Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          Ckxi0IuOG5XsLJHlLQfkZb+MLTUuX3LFSsyNsVf7bEk=
Subject key identifier:   D2:E7:DF:6B:C1:75:25:DA:8B:F0:7A:E5:D2:1C:42:BC:D1:44:DD:14
Certificate issuer:       /CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
Certificate serial:       1DB636E2C738B6187290F3FB6EF8100D9B42B989
Authority key identifier: 94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Sun 24 May 2026 17:40:00 +0000
ROA not before:           Sun 24 May 2026 17:35:00 +0000
ROA not after:            Sun 23 May 2027 17:40:00 +0000
asID:                     269918
IP address blocks:        2803:dd80:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 08:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b6:36:e2:c7:38:b6:18:72:90:f3:fb:6e:f8:10:0d:9b:42:b9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
        Validity
            Not Before: May 24 17:35:00 2026 GMT
            Not After : May 23 17:40:00 2027 GMT
        Subject: CN=D2E7DF6BC17525DA8BF07AE5D21C42BCD144DD14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:ed:96:d4:43:67:7a:49:74:bd:b3:6f:13:
                    d1:eb:a2:47:ce:19:d3:a1:a5:57:82:e4:bb:c4:c9:
                    14:38:e5:f6:39:c2:dc:91:8d:a6:34:18:fd:68:2d:
                    4f:79:0f:a2:3e:13:2b:07:c5:fd:c4:a3:b3:2c:46:
                    79:83:de:e7:07:37:8d:95:ed:0a:8a:b2:34:1f:45:
                    2d:69:c1:e3:a4:e0:f9:60:11:09:b9:24:71:b3:48:
                    01:1a:15:83:23:b0:4e:dc:56:d4:48:95:e8:30:6b:
                    08:f9:95:d9:9f:cf:74:c2:0f:f1:04:6d:f4:fd:6f:
                    0b:b0:69:91:4f:1d:91:57:d1:84:54:f5:53:5f:53:
                    f3:ee:c7:ed:04:61:ef:6d:6f:a9:dd:34:3e:76:17:
                    c0:3d:ee:1e:70:e8:86:c5:ad:63:2e:5d:40:b3:db:
                    e8:af:1a:78:5b:4a:f0:e9:5b:72:f9:9b:4b:f2:2d:
                    e0:45:28:cb:b3:af:81:48:db:d2:fc:54:a1:35:14:
                    b6:c0:8f:41:bc:de:b1:96:11:86:c6:78:94:8a:8e:
                    75:c3:14:30:52:75:8c:ad:e9:0b:b9:8a:7a:e6:eb:
                    23:bb:ad:ba:45:c0:1b:4d:5b:87:a5:b6:33:82:c2:
                    ea:79:19:24:4c:64:15:2f:76:e4:6c:7f:c7:42:77:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:DF:6B:C1:75:25:DA:8B:F0:7A:E5:D2:1C:42:BC:D1:44:DD:14
            X509v3 Authority Key Identifier:
                keyid:94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:27:c0:e6:67:09:5b:a7:aa:6d:82:d5:67:06:cf:7a:11:f4:
         ed:7a:95:27:12:de:94:3c:ac:17:a3:0e:62:36:a0:b3:9c:fa:
         8e:21:3a:68:16:03:4d:0f:98:79:8b:c5:8f:cb:1e:e1:3a:bc:
         1f:f3:7e:9f:a7:4e:d9:84:4c:0f:89:57:00:aa:72:e1:b9:f5:
         6a:31:43:34:be:38:1f:1e:0d:6b:f2:c7:2b:90:f2:b3:cc:2f:
         c3:74:52:39:c7:e7:b3:5b:76:e6:05:b2:c2:d8:97:a0:e3:df:
         71:00:15:51:5a:d7:95:98:6f:07:54:d3:87:9d:36:8f:e6:55:
         fd:39:ea:93:db:e5:3c:7a:12:03:fe:75:66:72:53:03:20:0f:
         dd:e0:9b:49:2d:1c:92:c8:28:27:87:02:68:44:82:04:15:cf:
         78:71:e8:80:e1:3c:f2:aa:45:c7:e9:13:c3:06:e8:0a:4a:1f:
         93:dc:30:3b:f9:17:f6:48:90:b5:92:f2:55:a8:17:11:69:c5:
         03:f9:06:ae:30:5a:b9:e0:2c:a5:2a:90:7f:bd:02:03:1b:d8:
         41:42:be:16:3c:e5:6a:e3:38:11:52:98:a8:66:41:37:19:df:
         19:62:37:c6:1c:40:73:20:d6:3a:32:91:81:39:32:f9:9e:a0:
         9f:bf:07:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:19:39 2026 by rpki-client