Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/323830333a636133303a3a2f33322d3438203d3e20323732383732.roa
File:                     323830333a636133303a3a2f33322d3438203d3e20323732383732.roa (raw, json)
Hash identifier:          0oUoTg5DbC5lI851Tn5aKaxWogZYtYVh15mNJVwmMb8=
Subject key identifier:   B3:44:13:23:75:7B:5F:2A:34:57:06:15:D7:DC:F2:E5:CF:2C:58:96
Certificate issuer:       /CN=F999939EA7A7C95A2214DA0B4748120B3056374C
Certificate serial:       3A587ACBC3963BD835A556E298C5D7B99C7775E8
Authority key identifier: F9:99:93:9E:A7:A7:C9:5A:22:14:DA:0B:47:48:12:0B:30:56:37:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F999939EA7A7C95A2214DA0B4748120B3056374C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/323830333a636133303a3a2f33322d3438203d3e20323732383732.roa
Signing time:             Mon 06 Apr 2026 18:50:00 +0000
ROA not before:           Mon 06 Apr 2026 18:45:00 +0000
ROA not after:            Mon 05 Apr 2027 18:50:00 +0000
asID:                     272872
IP address blocks:        2803:ca30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/F999939EA7A7C95A2214DA0B4748120B3056374C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/F999939EA7A7C95A2214DA0B4748120B3056374C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F999939EA7A7C95A2214DA0B4748120B3056374C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:58:7a:cb:c3:96:3b:d8:35:a5:56:e2:98:c5:d7:b9:9c:77:75:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F999939EA7A7C95A2214DA0B4748120B3056374C
        Validity
            Not Before: Apr  6 18:45:00 2026 GMT
            Not After : Apr  5 18:50:00 2027 GMT
        Subject: CN=B3441323757B5F2A34570615D7DCF2E5CF2C5896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:cc:95:ed:c9:e6:45:c4:cc:8e:1a:e3:66:
                    f3:98:70:55:48:73:b1:b1:23:a0:e5:21:35:18:23:
                    7f:f4:18:64:ec:bf:5a:6c:d7:24:2a:e5:ef:64:42:
                    10:9f:ee:40:a1:bc:de:6f:89:c5:74:20:8d:7e:ac:
                    04:5b:0b:21:a9:cd:df:52:ff:87:23:04:a2:b8:cd:
                    c4:80:ee:40:61:71:56:7c:16:33:82:52:26:1e:76:
                    c0:97:53:a6:89:c3:c1:44:0e:bb:a3:43:65:45:31:
                    3c:64:7a:89:33:32:53:6f:46:ca:e5:fb:4a:cc:45:
                    32:ef:ed:48:10:2c:fa:24:9c:d6:1e:54:5c:7c:a1:
                    07:23:a3:17:7a:dc:89:89:79:0a:ee:0b:34:64:08:
                    36:1a:90:6a:3a:30:6c:c4:53:b5:49:70:ae:5b:95:
                    5b:a7:71:88:a1:63:e3:7a:05:50:f4:e8:bf:c6:36:
                    c5:e4:e1:62:0f:f7:9a:dc:bc:fe:18:67:72:97:70:
                    64:f9:e1:8f:6e:5c:f8:6b:ab:21:67:55:63:7f:67:
                    d3:33:5c:5a:be:e8:77:39:fd:18:e3:cd:e4:b9:de:
                    68:0f:a5:b6:66:df:bf:ce:ef:9c:45:ae:db:fb:c3:
                    42:70:4a:5f:a8:73:60:da:05:36:91:2b:a7:01:b9:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:44:13:23:75:7B:5F:2A:34:57:06:15:D7:DC:F2:E5:CF:2C:58:96
            X509v3 Authority Key Identifier:
                keyid:F9:99:93:9E:A7:A7:C9:5A:22:14:DA:0B:47:48:12:0B:30:56:37:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/F999939EA7A7C95A2214DA0B4748120B3056374C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F999939EA7A7C95A2214DA0B4748120B3056374C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/323830333a636133303a3a2f33322d3438203d3e20323732383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca30::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:49:4e:9d:0b:3d:de:d7:50:66:49:10:a7:b5:b4:c6:95:02:
         ac:3a:50:7c:46:02:0d:57:50:a5:c3:14:72:d8:ea:ef:6e:86:
         5b:80:70:44:5e:4f:df:c3:16:8a:13:82:aa:51:7d:75:9a:cd:
         cb:eb:58:1a:1b:9c:b4:72:b6:55:e5:c6:a4:82:1c:21:9f:4c:
         18:22:f8:12:5a:28:46:1f:84:ca:10:1b:ce:d1:24:ab:29:0e:
         ae:3e:23:a5:22:e6:88:b4:ad:d2:fb:61:54:df:05:bb:7d:f3:
         25:67:a0:2c:cd:56:4f:6e:34:5a:fd:df:c7:bd:0f:39:15:97:
         6b:60:c0:00:fc:27:4f:4f:50:c1:fd:e7:9f:94:dd:ef:be:14:
         30:a6:e9:91:06:94:0f:97:54:ac:20:fb:a3:dd:0d:17:ed:49:
         3a:26:e6:1d:f5:94:8d:44:e2:12:cd:6c:20:81:b1:35:7d:8a:
         15:2b:6d:35:5b:fe:b6:1b:78:f1:63:54:b8:cb:d4:94:1c:7d:
         1c:39:dd:7a:3c:1d:35:a1:c9:c8:ec:d2:46:8a:ed:18:7d:81:
         4b:60:d7:4d:fc:57:52:e7:5b:26:60:34:eb:d5:7a:9d:33:b1:
         95:a2:4b:a2:47:61:85:41:96:c8:64:44:dc:29:1b:15:9b:70:
         2e:4b:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 08:34:25 2026 by rpki-client