Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a636230303a3a2f34302d3430203d3e20323732393531.roa
File:                     323830333a363939303a636230303a3a2f34302d3430203d3e20323732393531.roa (raw, json)
Hash identifier:          DljnA718vJaJwBrzFMzbYNA/7mdhAm3T/7dg3t+W/Jc=
Subject key identifier:   ED:D4:EF:87:D7:FF:17:2D:45:0D:E6:C0:B8:9C:91:18:C8:5C:A7:A9
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       2ADB0D88346AB8169AC3D7A6B51488AF47D3C861
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a636230303a3a2f34302d3430203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:44 +0000
ROA not before:           Thu 19 Mar 2026 15:29:44 +0000
ROA not after:            Thu 18 Mar 2027 15:34:44 +0000
asID:                     272951
IP address blocks:        2803:6990:cb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:db:0d:88:34:6a:b8:16:9a:c3:d7:a6:b5:14:88:af:47:d3:c8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:44 2026 GMT
            Not After : Mar 18 15:34:44 2027 GMT
        Subject: CN=EDD4EF87D7FF172D450DE6C0B89C9118C85CA7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:4c:3f:f9:b4:31:2d:ed:2a:cc:79:0b:5f:
                    10:64:35:6e:32:d7:c0:e8:46:ae:be:e0:27:ec:a5:
                    66:cc:09:af:7b:7a:ea:97:b4:47:6c:4f:74:cc:bc:
                    79:57:45:50:3f:ea:e9:b7:24:12:43:ed:78:df:78:
                    d4:6c:71:e9:13:f8:cb:00:18:0b:8c:69:08:74:c5:
                    c7:59:74:72:9e:9f:b1:11:10:29:17:8a:aa:08:45:
                    cf:cb:15:b0:29:ad:f7:2c:a7:d1:00:70:af:e7:63:
                    4c:a9:06:e0:e1:f0:a9:2a:13:99:c5:8d:c4:70:bb:
                    29:5e:b4:2d:4e:0c:9d:91:34:1c:50:88:f6:2f:3c:
                    a7:2f:ad:41:6a:f1:18:77:b5:96:ab:67:7c:86:53:
                    f3:7d:01:d1:7f:5d:4a:3e:56:d7:84:4e:64:45:50:
                    df:bb:53:bf:f5:ec:94:b2:2f:52:bb:e5:61:d9:be:
                    7b:bd:cf:27:8f:66:6a:3f:cb:46:2f:0c:3f:32:eb:
                    10:ad:71:b0:3b:2f:40:33:f6:03:6e:84:5a:59:26:
                    17:50:39:00:ae:72:7a:5f:06:47:0e:ce:8c:7f:cc:
                    d7:fe:73:ab:92:43:32:96:86:8e:49:27:09:f9:75:
                    0e:f2:7b:0e:be:bd:28:6d:48:9c:65:ea:b0:41:03:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:EF:87:D7:FF:17:2D:45:0D:E6:C0:B8:9C:91:18:C8:5C:A7:A9
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a636230303a3a2f34302d3430203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:cb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:06:17:ae:56:e3:c7:b8:8e:d0:87:55:66:4b:9b:89:d1:c8:
         46:eb:54:8b:9e:52:6a:21:34:12:36:93:a5:14:bd:02:98:1c:
