Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633930303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a633930303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          XL5H+yigIhmnIaMs1EFnxFRZfVbNfM8trHs08sR17zo=
Subject key identifier:   DF:F0:36:B4:84:62:F7:5D:FC:0C:04:F9:FD:FC:32:27:21:CF:A4:AA
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       744EE1BF72AB6EBAA5FA9A82EA48C343FE961BD7
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633930303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:35:00 +0000
ROA not before:           Thu 19 Mar 2026 15:30:00 +0000
ROA not after:            Thu 18 Mar 2027 15:35:00 +0000
asID:                     272951
IP address blocks:        2803:6990:c900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4e:e1:bf:72:ab:6e:ba:a5:fa:9a:82:ea:48:c3:43:fe:96:1b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:30:00 2026 GMT
            Not After : Mar 18 15:35:00 2027 GMT
        Subject: CN=DFF036B48462F75DFC0C04F9FDFC322721CFA4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:53:b5:fd:99:e1:01:b2:ad:59:cf:8c:6b:
                    83:d8:3c:9d:06:3d:aa:bc:18:91:72:d7:16:57:5c:
                    25:0d:ac:65:8e:89:32:2b:a9:be:85:4d:3e:59:ae:
                    5c:2b:5e:ec:bd:ad:5f:5d:59:aa:9b:03:ea:40:ae:
                    4a:47:6d:27:36:06:64:a2:0b:2f:31:40:73:44:92:
                    fc:11:f9:5b:cf:57:c4:1a:00:09:5a:55:3b:d3:dc:
                    75:29:47:00:da:e7:7e:64:78:52:1d:a0:76:34:a3:
                    fe:4f:95:9b:1d:69:70:45:8f:89:4e:6e:3a:11:a1:
                    20:81:d2:4b:27:42:b6:86:4b:3d:e9:10:ac:17:01:
                    c8:4f:26:6d:3e:b0:57:cc:00:b7:8b:97:fc:56:41:
                    0a:5c:fe:00:d7:d1:d2:b5:4d:7b:78:df:c3:58:7d:
                    35:1c:37:9b:b3:6e:5c:ae:11:25:d9:eb:16:5e:cd:
                    63:42:cc:ff:90:46:72:71:4d:d0:8a:78:cc:65:16:
                    08:b2:9c:c9:58:46:78:23:46:62:76:e1:84:e9:b3:
                    b5:cc:da:e8:b5:47:40:44:20:e8:7e:5a:78:2f:60:
                    0e:5c:a5:61:fc:7a:28:0a:81:3b:5e:be:2e:4c:c5:
                    0e:88:2a:a0:b0:c6:22:eb:04:20:bf:0f:81:b9:dc:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F0:36:B4:84:62:F7:5D:FC:0C:04:F9:FD:FC:32:27:21:CF:A4:AA
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a633930303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:c900::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:8d:0b:cc:ca:68:68:3a:a4:e9:19:43:c4:6c:65:83:8c:09:
         4f:3c:80:30:92:cf:52:ce:7b:91:2a:1a:1c:ae:26:21:34:a5:
         df:1d:21:8d:92:f4:87:2d:74:ce:50:5e:da:c6:d8:49:b5:6c:
         f2:21:a5:8b:09:fc:6b:86:dc:96:e0:b6:59:fb:d8:07:84:a2:
         b5:cd:3b:fd:de:2d:12:31:4d:2a:18:61:58:53:26:3f:d9:9d:
         18:8b:9a:4c:d4:24:0c:1b:60:86:5c:50:a7:34:be:ff:3f:3a:
         06:73:41:28:a9:bc:a1:5d:46:08:e2:55:9a:3d:76:7a:9f:1e:
         aa:73:25:62:0f:68:c4:eb:ac:7b:42:45:d1:7f:c8:dd:fb:3b:
         40:b6:40:12:d6:eb:a9:8f:15:f2:8a:f5:2c:a7:ac:a5:b8:0f:
         65:5f:24:2a:f3:7c:8e:5d:5c:30:10:43:5d:c5:4e:52:c1:0b:
         ff:46:73:69:91:14:f1:f0:2a:f0:f0:3f:18:82:92:15:4f:d9:
         b7:c3:2a:b3:53:79:5a:7c:2f:41:5f:ee:9f:ef:37:f0:4c:f4:
         20:ac:db:22:0d:2c:eb:8e:34:e8:35:a7:39:d4:22:74:a9:4e:
         f4:eb:d6:d7:5b:6f:04:4a:90:a8:e5:e5:f4:ce:b6:b0:d6:35:
         fc:71:b6:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:10 2026 by rpki-client