Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/323830333a6430303a3a2f33322d3634203d3e203532343333.roa
File:                     323830333a6430303a3a2f33322d3634203d3e203532343333.roa (raw, json)
Hash identifier:          2vyUism3TXR2cHikmziCVmze6DwgkcqzBJpiFoamRQA=
Subject key identifier:   E5:E1:DA:3A:F3:A1:AE:2F:0B:D2:14:C8:67:EF:4D:C7:88:8A:96:33
Certificate issuer:       /CN=366C86A35982162DA62035B192A9F9C2AC96FF52
Certificate serial:       01AC12EF5E3D43F68ACCB96EA43A7DB40DEC2E85
Authority key identifier: 36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/323830333a6430303a3a2f33322d3634203d3e203532343333.roa
Signing time:             Thu 25 Jun 2026 20:49:48 +0000
ROA not before:           Thu 25 Jun 2026 20:44:48 +0000
ROA not after:            Thu 24 Jun 2027 20:49:48 +0000
asID:                     52433
IP address blocks:        2803:d00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 13:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:12:ef:5e:3d:43:f6:8a:cc:b9:6e:a4:3a:7d:b4:0d:ec:2e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366C86A35982162DA62035B192A9F9C2AC96FF52
        Validity
            Not Before: Jun 25 20:44:48 2026 GMT
            Not After : Jun 24 20:49:48 2027 GMT
        Subject: CN=E5E1DA3AF3A1AE2F0BD214C867EF4DC7888A9633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:58:19:9d:7a:44:90:4d:e3:e1:bc:8a:f1:
                    66:dd:0b:ac:ea:d1:00:d7:39:b3:f7:05:5e:5d:93:
                    1e:58:37:15:6c:7a:ac:9a:e6:0d:ff:06:47:c7:4e:
                    7a:26:fe:69:5e:ac:d4:c2:5e:1a:e4:ea:72:0e:6f:
                    41:c0:16:93:36:d8:db:4e:aa:c8:eb:8b:b1:28:05:
                    d9:f7:06:73:4a:34:1a:0c:aa:b6:97:8b:17:d8:ee:
                    36:a1:38:cb:e9:47:a5:f4:0e:3f:c5:5f:e5:11:1b:
                    ee:e4:7e:22:8b:51:25:e3:de:6a:c3:7b:e1:35:14:
                    74:80:ae:5f:2c:3e:39:e4:8f:d1:99:a7:5a:a3:84:
                    f2:03:4f:4b:71:e1:af:b7:e9:d3:89:c1:d9:cf:b0:
                    5b:77:54:22:9a:9a:d5:d7:bc:e1:fd:52:97:a2:c0:
                    c7:4c:73:63:ff:12:44:43:42:88:f0:20:72:67:9e:
                    74:3e:37:f4:16:4a:77:13:27:fb:83:12:49:41:42:
                    1b:e2:3c:c8:3f:f5:89:ad:77:55:3c:5a:87:4e:2c:
                    af:ba:5b:eb:16:3f:1b:ff:06:b4:b4:7e:cd:e4:5e:
                    55:e8:fc:7f:56:df:3b:eb:4d:c0:5a:fc:3d:99:7e:
                    ea:fd:f3:d5:35:06:d5:cd:12:58:f2:5c:3d:c8:84:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E1:DA:3A:F3:A1:AE:2F:0B:D2:14:C8:67:EF:4D:C7:88:8A:96:33
            X509v3 Authority Key Identifier:
                keyid:36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/323830333a6430303a3a2f33322d3634203d3e203532343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:d5:ca:4b:3b:b8:34:65:13:42:bd:be:89:86:24:53:2e:b6:
         0b:85:89:69:81:1a:51:00:a2:69:eb:c1:46:06:52:b9:6b:d3:
         1b:63:e5:11:6c:1f:35:3c:8a:48:f5:81:5c:3f:22:da:d9:6d:
         dc:70:13:b3:d8:36:f1:2d:03:12:6d:b5:56:22:46:85:20:80:
         22:2c:33:ea:89:1e:cd:2a:a7:33:60:47:10:a2:50:53:96:55:
         7f:38:9a:d7:71:a8:cb:64:3f:dc:a6:8c:b8:5b:47:8a:3b:8d:
         83:ae:b8:ca:95:59:4d:1c:0b:3a:dc:96:c4:6c:d8:ae:45:8f:
         15:71:74:a8:ba:64:90:da:23:d8:70:b7:b2:aa:b4:04:99:38:
         d8:da:59:f4:c7:03:58:ac:2a:1a:a0:5b:a9:b1:14:a3:e6:10:
         02:36:53:26:84:a5:08:df:8d:1e:6f:c4:db:c6:5e:20:e2:a1:
         b7:34:58:20:da:77:1e:93:f9:df:8f:55:4d:60:f5:86:05:df:
         91:a1:3a:f0:87:6b:76:98:c1:a4:c6:08:b7:38:2b:42:4e:67:
         fe:b2:39:a8:ee:d5:ee:19:b0:c4:46:be:6a:51:b4:2c:3b:f1:
         f9:21:78:52:76:13:e6:2a:05:24:ef:d7:80:c9:3a:34:a0:26:
         88:7c:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:54:09 2026 by rpki-client