         43:d9:ba:ba:48:de:cd:78:b3:f2:0b:07:ad:b1:04:83:f0:7a:
         29:e8:64:0d:52:74:71:78:35:57:bc:6e:76:0d:63:8e:47:09:
         1e:7a:f1:27:0d:eb:76:26:c0:b8:a6:5c:66:a5:c8:7d:90:a9:
         13:8b:24:ac:e2:55:16:71:9d:dc:40:2b:c4:23:f5:d2:d4:84:
         75:75:e2:f4:2e:e2:c4:4e:8e:ca:48:fd:9b:88:5b:88:ce:7c:
         d9:0a:f6:51:aa:83:fc:80:79:47:aa:7e:ab:a5:14:8a:bb:41:
         37:1c:64:5a:fc:a4:ab:21:84:3b:1b:ef:2c:be:55:5e:47:85:
         74:49:40:5a:12:2c:40:58:f5:43:93:03:39:17:b8:3e:25:1c:
         d9:77:cd:d8:9f:e8:22:11:a8:ad:67:0a:63:e8:6f:29:9b:7b:
         cb:1b:98:16:08:99:53:07:b4:7f:c1:44:a9:e4:01:f2:bc:be:
         62:3f:a4:a1:52:28:22:6c:c4:c1:54:1d:12:7f:1e:f3:7a:45:
         39:e7:b9:af:26:c5:5e:17:e7:1c:bc:c3:2d:a8:4b:15:ae:df:
         c3:b5:f6:42
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUKtsNiDRquBaaw9emtRSIr0fTyGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1NDcyRkVGNUQ3RDk1MEFCMjk4RURENDFERUIwRDIy
Q0E3RkUyNTAeFw0yNjAzMTkxNTI5NDRaFw0yNzAzMTgxNTM0NDRaMDMxMTAvBgNV
BAMTKEVERDRFRjg3RDdGRjE3MkQ0NTBERTZDMEI4OUM5MTE4Qzg1Q0E3QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfUw/+bQxLe0qzHkLXxBkNW4y
18DoRq6+4CfspWbMCa97euqXtEdsT3TMvHlXRVA/6um3JBJD7XjfeNRscekT+MsA
GAuMaQh0xcdZdHKen7ERECkXiqoIRc/LFbAprfcsp9EAcK/nY0ypBuDh8KkqE5nF
jcRwuyletC1ODJ2RNBxQiPYvPKcvrUFq8Rh3tZarZ3yGU/N9AdF/XUo+VteETmRF
UN+7U7/17JSyL1K75WHZvnu9zyePZmo/y0YvDD8y6xCtcbA7L0Az9gNuhFpZJhdQ
OQCucnpfBkcOzox/zNf+c6uSQzKWho5JJwn5dQ7yew6+vShtSJxl6rBBA9uvAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU7dTvh9f/Fy1FDebAuJyRGMhcp6kwHwYDVR0j
BBgwFoAUG1Ry/vXX2VCrKY7dQd6w0iyn/iUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTFFNzEwRkYxM0YzN0IxQ0ExMjk3MjZGQUZDQzYwMzJB
MTVEMjE0MTIzNEM4NDdCN0QxM0VDQjFBOTVBMUQ1LzAvMUI1NDcyRkVGNUQ3RDk1
MEFCMjk4RURENDFERUIwRDIyQ0E3RkUyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjU0NzJGRUY1RDdEOTUwQUIy
OThFREQ0MURFQjBEMjJDQTdGRTI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxRTcxMEZGMTNGMzdCMUNBMTI5NzI2RkFGQ0M2MDMyQTE1RDIxNDEy
MzRDODQ3QjdEMTNFQ0IxQTk1QTFENS8wLzMyMzgzMDMzM2EzNjM5MzkzMDNhNjM2
MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzOTM1MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA2mQyzANBgkqhkiG9w0BAQsFAAOCAQEAMAYXrlbjx7iO0IdVZkubidHI
RutUi55SaiE0EjaTpRS9ApgcQ9m6ukjezXiz8gsHrbEEg/B6KehkDVJ0cXg1V7xu
dg1jjkcJHnrxJw3rdibAuKZcZqXIfZCpE4skrOJVFnGd3EArxCP10tSEdXXi9C7i
xE6Oykj9m4hbiM582Qr2UaqD/IB5R6p+q6UUirtBNxxkWvykqyGEOxvvLL5VXkeF
dElAWhIsQFj1Q5MDORe4PiUc2XfN2J/oIhGorWcKY+hvKZt7yxuYFgiZUwe0f8FE
qeQB8ry+Yj+koVIoImzEwVQdEn8e83pFOee5rybFXhfnHLzDLahLFa7fw7X2Qg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:31 2026 by rpki-client