Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34382d3438203d3e203634313132.roa
File:                     323830333a333434303a393030303a3a2f34382d3438203d3e203634313132.roa (raw, json)
Hash identifier:          HfckpdyH6dZsAIis4DRpJjrSmXs1s7GeOleUETT/InQ=
Subject key identifier:   C9:30:25:53:B2:E7:F8:31:7E:D5:89:45:B7:96:EF:EE:FB:16:8F:ED
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       245DB7D770F5E81D48AF18A386DE0C774CB57ADA
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34382d3438203d3e203634313132.roa
Signing time:             Mon 22 Jun 2026 20:48:51 +0000
ROA not before:           Mon 22 Jun 2026 20:43:51 +0000
ROA not after:            Mon 21 Jun 2027 20:48:51 +0000
asID:                     64112
IP address blocks:        2803:3440:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5d:b7:d7:70:f5:e8:1d:48:af:18:a3:86:de:0c:77:4c:b5:7a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Jun 22 20:43:51 2026 GMT
            Not After : Jun 21 20:48:51 2027 GMT
        Subject: CN=C9302553B2E7F8317ED58945B796EFEEFB168FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:89:23:95:45:db:a5:cf:3a:bc:ec:b0:c5:
                    e5:21:29:66:c8:ab:a5:b2:83:3a:c7:1b:13:ff:23:
                    0d:27:e5:a2:1c:0a:21:59:7d:0d:1f:8d:12:7c:7d:
                    fb:1c:3c:2d:be:59:33:ec:ed:9a:cf:9a:45:bb:19:
                    a6:b3:59:65:40:8c:7f:83:7d:a2:b9:5e:33:bb:03:
                    cf:71:95:64:93:7b:d1:f1:1f:9c:7b:2b:d6:de:8d:
                    cb:ec:b3:04:80:d5:65:89:6b:4a:c8:76:d6:c0:fb:
                    9b:40:db:de:8c:6a:fb:43:1c:3a:cd:1b:dc:e3:5c:
                    be:4e:83:6a:e2:78:7a:f2:3a:50:fe:75:0c:83:1c:
                    8a:9e:a8:5a:fc:ef:28:04:e2:38:9c:60:1e:9d:87:
                    06:af:94:23:89:ab:a6:3f:e9:6d:73:15:ea:f2:8e:
                    f2:da:c9:af:a1:9b:6f:41:dc:c7:4c:52:bc:c6:6a:
                    aa:2f:8f:2c:74:77:84:0d:10:5c:5a:19:16:dc:fb:
                    3c:e3:1a:dd:69:ce:77:0c:a9:e2:38:a2:ad:31:97:
                    cc:d3:21:52:fd:1c:b3:13:15:ce:c1:7e:19:d5:73:
                    6a:4e:db:38:72:c0:15:67:72:8a:11:00:11:49:e7:
                    e3:ee:82:89:f3:16:f2:e2:b9:af:a5:bb:6f:36:f3:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:30:25:53:B2:E7:F8:31:7E:D5:89:45:B7:96:EF:EE:FB:16:8F:ED
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34382d3438203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:cb:07:5c:a2:6d:43:ec:2f:63:c4:c7:41:6c:23:9e:c4:
         3b:6e:de:06:e3:73:b1:cb:ed:d8:ed:1d:bc:45:d3:95:09:4d:
         e4:1d:ca:07:53:af:bd:7b:40:91:9a:a0:46:1d:48:67:2c:fa:
         25:a8:88:db:5d:e3:47:0a:ea:12:37:59:91:cb:26:7d:36:0e:
         29:a2:74:db:84:70:8b:2f:a0:23:57:d1:5b:b9:33:0a:8a:04:
         15:96:87:35:23:bb:77:fc:3c:91:ec:c5:d9:ab:d6:d7:5a:41:
         e6:0f:49:c3:f9:7e:69:77:2e:68:07:ad:92:86:2e:b7:e6:82:
         c8:2b:b3:d4:78:69:6a:f5:76:6d:8f:de:4b:8f:06:ae:d7:cb:
         f7:15:36:9c:89:1f:46:b1:d9:52:24:4d:31:b2:88:6f:f5:75:
         38:b1:33:da:77:f1:15:b5:f4:bc:79:db:88:07:ee:c2:27:e8:
         d4:f0:45:f6:f6:74:70:be:a2:e2:89:bf:72:28:ce:21:72:f5:
         ac:f7:ca:02:a5:61:9e:0e:02:41:cb:9c:26:94:07:b0:d9:a3:
         63:61:27:c6:2d:ee:7f:4d:92:19:81:3d:33:be:3c:a4:df:06:
         af:14:15:6c:ba:0f:7d:f7:31:ef:3b:0d:1a:f6:3b:ae:af:be:
         ed:da:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:42:32 2026 by rpki-client