Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f33322d3332203d3e20323635373238.roa
File:                     323830333a3363303a3a2f33322d3332203d3e20323635373238.roa (raw, json)
Hash identifier:          PSn6Juz5emXTdl5qmsPwwqlcvmsfi3cq9tElKquZBPw=
Subject key identifier:   A2:CC:DB:64:82:9A:DA:29:25:FF:94:A1:A3:13:D7:36:E4:87:C1:78
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       729C7BD09A0837E268CDCEF3B161682B86C88F6E
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f33322d3332203d3e20323635373238.roa
Signing time:             Fri 03 Apr 2026 21:37:28 +0000
ROA not before:           Fri 03 Apr 2026 21:32:28 +0000
ROA not after:            Fri 02 Apr 2027 21:37:28 +0000
asID:                     265728
IP address blocks:        2803:3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 23:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9c:7b:d0:9a:08:37:e2:68:cd:ce:f3:b1:61:68:2b:86:c8:8f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: Apr  3 21:32:28 2026 GMT
            Not After : Apr  2 21:37:28 2027 GMT
        Subject: CN=A2CCDB64829ADA2925FF94A1A313D736E487C178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:fb:e3:43:d9:3c:43:53:25:e4:88:0a:78:
                    84:fe:9c:83:b1:82:c5:3a:a1:85:3b:5c:f8:b7:1a:
                    ad:6e:83:a8:b7:67:af:86:c4:90:de:90:67:63:a2:
                    f4:81:e3:59:81:ec:15:de:51:53:81:8d:eb:d6:17:
                    a8:65:3d:4a:33:cb:b6:56:9f:77:e8:30:a8:51:7d:
                    22:e4:d2:17:a4:d6:08:d9:88:af:c5:6a:f2:59:08:
                    74:53:51:7e:d4:8e:2c:53:8b:f4:9b:31:d9:59:3e:
                    4c:2e:a4:fd:6e:91:ab:d1:8a:2e:47:ad:13:e9:f0:
                    3e:e6:7a:30:90:1e:51:32:55:85:eb:46:75:62:cd:
                    9d:f2:a8:91:5f:a3:2d:f4:65:06:f6:cc:ee:1d:5f:
                    2f:2e:6e:b8:28:b4:96:76:12:33:90:ae:ef:37:46:
                    01:42:c6:1a:25:64:74:d1:26:44:fe:63:06:62:22:
                    5a:3b:58:f2:73:1b:7e:32:1b:e2:37:38:12:61:8b:
                    6c:d5:62:3b:49:b9:1d:85:c9:e7:1c:31:cb:24:11:
                    35:41:ef:78:67:20:1a:f2:db:39:fe:73:63:db:3d:
                    81:0c:73:a6:99:05:89:8f:29:9e:27:86:5c:05:31:
                    87:fa:39:86:26:de:14:10:6b:5e:c1:fe:e2:0c:4d:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CC:DB:64:82:9A:DA:29:25:FF:94:A1:A3:13:D7:36:E4:87:C1:78
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f33322d3332203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:02:e2:8a:b1:95:35:5e:87:93:72:b6:49:67:17:ed:4d:ac:
         07:ba:e1:62:66:44:b6:d9:e3:0b:86:f5:04:24:4b:d8:44:72:
         da:5e:e9:44:d7:46:1e:45:59:d0:50:19:05:2b:41:9b:79:78:
         5f:65:91:38:d9:f7:ea:02:26:4a:e3:21:03:4f:98:58:09:99:
         eb:f0:d1:6e:de:62:a8:5a:b3:67:39:e9:1d:9a:04:3f:86:8c:
         64:0a:06:d8:8b:39:49:2b:65:00:54:87:7c:24:fa:c8:c4:1f:
         60:07:5a:1f:16:af:23:be:1a:d9:4f:40:15:fd:02:6e:b8:b8:
         02:aa:5a:fb:e9:77:8f:78:0f:05:f5:71:5a:f0:26:e0:b5:28:
         e1:e3:2f:3e:d4:bc:2c:88:bd:68:0a:97:0e:1a:51:70:47:b2:
         77:b5:bd:59:88:03:58:99:c1:de:51:16:55:16:6f:6b:0f:48:
         05:12:38:b0:3e:42:ba:83:84:79:62:51:b7:20:5e:55:32:19:
         26:e9:19:5b:a6:e5:e9:2e:5b:c2:b2:bb:09:26:b1:54:f0:30:
         0e:77:7d:0d:ec:1c:6c:e1:22:10:45:0e:11:b3:4f:71:31:3b:
         87:97:02:e2:2e:bf:92:43:f6:e9:4c:e6:4e:56:5a:74:9e:fa:
         32:3d:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:23:27 2026 by rpki-client