Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/323830333a663031303a3a2f34382d3438203d3e20323731383133.roa
File:                     323830333a663031303a3a2f34382d3438203d3e20323731383133.roa (raw, json)
Hash identifier:          MhYI0L9YPxTBI9wvie3AMc7t0cvzrY3APVy1W2wQD24=
Subject key identifier:   F5:3D:CC:4E:A6:CC:46:1E:D9:85:DE:DA:8A:00:BA:D5:AA:5F:60:E2
Certificate issuer:       /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
Certificate serial:       3F4C90C693B7F36AECD9FCBFB115627E3095E201
Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/323830333a663031303a3a2f34382d3438203d3e20323731383133.roa
Signing time:             Thu 14 May 2026 13:45:01 +0000
ROA not before:           Thu 14 May 2026 13:40:01 +0000
ROA not after:            Thu 13 May 2027 13:45:01 +0000
asID:                     271813
IP address blocks:        2803:f010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4c:90:c6:93:b7:f3:6a:ec:d9:fc:bf:b1:15:62:7e:30:95:e2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
        Validity
            Not Before: May 14 13:40:01 2026 GMT
            Not After : May 13 13:45:01 2027 GMT
        Subject: CN=F53DCC4EA6CC461ED985DEDA8A00BAD5AA5F60E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:62:f8:db:d4:c8:63:93:b8:90:36:43:66:
                    85:ed:13:f2:25:db:3a:c0:0e:59:f2:1c:19:ba:93:
                    84:e3:47:f8:6b:e4:d5:c5:ad:f6:aa:c1:a8:db:85:
                    48:37:bf:53:3d:82:8d:8f:55:e3:56:39:f8:88:e9:
                    0a:43:50:24:e3:fd:65:06:58:3b:7a:22:3f:e2:c5:
                    44:9a:4c:4a:ac:a1:a9:db:7a:03:4e:d4:18:a7:32:
                    45:cd:7d:5e:13:72:f9:06:b2:91:bd:09:ba:b6:38:
                    3a:ce:8c:ee:e8:cb:9d:5a:d4:1b:f3:7f:be:d5:ed:
                    7d:9c:d7:87:ca:e1:41:be:28:4d:fc:2b:11:31:21:
                    05:55:33:57:ab:1e:be:e7:ea:01:9f:6d:b5:2b:12:
                    f5:fb:ef:b0:56:09:d9:24:cb:09:a5:df:0a:7d:6f:
                    cc:cd:ab:27:e8:ff:1f:cb:fd:ee:3d:70:46:0b:7f:
                    89:14:20:88:64:d6:48:da:a4:57:0e:b8:9c:92:c9:
                    61:f8:e7:01:61:60:c0:f6:20:4c:2f:3c:73:8d:09:
                    9f:bf:c0:86:0d:b2:b6:31:d4:9b:88:ae:a5:a4:0e:
                    89:97:99:2a:74:55:b9:1c:43:7e:9c:c3:e5:88:4b:
                    77:01:48:98:27:fe:6c:cb:1c:08:6a:63:67:29:d3:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3D:CC:4E:A6:CC:46:1E:D9:85:DE:DA:8A:00:BA:D5:AA:5F:60:E2
            X509v3 Authority Key Identifier:
                keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/323830333a663031303a3a2f34382d3438203d3e20323731383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f010::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:49:3b:eb:5b:75:3f:50:4b:db:50:79:66:ff:cd:11:77:97:
         79:ea:9c:6b:03:e1:1c:72:d8:e3:a2:4f:44:4b:73:f3:cd:a0:
         ec:8d:fe:7e:5e:5c:f5:3c:00:c4:2f:2b:70:e9:97:69:f2:9c:
         d7:a2:6f:c6:3f:0d:5c:31:27:b1:ca:d0:88:14:a6:bf:20:3d:
         12:33:f7:ee:53:93:e6:6e:b1:94:c1:9d:f0:47:6b:d1:3a:d3:
         03:db:f5:44:99:90:fd:70:ac:97:99:3c:38:3d:08:ce:5d:1b:
         33:da:ee:30:84:62:7a:2d:03:98:7d:0d:f0:02:cb:d1:f7:f4:
         c4:04:c3:1e:c9:c2:ad:09:ae:57:1d:3d:62:b2:6e:5c:be:f1:
         2a:fb:10:31:64:26:e8:95:da:87:95:36:f2:01:d1:8e:79:22:
         45:a0:a0:17:c9:70:10:c3:6f:63:80:0e:73:cb:3d:53:41:6c:
         c3:0e:00:5d:f9:0d:b4:3c:16:ba:85:cb:40:e2:05:b6:39:d5:
         38:e2:f9:5c:fc:f0:51:ae:41:a0:8d:d7:c3:3d:b1:e3:47:2d:
         0d:90:6d:93:af:86:96:23:69:47:0a:3d:20:53:30:48:3f:11:
         2f:da:7f:41:d0:4c:aa:47:10:33:13:71:d5:f1:d6:d2:ae:de:
         e5:e1:a4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:12:47 2026 by rpki-client