Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa
File:                     323830333a366565303a3a2f33322d3438203d3e203237393634.roa (raw, json)
Hash identifier:          /OxwgI5oUtumtT0/EvCqddG2k3jPlYyOCNe1k/Jd+SY=
Subject key identifier:   B7:EC:C8:77:FC:AF:B4:8F:C8:20:D7:3C:B7:8F:26:85:F0:5B:EB:77
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       7DD5B30E711362FF32EB10F80119168F98B4319C
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa
Signing time:             Mon 20 Apr 2026 16:39:25 +0000
ROA not before:           Mon 20 Apr 2026 16:34:25 +0000
ROA not after:            Mon 19 Apr 2027 16:39:25 +0000
asID:                     27964
IP address blocks:        2803:6ee0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 06:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d5:b3:0e:71:13:62:ff:32:eb:10:f8:01:19:16:8f:98:b4:31:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Apr 20 16:34:25 2026 GMT
            Not After : Apr 19 16:39:25 2027 GMT
        Subject: CN=B7ECC877FCAFB48FC820D73CB78F2685F05BEB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:03:fa:df:1b:04:5b:15:7f:ff:37:ff:d3:
                    ed:ee:5b:b6:3e:d6:ae:4d:bf:f1:3f:85:ab:f9:2b:
                    2e:6d:af:87:85:da:cb:c2:34:3e:3f:38:68:5a:3f:
                    88:d2:54:43:d5:18:05:9e:89:30:67:7f:88:1c:be:
                    85:7c:9b:82:de:3e:e5:60:a9:b5:80:83:56:5d:b4:
                    f1:a3:64:75:d0:b1:ee:c5:ca:86:ef:a6:f9:b1:34:
                    a1:89:9d:17:8b:16:fd:21:5c:3e:ac:c2:9f:c2:8e:
                    5b:de:a0:50:55:d2:f8:5f:c1:34:30:49:62:21:7c:
                    3b:78:1d:ee:33:d4:db:86:d2:1d:34:7f:fb:54:85:
                    4e:d9:65:59:d4:53:4b:cb:11:d3:a9:02:5c:68:46:
                    ec:f2:92:95:c5:13:22:11:89:5b:3f:f4:96:fc:e5:
                    21:b7:5f:d1:47:15:82:1b:2c:01:17:00:74:46:69:
                    95:4f:2d:84:f1:55:23:bb:1c:9d:81:05:50:93:f3:
                    94:fc:bc:26:f5:8d:80:54:76:94:8c:8a:8a:b2:f2:
                    bf:0d:c9:f3:fd:f5:02:df:91:3f:b4:0f:84:6e:a1:
                    0f:f2:bf:4f:39:04:73:39:74:91:4e:01:61:e9:c3:
                    0c:1a:29:66:18:81:8b:11:12:0c:80:1f:7c:ec:dd:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:C8:77:FC:AF:B4:8F:C8:20:D7:3C:B7:8F:26:85:F0:5B:EB:77
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:3a:80:d1:4b:84:df:18:39:6f:21:ce:26:7f:11:e1:3c:
         67:4d:55:5e:bf:aa:fd:3d:37:dd:ad:d9:e3:f7:d7:b6:b7:78:
         07:bc:46:06:94:1c:05:e9:d7:db:fc:69:62:20:33:40:27:f5:
         e0:ab:d3:7a:47:02:2c:65:5f:40:68:69:6b:1d:82:a4:2e:98:
         24:a3:8f:f2:29:8b:3e:25:70:8a:f3:59:a1:5a:09:65:7c:96:
         e6:4e:a2:fd:10:18:65:53:01:0e:86:0c:69:b7:27:6c:09:b3:
         55:20:60:51:a5:b6:07:c7:05:ea:ad:2c:47:d1:cd:8b:4c:f8:
         dd:f2:74:0b:2f:e2:7e:b6:cd:61:1c:24:a6:da:ec:fb:81:60:
         c2:57:cb:a4:ea:fe:17:8a:ec:d7:e6:d6:0a:3b:c6:dd:e8:57:
         00:4a:86:8f:d1:f7:fd:22:cc:da:f4:7b:8d:1e:53:94:b9:88:
         88:3f:ad:1d:55:a5:f4:01:43:6e:d1:c1:3d:56:1b:63:9d:28:
         1a:06:30:88:ff:d2:1e:3f:ac:97:a7:e9:5c:4e:b9:75:92:91:
         94:d3:8c:45:4b:fb:fd:15:0d:56:96:a1:66:9d:dc:ba:65:5c:
         f9:2a:3a:8f:55:01:02:ec:a2:3d:39:74:67:ef:06:b4:05:e5:
         7b:a6:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:27:12 2026 by rpki-client