Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a666635303a3a2f34382d3438203d3e20323732393531.roa
File:                     323830333a363939303a666635303a3a2f34382d3438203d3e20323732393531.roa (raw, json)
Hash identifier:          JKNnUcSiqBQ/oP7Pkx7aJ2l32Yxe6Vs06QoRAXwW5vQ=
Subject key identifier:   4C:C7:88:2E:92:A2:B0:B9:CA:60:9E:0F:F1:C2:3A:A2:6D:4A:69:EA
Certificate issuer:       /CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
Certificate serial:       3CD0C4DBB40F264B2A87DFFEDC9EC366D32C9615
Authority key identifier: 1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a666635303a3a2f34382d3438203d3e20323732393531.roa
Signing time:             Thu 19 Mar 2026 15:34:38 +0000
ROA not before:           Thu 19 Mar 2026 15:29:38 +0000
ROA not after:            Thu 18 Mar 2027 15:34:38 +0000
asID:                     272951
IP address blocks:        2803:6990:ff50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d0:c4:db:b4:0f:26:4b:2a:87:df:fe:dc:9e:c3:66:d3:2c:96:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25
        Validity
            Not Before: Mar 19 15:29:38 2026 GMT
            Not After : Mar 18 15:34:38 2027 GMT
        Subject: CN=4CC7882E92A2B0B9CA609E0FF1C23AA26D4A69EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b2:54:f1:08:01:bf:1c:25:15:72:cd:8b:8c:
                    3e:ac:f1:f9:e0:4e:91:56:7c:5c:e6:a9:d5:20:51:
                    72:82:31:e1:c5:1f:15:37:51:ea:37:2b:e3:4b:12:
                    d7:d9:f4:63:b6:e1:96:26:be:62:45:1b:e6:ba:a8:
                    e1:f7:4c:c8:25:6b:10:34:c7:cc:ee:ee:dc:24:c9:
                    f4:94:c8:7e:44:20:9d:29:c3:2e:12:3b:44:57:bc:
                    d5:19:cd:0e:d0:b9:25:75:88:e1:d3:ac:5c:ea:74:
                    ea:0e:67:1e:43:22:b0:d5:55:48:be:4b:35:5d:40:
                    8b:d7:e2:0a:e1:0f:d9:7c:5d:a1:d3:88:fb:d1:a2:
                    2b:48:4a:2d:a4:a0:57:6f:0c:ba:29:24:3e:21:97:
                    15:1c:53:a0:76:6c:bf:3f:5e:c1:85:d9:a0:7e:57:
                    92:14:08:83:63:8a:fe:b7:75:41:a3:ad:e8:70:28:
                    33:22:85:82:ea:9a:d5:48:76:f7:7c:64:22:83:78:
                    c0:d9:20:6d:00:9a:a4:3c:11:19:36:df:a7:48:f6:
                    26:60:07:2e:f0:fd:16:15:da:c8:d6:45:ec:6d:93:
                    ca:9a:ab:11:7f:c4:d0:83:4a:fb:3d:36:53:c6:95:
                    ce:ca:26:b6:2f:5b:57:da:c2:f6:ec:8c:12:de:fa:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C7:88:2E:92:A2:B0:B9:CA:60:9E:0F:F1:C2:3A:A2:6D:4A:69:EA
            X509v3 Authority Key Identifier:
                keyid:1B:54:72:FE:F5:D7:D9:50:AB:29:8E:DD:41:DE:B0:D2:2C:A7:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B5472FEF5D7D950AB298EDD41DEB0D22CA7FE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D51E710FF13F37B1CA129726FAFCC6032A15D2141234C847B7D13ECB1A95A1D5/0/323830333a363939303a666635303a3a2f34382d3438203d3e20323732393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990:ff50::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:8f:7a:76:68:82:d2:97:2a:6a:ec:79:7f:dc:15:c8:a6:
         db:29:76:17:f7:be:bc:f1:5c:61:6a:f6:b3:fb:a6:17:c5:57:
         d3:fd:5f:e6:90:ec:16:39:61:94:8a:12:33:35:62:e4:34:01:
         42:fc:c9:29:67:87:ec:a4:57:26:09:ad:27:14:51:06:54:2e:
         55:fa:ab:04:bc:f3:67:6d:b7:61:d7:e0:44:2f:cc:d4:a8:54:
         b8:a9:26:31:2d:e1:d6:ab:d5:c9:2d:18:bf:b1:07:23:bf:d3:
         21:3e:e0:e6:b3:68:9d:1e:78:9d:ef:e6:dd:f7:da:90:ea:0b:
         d7:4a:69:1b:d6:65:ab:23:f4:67:d9:30:84:e4:bf:50:c8:f4:
         ed:f2:46:a1:ec:57:e9:e3:17:03:02:3b:cc:3c:14:68:a1:5c:
         50:68:3a:9a:12:7c:e4:42:ac:fd:ac:c1:1f:53:b5:53:86:74:
         b4:4d:14:97:c5:ad:8b:fa:c9:dc:3a:92:98:ad:94:5c:4a:9e:
         98:77:04:60:10:31:d2:9c:fa:a0:30:34:78:b0:25:80:c8:18:
         06:f4:19:59:6e:da:7f:4b:81:7e:3a:70:c4:e2:aa:66:9b:82:
         dd:15:0d:a9:d2:18:3a:df:7c:4b:77:86:4f:34:c5:93:af:33:
         33:ac:4e:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:21 2026 by rpki-client