272951
IP address blocks:        2803:6990:c800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3e:70:95:7c:f9:61:cf:1c:f7:ab:3b:6c:98:98:11:81:db:b8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:58 2026 GMT
            Not After : Mar 18 15:34:58 2027 GMT
        Subject: CN=630385A486EEA75401A8E551555EC11255946A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:11:fd:d6:ce:1e:95:c6:83:68:7d:99:31:
                    95:18:e8:b1:8e:7b:da:6d:a0:d4:ab:13:a4:ee:dd:
                    7a:59:45:5d:0f:d3:6b:4d:2a:59:3c:3d:fb:8c:0e:
                    2f:42:f4:9c:f0:21:04:e2:b1:61:85:77:ed:5b:40:
                    86:2d:0d:e4:db:cb:d7:f9:81:48:bb:df:d6:a5:1c:
                    c6:ca:a5:cb:c5:41:46:59:ec:43:6c:5e:de:0b:39:
                    45:39:ec:32:b9:f5:25:e0:bf:b6:94:de:8c:27:48:
                    91:d2:04:c3:f1:a4:70:e0:a0:3c:ba:d6:78:a9:e0:
                    f2:30:5e:79:aa:2f:42:80:c2:f7:0b:6d:19:cb:60:
                    b3:a6:1c:00:12:04:53:be:59:65:64:85:bb:87:e8:
                    da:2c:07:c0:b7:08:f8:20:83:d9:a1:8e:ee:86:b9:
                    3e:19:35:81:72:dc:07:f8:fc:7f:aa:a9:d0:3a:d2:
                    01:e3:35:aa:7c:d5:36:0d:aa:fb:7e:68:cf:ed:8c:
                    78:eb:4f:cf:3f:89:29:61:85:d3:e5:4a:a9:ab:7b:
                    c5:07:e6:c0:e3:30:68:6d:1f:4e:30:4d:33:4a:42:
                    a3:29:0a:f4:f7:e3:c4:2e:d5:06:0b:c1:41:74:63:
                    b1:65:e8:7b:fb:73:dd:23:13:9a:ca:35:06:17:27:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:03:85:A4:86:EE:A7:54:01:A8:E5:51:55:5E:C1:12:55:94:6A:5D
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633830303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:4f:ce:0c:39:95:8f:81:cd:da:70:0a:01:b1:2e:7f:98:
         7f:cc:93:fd:8e:6b:fa:dd:f1:1f:cc:4e:db:33:9b:53:44:ca:
         5c:f7:e7:b4:02:61:a1:6e:9c:f1:a0:e9:96:52:ff:89:87:cd:
         d0:df:29:7c:fd:b7:bd:5e:a2:11:7d:66:92:d8:cc:3e:a8:82:
         86:da:28:e8:ea:b6:06:b6:22:d4:63:ef:84:ff:b1:23:c3:77:
         e3:b8:73:39:88:77:37:42:32:ed:77:1b:22:b7:26:8b:ea:10:
         64:25:bb:11:c7:00:cc:13:0d:dc:ee:a0:a8:c3:b8:26:54:2d:
         23:af:5a:36:a4:f0:71:f4:7c:09:e3:af:7d:71:58:87:99:8e:
         57:72:21:09:59:3c:1e:66:a3:01:55:f0:e4:5b:cf:88:88:83:
         52:41:3c:89:ef:86:b7:3e:85:f0:2b:71:1f:ca:60:ee:05:a7:
         0b:13:f4:36:bc:13:de:54:28:1b:bc:7c:5a:e5:b4:d9:fd:41:
         15:20:3f:4a:77:f5:72:42:75:70:57:1a:3f:59:65:92:db:06:
         90:df:c9:73:18:e2:86:ec:a5:26:6f:7c:1a:fe:08:61:ac:54:
         f9:cd:5d:71:d3:b5:0f:67:19:6b:3d:21:c9:ec:38:bb:90:48:
         a8:4d:f1:a8
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUOT5wlXz5Yc8c96s7bJiYEYHbuLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTI5NThaFw0yNzAzMTgxNTM0NThaMDMxMTAvBgNV
BAMTKDYzMDM4NUE0ODZFRUE3NTQwMUE4RTU1MTU1NUVDMTEyNTU5NDZBNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBBH91s4elcaDaH2ZMZUY6LGO
e9ptoNSrE6Tu3XpZRV0P02tNKlk8PfuMDi9C9JzwIQTisWGFd+1bQIYtDeTby9f5
gUi739alHMbKpcvFQUZZ7ENsXt4LOUU57DK59SXgv7aU3ownSJHSBMPxpHDgoDy6
1nip4PIwXnmqL0KAwvcLbRnLYLOmHAASBFO+WWVkhbuH6NosB8C3CPggg9mhju6G
uT4ZNYFy3Af4/H+qqdA60gHjNap81TYNqvt+aM/tjHjrT88/iSlhhdPlSqmre8UH
5sDjMGhtH04wTTNKQqMpCvT348Qu1QYLwUF0Y7Fl6Hv7c90jE5rKNQYXJ7T1AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUYwOFpIbup1QBqOVRVV7BElWUal0wHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjMz
ODMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA2mQyDANBgkqhkiG9w0BAQsFAAOCAQEADZZPzgw5lY+BzdpwCgGxLn+Y
f8yT/Y5r+t3xH8xO2zObU0TKXPfntAJhoW6c8aDpllL/iYfN0N8pfP23vV6iEX1m
ktjMPqiChtoo6Oq2BrYi1GPvhP+xI8N347hzOYh3N0Iy7XcbIrcmi+oQZCW7EccA
zBMN3O6gqMO4JlQtI69aNqTwcfR8CeOvfXFYh5mOV3IhCVk8HmajAVXw5FvPiIiD
UkE8ie+Gtz6F8CtxH8pg7gWnCxP0NrwT3lQoG7x8WuW02f1BFSA/Snf1ckJ1cFca
P1llktsGkN/JcxjihuylJm98Gv4IYaxU+c1dcdO1D2cZaz0hyew4u5BIqE3xqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:28 2026 by rpki-client