Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030333a3a2f34382d3438203d3e20323634373538.roa
File:                     323830333a623065303a373030333a3a2f34382d3438203d3e20323634373538.roa (raw, json)
Hash identifier:          r+PM+FEwJstGauWvbx0NYs6lCkpe4uylpKtNaN2Putw=
Subject key identifier:   96:7D:65:4B:18:0C:15:F3:84:9B:6E:7D:9E:22:4C:94:34:3B:5D:DB
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       51F8E129132053827F7E8792AE08946B9BD705D3
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030333a3a2f34382d3438203d3e20323634373538.roa
Signing time:             Wed 01 Apr 2026 18:40:00 +0000
ROA not before:           Wed 01 Apr 2026 18:35:00 +0000
ROA not after:            Wed 31 Mar 2027 18:40:00 +0000
asID:                     264758
IP address blocks:        2803:b0e0:7003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f8:e1:29:13:20:53:82:7f:7e:87:92:ae:08:94:6b:9b:d7:05:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Apr  1 18:35:00 2026 GMT
            Not After : Mar 31 18:40:00 2027 GMT
        Subject: CN=967D654B180C15F3849B6E7D9E224C94343B5DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:b2:52:90:e6:4e:fd:a4:18:da:c5:18:63:
                    7c:1a:48:71:09:fa:9e:1c:fd:19:21:bd:31:77:b5:
                    92:40:1c:3a:fe:22:61:8c:42:df:c1:0d:ab:83:bd:
                    cb:e5:65:b4:66:3c:40:61:22:52:6f:6c:db:d2:0d:
                    9a:92:bd:5b:ab:b2:28:44:bf:b3:2a:32:b7:70:a7:
                    6c:c8:5a:de:c7:8b:f3:00:d2:a1:58:42:03:a6:ad:
                    43:e1:53:e6:84:73:85:fe:69:a6:95:1d:fa:c6:75:
                    2b:f5:6b:d8:48:bb:ce:c2:e4:90:58:36:f4:2a:9e:
                    27:11:7d:18:43:8b:85:b0:b2:1e:af:84:2e:a1:63:
                    15:03:e5:14:e4:ac:86:92:ea:96:14:6f:5b:4e:db:
                    99:b3:8b:c6:ea:71:84:7d:25:34:06:b7:b8:01:f7:
                    32:f0:56:66:31:5e:ca:63:a8:c2:8c:29:58:c3:cd:
                    77:c4:be:a1:dd:56:98:0e:b8:41:1b:14:ad:7f:f0:
                    75:c3:e9:16:05:68:df:48:5a:b1:ef:af:78:c2:cb:
                    5f:50:0b:e7:f3:a2:52:a0:24:5c:8d:5f:4f:53:95:
                    c6:17:f5:dd:21:50:7f:8b:88:ed:ac:bc:14:59:a7:
                    f1:98:0d:d7:ce:0f:6d:ab:3a:05:d8:9c:4a:0e:12:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7D:65:4B:18:0C:15:F3:84:9B:6E:7D:9E:22:4C:94:34:3B:5D:DB
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030333a3a2f34382d3438203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:38:51:55:ee:a5:47:6a:d7:b1:bf:eb:d2:48:f7:93:af:60:
         eb:8a:cf:3d:a1:b5:6a:e4:65:9b:7d:f6:1d:de:35:82:ca:55:
         f9:6b:2a:f6:51:66:f3:77:3d:f9:d8:2d:54:c7:38:ca:fe:60:
         de:23:45:40:74:3b:7f:06:45:63:e7:57:ed:1a:1d:c3:98:ce:
         a1:50:46:52:18:46:93:c2:53:ee:95:e5:29:c2:71:0f:37:86:
         e0:74:f4:1d:20:c3:f1:ed:37:5d:3c:00:98:4d:7c:6a:5b:ed:
         cb:a3:b4:50:db:8e:d6:7d:e2:1a:41:1d:56:0b:20:44:4d:b9:
         52:30:ef:e3:7a:7b:c4:4b:4c:83:53:87:03:09:b3:0d:57:be:
         ef:af:36:8a:d9:0f:f0:e6:74:2b:6e:d3:d4:65:c0:84:f4:4c:
         96:68:07:09:bf:0a:fe:4e:41:36:78:62:6a:11:f2:88:74:8b:
         38:bc:5d:fa:e3:ea:15:c6:80:0b:b0:e1:4c:73:84:b7:94:d8:
         13:28:65:49:ff:a2:30:91:8e:f4:24:14:53:c6:78:d9:26:0c:
         a8:7e:9e:6e:aa:5a:fc:b0:94:03:65:52:53:06:af:5a:25:1f:
         52:18:ae:32:59:cb:6e:4a:17:47:51:13:82:bc:ee:28:e4:aa:
         0c:cb:80:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 8 09:00:17 2026 by rpki-client