Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3830303a3a2f34302d3430203d3e20323732373939.roa
File:                     323830333a356365303a3830303a3a2f34302d3430203d3e20323732373939.roa (raw, json)
Hash identifier:          24P6M6WqtChLq9Ki6nynkCHp09cbxk267BfP0kyYQLc=
Subject key identifier:   73:40:32:CD:EE:E8:3A:E8:6D:C2:4C:EB:99:5A:47:F9:F3:B0:D7:58
Certificate issuer:       /CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
Certificate serial:       139D2F0329E971758D7AEAEE5DE9832A89188F78
Authority key identifier: 52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3830303a3a2f34302d3430203d3e20323732373939.roa
Signing time:             Fri 21 Aug 2026 10:26:19 +0000
ROA not before:           Fri 21 Aug 2026 10:21:19 +0000
ROA not after:            Fri 20 Aug 2027 10:26:19 +0000
asID:                     272799
IP address blocks:        2803:5ce0:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 21:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9d:2f:03:29:e9:71:75:8d:7a:ea:ee:5d:e9:83:2a:89:18:8f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
        Validity
            Not Before: Aug 21 10:21:19 2026 GMT
            Not After : Aug 20 10:26:19 2027 GMT
        Subject: CN=734032CDEEE83AE86DC24CEB995A47F9F3B0D758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:c5:76:05:18:9e:75:ba:fe:be:42:37:1d:
                    e2:84:b6:61:34:6f:40:d3:e9:24:b3:e7:61:69:e8:
                    36:bc:69:90:f8:ec:a3:ad:7f:fd:64:2e:d7:ee:38:
                    6a:68:f9:3f:d2:5c:0d:e7:9a:a5:c0:5f:64:86:25:
                    60:7c:72:78:0f:03:1a:13:89:fd:5c:da:7f:56:8c:
                    d6:6e:38:ca:0a:d9:89:33:94:f0:cb:ba:a4:55:8c:
                    e9:76:97:30:92:e7:c0:a7:e8:b0:de:22:e6:21:5f:
                    dd:f4:8f:85:7c:a0:1b:70:0c:28:92:3f:a7:20:3c:
                    48:b8:65:03:4e:5b:ef:e5:13:76:cb:29:81:09:71:
                    48:d5:2c:2d:8c:1b:98:14:cb:03:a9:6f:24:2e:b8:
                    fd:5a:70:4e:e6:b9:26:36:7c:0f:03:f0:7e:9e:d5:
                    a4:7a:de:67:97:6d:5d:b1:30:54:1d:3b:b5:ae:fb:
                    41:8b:d0:ab:05:11:ef:a6:cd:dc:ca:d1:5d:11:c5:
                    1b:44:6f:95:73:a0:ca:98:e2:29:d2:33:e5:92:6c:
                    4a:2b:9e:32:15:1d:45:5b:31:7f:50:81:c0:01:9f:
                    f8:4e:91:c2:4b:af:20:c1:f0:ec:8d:5c:75:e5:c0:
                    22:cc:6e:96:ce:f2:0a:6c:47:9f:f1:c3:5b:43:f7:
                    13:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:40:32:CD:EE:E8:3A:E8:6D:C2:4C:EB:99:5A:47:F9:F3:B0:D7:58
            X509v3 Authority Key Identifier:
                keyid:52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3830303a3a2f34302d3430203d3e20323732373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:65:2b:67:0d:7a:19:08:a3:f8:bf:19:7d:d6:ea:39:22:d8:
         cc:f5:ec:b1:c4:be:0a:4d:3e:5e:15:72:7a:ca:8e:8b:dd:38:
         4a:94:92:f2:f9:8c:a4:e6:26:e7:16:d6:ba:ef:93:90:9c:a1:
         f3:38:da:46:1e:05:64:6c:db:4b:dd:0c:9e:19:27:bf:64:9f:
         22:b6:d6:0f:26:5e:35:84:9c:c9:b8:cc:0f:3e:bf:2f:a4:1f:
         7e:86:7f:3d:91:99:da:b0:b3:c2:71:b6:51:09:72:e0:6a:67:
         6d:ea:d5:ae:d6:14:02:16:28:e0:12:9e:8f:3c:4f:3e:60:fb:
         4c:be:39:22:73:75:e7:78:e4:71:a7:b6:5f:ca:84:2b:71:f3:
         11:ce:45:27:43:fb:fc:c4:dd:ad:e7:28:56:fa:0b:59:a6:6b:
         fb:47:d0:70:0c:35:2a:d6:df:49:d9:7c:4e:77:44:82:04:e8:
         af:40:fd:5c:f0:21:d6:06:25:7c:0e:c0:10:b0:c7:b5:0a:45:
         26:73:e3:93:32:e7:f1:08:0b:a1:5e:13:bc:dc:91:6b:6c:25:
         9c:4d:90:d4:7c:30:16:58:e0:79:f6:a0:d8:4e:99:4d:64:72:
         90:eb:b6:d5:ce:78:49:d7:84:82:07:6b:63:5e:27:11:9a:01:
         56:a6:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:44:47 2026 by rpki-client