Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a613a3a2f34382d3438203d3e20323732393636.roa
File:                     323830333a383539303a613a3a2f34382d3438203d3e20323732393636.roa (raw, json)
Hash identifier:          /PZfzennbOQrAEPBZTilV2lRS7HytgF7vw4lpciZW1k=
Subject key identifier:   40:18:F1:D7:81:DB:46:C6:83:39:ED:A1:0E:C3:AE:52:FD:01:37:F3
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       697B6826DE7843F015269745ADFAD28242FED820
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a613a3a2f34382d3438203d3e20323732393636.roa
Signing time:             Thu 14 May 2026 00:42:25 +0000
ROA not before:           Thu 14 May 2026 00:37:25 +0000
ROA not after:            Thu 13 May 2027 00:42:25 +0000
asID:                     272966
IP address blocks:        2803:8590:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7b:68:26:de:78:43:f0:15:26:97:45:ad:fa:d2:82:42:fe:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: May 14 00:37:25 2026 GMT
            Not After : May 13 00:42:25 2027 GMT
        Subject: CN=4018F1D781DB46C68339EDA10EC3AE52FD0137F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:1e:d3:0f:45:f1:93:b1:ef:47:ec:8a:34:
                    20:3b:e5:28:57:12:70:74:15:dc:cd:c6:b6:4b:90:
                    cd:be:82:5c:e1:c3:b5:8d:de:57:f0:ae:86:fd:70:
                    64:ba:60:22:43:0a:cd:e8:42:91:a0:50:b5:d9:e2:
                    6e:f1:fc:0d:09:60:2f:28:d9:65:18:94:80:59:b6:
                    bc:6e:e2:a0:ee:be:cb:18:46:f7:cc:2d:6d:74:0a:
                    20:d3:78:9f:c0:9b:a0:e2:f5:01:1f:d5:74:f3:10:
                    e0:fe:fd:bf:0d:b0:64:37:a4:42:6a:dd:63:57:01:
                    80:a2:76:36:a5:5f:a3:13:0c:62:78:97:de:c0:64:
                    ab:33:1c:ab:3e:a8:aa:7c:b9:ee:f2:49:62:78:a8:
                    ed:79:5c:79:1c:c0:e8:45:51:68:d4:3a:d4:c3:d3:
                    dc:08:35:ac:4a:1f:f5:2e:76:04:2d:89:75:86:68:
                    35:b5:12:82:13:d0:18:77:54:09:20:e0:ca:d8:83:
                    ad:b7:ab:ba:0a:98:82:32:0b:28:35:0b:67:da:dc:
                    83:0e:30:b1:90:8a:c0:77:2a:80:64:01:cf:b5:2b:
                    b5:f0:eb:44:96:b1:28:d8:c3:e4:57:2b:7a:09:1a:
                    cc:d2:a2:b9:22:b7:76:5c:69:8c:ca:b7:b2:83:54:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:18:F1:D7:81:DB:46:C6:83:39:ED:A1:0E:C3:AE:52:FD:01:37:F3
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a613a3a2f34382d3438203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:63:40:ff:64:82:61:30:3b:09:b3:0a:bc:46:f2:d3:67:fe:
         16:ff:0a:31:f4:b0:fc:e4:49:3b:eb:da:ac:a2:4d:1e:1f:4a:
         3b:ed:9c:da:e2:50:80:92:a4:26:c6:ce:4d:54:92:0a:c9:e3:
         92:f7:46:41:6a:01:13:4b:07:75:66:58:9d:86:1e:b6:9f:2e:
         cb:d7:d1:17:c6:37:04:d9:56:61:65:e4:78:f9:cf:50:9b:64:
         1d:7e:16:94:85:2e:97:46:e4:a1:47:9a:86:fc:a7:65:62:60:
         66:8c:ca:ef:26:34:18:ef:2b:b9:91:35:4a:35:ec:09:47:1c:
         a9:88:f0:eb:a5:10:ae:bf:65:5b:7f:fc:00:91:90:80:74:e3:
         ad:a1:c9:d1:2c:f4:de:a5:73:2d:16:26:4d:78:07:44:43:c3:
         94:b6:01:fb:08:d9:96:aa:fb:cc:ff:11:0b:5a:e7:52:d3:a8:
         88:ea:1b:63:30:12:3c:1a:3f:46:65:c1:16:ce:1b:76:4b:c2:
         3f:89:83:1e:7d:33:4b:4a:05:43:5f:7a:b5:2c:c9:d3:eb:08:
         df:51:f8:ee:5f:d0:75:cd:a6:88:01:29:37:5b:c2:48:62:2e:
         9b:ac:6a:80:f0:37:80:73:2c:de:fa:d9:b3:94:2a:4c:2e:bd:
         4b:6c:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:42:24 2026 by rpki-client