Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/323830333a663163303a3a2f33322d3438203d3e20323635363931.roa
File:                     323830333a663163303a3a2f33322d3438203d3e20323635363931.roa (raw, json)
Hash identifier:          /YijHlgQvVriTrYNluZegvpKw3AbfAN5pIzcBi5/HNM=
Subject key identifier:   C1:0F:06:29:1B:D4:C5:BA:F0:D2:5B:DB:14:D1:BA:BC:B4:8F:A5:C2
Certificate issuer:       /CN=E7A27C8F6CDCF649D79DE823E920014569787295
Certificate serial:       7B71516428D58B1E208FFF6BB29BF4236889C2F6
Authority key identifier: E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/323830333a663163303a3a2f33322d3438203d3e20323635363931.roa
Signing time:             Mon 18 May 2026 22:30:00 +0000
ROA not before:           Mon 18 May 2026 22:25:00 +0000
ROA not after:            Mon 17 May 2027 22:30:00 +0000
asID:                     265691
IP address blocks:        2803:f1c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 08:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:71:51:64:28:d5:8b:1e:20:8f:ff:6b:b2:9b:f4:23:68:89:c2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7A27C8F6CDCF649D79DE823E920014569787295
        Validity
            Not Before: May 18 22:25:00 2026 GMT
            Not After : May 17 22:30:00 2027 GMT
        Subject: CN=C10F06291BD4C5BAF0D25BDB14D1BABCB48FA5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:c8:9f:a6:a7:b9:d2:11:b8:e3:40:46:1c:
                    85:c0:42:63:06:a6:3c:6a:15:e4:56:16:b7:a3:4c:
                    f8:6e:70:fb:80:6a:08:36:ca:17:0b:a5:b9:a0:17:
                    32:e8:c6:1c:fb:a3:27:b8:f5:fb:b3:9e:0a:4c:ce:
                    51:2a:53:02:28:e1:fd:44:11:40:a7:e9:99:a8:66:
                    c2:96:92:f0:05:18:05:0e:7c:f8:92:48:22:bd:a4:
                    f5:00:2e:d9:9d:c0:79:2d:34:e7:5d:34:12:ad:7e:
                    74:3d:72:97:24:9e:df:5c:2c:98:15:da:68:50:2a:
                    79:ae:39:b8:9e:fa:f3:13:0b:6b:5c:0b:70:c2:71:
                    01:aa:ec:b4:c8:ed:1f:84:85:fd:e1:5a:f5:e6:c9:
                    37:0c:8b:f7:4d:e6:ef:92:a7:51:27:1d:bb:df:7a:
                    25:26:3b:2b:78:40:9d:98:ea:3f:1c:35:7b:55:c0:
                    3d:2a:88:c1:6c:fa:33:52:de:29:d7:ad:e3:cb:4b:
                    05:c7:84:07:31:4d:75:e2:3d:ad:dc:c2:47:a8:74:
                    bd:af:3a:89:93:a7:13:ae:9e:6a:eb:d8:55:a2:09:
                    5b:6e:46:18:74:9b:ea:3d:7e:aa:c8:a2:31:26:de:
                    d4:ad:89:c5:b4:eb:c2:aa:66:27:2f:05:2c:40:b7:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:06:29:1B:D4:C5:BA:F0:D2:5B:DB:14:D1:BA:BC:B4:8F:A5:C2
            X509v3 Authority Key Identifier:
                keyid:E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/323830333a663163303a3a2f33322d3438203d3e20323635363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:a4:e1:9e:fe:b1:02:99:55:9f:cf:47:ab:b0:38:1e:32:
         e4:2a:a6:b9:c3:e4:79:87:73:76:75:d9:ef:79:b6:14:b2:54:
         67:cb:98:66:e1:e4:aa:7d:13:7c:45:f8:a8:52:b5:e9:cb:bd:
         5f:a2:61:b5:a9:79:21:3e:46:53:3c:03:7c:4c:ef:bd:88:95:
         44:49:f7:c9:c5:38:65:d3:10:d2:e1:ba:37:86:f3:4b:68:5d:
         4c:bc:06:4d:95:76:21:20:50:d3:ad:f7:7b:e4:42:2a:12:56:
         43:fa:25:13:82:2d:a9:16:59:af:bc:9e:2f:5f:37:f9:d4:cb:
         85:49:46:c5:42:95:b1:23:21:86:4f:e7:9b:98:cb:39:f6:d3:
         52:72:36:11:0b:40:42:31:e2:f2:0c:df:d8:79:72:61:61:bd:
         fe:28:58:6c:d8:a6:aa:90:1e:9c:12:23:40:df:9f:d7:83:8d:
         89:f0:14:c8:67:f0:9a:c9:b0:e6:6b:93:80:f2:b9:ae:8e:d9:
         22:00:22:60:e8:29:79:99:eb:3f:ac:a2:a8:9a:7d:02:5a:42:
         08:af:75:78:2a:ad:b5:9c:2d:d5:cb:2d:6c:3f:d7:04:79:6e:
         91:6e:cf:31:90:e7:c1:c9:95:bc:cc:f2:0b:b6:97:be:00:32:
         cb:d3:4f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:15:39 2026 by rpki-client