Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a656262613a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a656262613a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          xDDX7MD7SDzvk8dTfbYxqoPKCx8t22zLcHezsmH5e0o=
Subject key identifier:   0F:35:69:41:F0:54:1A:08:EC:77:7B:37:E8:58:A5:05:27:C0:BD:FA
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       2CA6AABF62B41CD0140E0FBF186531A369C6BFC5
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a656262613a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:51 +0000
ROA not before:           Thu 19 Mar 2026 15:29:51 +0000
ROA not after:            Thu 18 Mar 2027 15:34:51 +0000
asID:                     272951
IP address blocks:        2803:6990:ebba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a6:aa:bf:62:b4:1c:d0:14:0e:0f:bf:18:65:31:a3:69:c6:bf:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:51 2026 GMT
            Not After : Mar 18 15:34:51 2027 GMT
        Subject: CN=0F356941F0541A08EC777B37E858A50527C0BDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:c3:b3:6a:3d:a0:62:a4:c8:34:24:4f:5d:
                    0f:70:60:7e:44:ab:af:59:83:d0:2e:10:62:e4:c5:
                    33:ae:ab:20:e4:1d:90:fb:bb:69:70:25:05:08:88:
                    e7:67:d1:a2:38:97:da:39:60:0a:6c:c3:ba:ab:93:
                    47:22:57:e3:06:25:dc:7d:bb:8d:0d:81:85:79:f8:
                    07:4a:30:23:47:3f:16:83:20:1d:4d:9d:e5:31:62:
                    0b:b2:ff:cc:23:2e:1c:35:80:a3:35:32:7e:be:95:
                    67:f9:80:38:a1:18:49:32:33:99:02:fd:e3:b2:4c:
                    e1:aa:4f:82:61:8b:ef:8b:28:ee:56:4d:c4:83:d1:
                    4f:63:ff:74:c3:42:5f:1c:42:54:26:32:a5:86:a9:
                    8d:f5:f6:b3:99:de:ec:f8:a0:1f:ba:7e:23:61:76:
                    f4:4e:dd:91:9e:f7:8c:65:d4:ca:b6:ca:4c:43:5d:
                    14:f2:6d:73:73:b9:76:ec:2f:34:21:95:09:62:23:
                    91:ae:00:1e:63:f6:71:32:66:ce:28:3c:b1:6b:cc:
                    38:97:64:18:b5:96:c9:37:a1:c1:94:6b:ff:98:76:
                    28:b0:70:81:16:40:0c:7b:1e:7e:b8:01:64:9a:0b:
                    0d:b4:9c:15:61:34:6f:09:a2:cb:a1:2f:cd:38:a9:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:35:69:41:F0:54:1A:08:EC:77:7B:37:E8:58:A5:05:27:C0:BD:FA
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a656262613a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:ebba::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:fc:f7:20:0e:f4:f7:ca:9a:ae:68:5f:ac:67:b0:64:a0:
         04:5d:d7:f5:11:ff:10:23:2e:54:04:43:ad:37:4d:9c:df:eb:
         ff:76:e4:81:3e:58:6b:e7:14:c6:41:28:ef:9e:ea:97:5a:07:
         14:42:d9:d9:bc:7b:30:44:5c:a6:38:33:bd:a3:83:b7:66:d6:
         95:22:90:51:48:c8:73:ea:d9:9b:78:43:d7:23:09:92:d0:6b:
         18:01:56:2e:57:cd:52:7b:a9:cf:48:54:75:cb:3e:9f:88:d4:
         b5:6a:31:bb:11:aa:fa:8d:73:dd:d0:fe:04:79:aa:3d:0b:fb:
         35:b7:9f:da:0d:df:5e:0f:7d:e4:b3:8e:75:b7:c1:39:36:4d:
         f3:28:f9:59:0e:22:07:26:1e:72:7f:75:c1:f0:d4:c6:9d:01:
         9d:61:80:13:30:8d:2f:b4:26:32:ce:c9:be:aa:c6:bd:af:83:
         d6:3e:af:9f:68:e2:1e:e2:f6:11:3f:ac:2c:ff:92:3c:3d:31:
         0a:f1:fe:39:f6:38:d1:d6:89:41:75:34:37:7b:88:f4:48:6b:
         51:ba:a7:d1:3a:07:96:66:a7:af:3e:a6:93:e7:bf:f4:97:f5:
         64:62:64:01:d9:62:c4:78:22:f2:ef:85:d0:03:fb:15:3c:60:
         41:ba:33:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:45:10 2026 by rpki-client