Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3130303a3a2f34302d3430203d3e20323634373431.roa
File:                     323830333a373734303a3130303a3a2f34302d3430203d3e20323634373431.roa (raw, json)
Hash identifier:          IVIMbQd9ONoLtoTE/0egb4woiD1IRprQ7u6Takvok78=
Subject key identifier:   A5:84:4E:B6:11:FC:7D:1E:12:5B:4D:AF:0F:9D:F9:C7:3D:FF:F2:68
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       5B2B42E268CEA3DEF064ECB343A95E49CD410979
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3130303a3a2f34302d3430203d3e20323634373431.roa
Signing time:             Fri 15 May 2026 12:42:40 +0000
ROA not before:           Fri 15 May 2026 12:37:40 +0000
ROA not after:            Fri 14 May 2027 12:42:40 +0000
asID:                     264741
IP address blocks:        2803:7740:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2b:42:e2:68:ce:a3:de:f0:64:ec:b3:43:a9:5e:49:cd:41:09:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: May 15 12:37:40 2026 GMT
            Not After : May 14 12:42:40 2027 GMT
        Subject: CN=A5844EB611FC7D1E125B4DAF0F9DF9C73DFFF268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:ec:38:b1:bd:d6:22:ed:b7:85:25:0e:f7:
                    19:96:d8:8c:fd:5a:13:9b:cf:82:03:fc:e5:65:20:
                    0b:f3:8f:3b:4d:df:71:af:9c:80:3e:39:6f:fc:c3:
                    88:4a:e3:7f:c3:cf:d3:e6:a4:4f:b5:27:13:47:f7:
                    76:28:c8:00:ef:60:a9:e1:52:da:1a:af:83:be:c6:
                    96:60:12:96:be:55:cc:a2:a6:13:a7:fc:8c:52:63:
                    fe:f0:5b:a0:e1:1c:9f:cb:6b:78:c1:00:d5:4b:ec:
                    0e:58:04:9e:d1:c5:c9:12:60:dd:20:75:db:cf:13:
                    89:1d:f5:23:42:66:4c:cb:d2:de:48:fe:6b:ee:1b:
                    e0:91:15:82:0f:04:b5:06:ff:dd:e0:43:10:ff:6b:
                    af:f1:92:5e:96:b7:ed:1d:8e:9f:79:04:84:b5:55:
                    c9:63:34:1e:f1:c1:7f:e0:d9:4b:ac:e7:53:8a:93:
                    22:30:f5:bd:a0:8b:a4:8b:b1:30:08:a5:c8:82:90:
                    3d:2c:27:68:b4:bb:59:12:6e:ba:0f:eb:8a:36:53:
                    a0:d7:0e:ff:46:26:18:2f:17:ea:77:74:a4:1a:ae:
                    db:4c:90:2b:40:a6:db:ac:31:1b:f8:76:9f:4d:44:
                    f4:03:74:cc:76:1d:6a:e2:77:72:30:40:8a:24:c6:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:4E:B6:11:FC:7D:1E:12:5B:4D:AF:0F:9D:F9:C7:3D:FF:F2:68
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3130303a3a2f34302d3430203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7740:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:0f:cc:d1:92:f3:f5:83:ad:11:33:7c:81:5c:dc:e9:a5:4b:
         93:4f:07:76:19:20:72:85:42:ca:ec:09:59:41:79:f6:7b:fe:
         7b:da:4a:1e:41:14:71:4b:45:ac:65:64:4b:24:39:a0:e0:72:
         9c:f2:e5:27:52:03:29:11:4e:bb:43:96:38:5e:db:41:6b:81:
         97:ec:fc:8c:23:b5:0a:9b:96:b6:77:ad:75:b7:cb:40:13:00:
         5a:57:bf:92:ab:cf:c2:6c:ba:f6:d6:58:e4:96:6d:f2:9f:f4:
         52:81:f4:a5:bd:7e:ed:b4:3e:d8:a9:91:6d:fc:34:27:a1:0a:
         10:24:83:4e:17:ae:35:27:94:4c:b0:0a:d9:66:b2:74:38:a2:
         20:9e:41:1c:cb:4c:79:06:d0:42:01:ad:c3:d8:9f:d5:9f:84:
         b7:91:61:a6:15:16:31:10:aa:07:7b:cd:5e:45:5e:97:26:fa:
         d3:21:fa:75:f3:29:49:bb:8d:e7:a5:81:98:c5:35:f5:f6:c2:
         74:18:22:d1:bd:17:df:99:de:fd:ff:aa:d2:d5:3e:8f:5d:47:
         3b:1a:03:e9:98:e5:af:b0:af:94:ca:7d:5d:15:a0:82:2a:8f:
         5b:d9:72:5d:85:75:20:26:2f:65:9c:49:7e:89:2a:00:1e:e3:
         67:29:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:10:03 2026 by rpki-client