Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a383030303a3a2f33332d3333203d3e20323635373238.roa
File:                     323830333a3363303a383030303a3a2f33332d3333203d3e20323635373238.roa (raw, json)
Hash identifier:          Xq/H2t0hzkWvnYmqP/qwXx2OMe4pveaDfHGBp5DbIuk=
Subject key identifier:   E3:6E:01:75:7D:3D:0D:10:39:76:BE:03:B8:89:49:5D:09:6E:17:55
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       0FF6EE66B5670E38E0ED49B56D99253CD54E023C
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a383030303a3a2f33332d3333203d3e20323635373238.roa
Signing time:             Fri 03 Apr 2026 21:37:30 +0000
ROA not before:           Fri 03 Apr 2026 21:32:30 +0000
ROA not after:            Fri 02 Apr 2027 21:37:30 +0000
asID:                     265728
IP address blocks:        2803:3c0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 23:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f6:ee:66:b5:67:0e:38:e0:ed:49:b5:6d:99:25:3c:d5:4e:02:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: Apr  3 21:32:30 2026 GMT
            Not After : Apr  2 21:37:30 2027 GMT
        Subject: CN=E36E01757D3D0D103976BE03B889495D096E1755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:04:ff:2d:0b:d8:3c:ff:b7:95:45:32:89:f7:
                    03:37:f9:15:f1:eb:e6:ac:28:ab:e1:6e:25:a9:2c:
                    84:56:64:b4:bf:13:bd:e4:6f:8e:fe:59:de:68:a1:
                    41:c3:c8:0c:8a:85:53:df:a3:24:f8:10:d8:22:73:
                    32:21:6f:02:0f:86:55:20:fc:47:3e:9f:d1:70:69:
                    2a:64:95:52:d3:7d:34:33:cd:7b:5b:a7:e0:90:30:
                    a8:57:4f:08:76:c8:89:a7:11:50:2f:cd:0d:44:21:
                    c6:8a:38:c1:eb:21:ee:88:82:5f:eb:db:90:89:35:
                    e9:8f:c0:4b:fb:d2:8c:09:db:19:4b:d7:2b:29:25:
                    0e:67:8f:b3:a9:1e:2d:67:f9:dd:fc:d9:98:6e:74:
                    9d:06:4c:d8:38:a7:dc:a1:52:2c:23:a4:d8:e5:33:
                    fe:56:6a:c5:8b:02:87:13:b5:a6:8d:87:e2:2d:3b:
                    df:f5:07:8f:25:3c:d5:b3:c3:0b:d3:2a:c0:6f:79:
                    1e:2c:a0:bf:bb:14:f4:ab:f1:5f:b5:8d:16:1f:72:
                    46:7d:80:5b:27:44:50:78:51:8e:11:f8:c0:2f:f3:
                    f0:d1:c3:b4:57:8d:1e:11:c4:de:31:49:fb:d3:e4:
                    f7:e5:3a:29:c5:da:eb:1f:c2:5f:38:db:92:20:a7:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6E:01:75:7D:3D:0D:10:39:76:BE:03:B8:89:49:5D:09:6E:17:55
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a383030303a3a2f33332d3333203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:2b:a9:77:47:cb:04:8b:3d:4b:e3:6a:7d:1c:52:27:c9:9b:
         50:74:13:40:4a:39:4e:73:03:99:60:48:82:5f:6b:17:5d:50:
         2e:8a:ba:2f:9f:be:69:51:cf:2a:87:63:de:51:cc:b0:51:7a:
         d8:16:51:db:99:b6:11:92:a5:d2:6d:b8:93:1f:ac:1b:aa:16:
         85:23:42:b0:b6:ec:d1:3e:c4:5e:b0:62:bb:f6:7c:30:a7:2a:
         7e:d4:6e:8d:84:34:b4:35:e5:8a:55:aa:ed:a0:58:de:76:88:
         34:b6:64:2d:f6:6b:6b:7f:1f:97:05:67:85:8b:72:73:4e:89:
         21:59:33:43:a5:5a:ef:c4:4e:18:78:5a:65:c5:66:8c:bf:4c:
         90:96:e8:f2:f6:94:e4:4a:88:06:74:f2:ac:cf:56:6d:74:75:
         7b:03:3e:ed:ce:98:45:9f:7f:4e:f5:3b:3e:4f:73:85:7b:d2:
         e7:2b:59:8b:58:b5:ae:37:dc:cb:c1:ff:16:a9:9a:83:a7:18:
         18:36:ed:61:e9:8c:8d:17:ab:ac:1a:dd:ff:9c:7e:a8:c2:c1:
         a8:62:32:ba:5a:50:fd:0d:0c:38:0d:a4:4d:be:eb:27:6d:a1:
         c0:b8:f4:43:03:3e:76:06:b5:4b:71:af:d1:ea:77:71:3e:63:
         4f:97:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:23:35 2026 by rpki-client