Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/323830333a376333303a3a2f33322d3332203d3e20323734383437.roa
File:                     323830333a376333303a3a2f33322d3332203d3e20323734383437.roa (raw, json)
Hash identifier:          +4yk6qfB0O1yL1KWPbWZ6OohqGiQFG5jy6EBdmARQuc=
Subject key identifier:   08:66:15:A6:16:FA:EE:48:0C:BF:C9:D3:4E:64:85:A8:02:BA:BB:5D
Certificate issuer:       /CN=5E296EA1742C1394B5C187CC33207F54BB54EAF7
Certificate serial:       667CA1A604FD8C80A5D77A19FA6AAA1EDD6032B2
Authority key identifier: 5E:29:6E:A1:74:2C:13:94:B5:C1:87:CC:33:20:7F:54:BB:54:EA:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/323830333a376333303a3a2f33322d3332203d3e20323734383437.roa
Signing time:             Mon 02 Mar 2026 14:45:00 +0000
ROA not before:           Mon 02 Mar 2026 14:40:00 +0000
ROA not after:            Mon 01 Mar 2027 14:45:00 +0000
asID:                     274847
IP address blocks:        2803:7c30::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7c:a1:a6:04:fd:8c:80:a5:d7:7a:19:fa:6a:aa:1e:dd:60:32:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E296EA1742C1394B5C187CC33207F54BB54EAF7
        Validity
            Not Before: Mar  2 14:40:00 2026 GMT
            Not After : Mar  1 14:45:00 2027 GMT
        Subject: CN=086615A616FAEE480CBFC9D34E6485A802BABB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:15:63:db:28:24:9b:f9:60:35:ba:f6:96:
                    b9:f3:ac:67:97:9a:76:14:b7:8c:f4:12:f8:c3:e8:
                    cc:01:9e:c8:55:e8:6c:c0:cc:e9:72:c1:d0:06:56:
                    99:b2:11:69:bd:60:de:31:f9:38:8e:c5:1b:2d:77:
                    d2:b2:13:30:a9:83:e3:14:99:cb:45:0d:66:97:08:
                    29:37:5a:8a:06:31:d7:c8:5f:84:c4:13:20:a9:73:
                    ca:be:4e:4e:6d:2b:d6:22:68:fe:bd:79:fd:4a:2a:
                    77:9f:ee:20:c3:9f:0d:db:9a:b3:30:2e:c6:9f:a7:
                    f7:33:50:5d:28:94:4d:cd:b9:7a:68:40:25:79:a5:
                    a0:f2:df:b3:95:ed:6a:2e:72:ea:98:0e:39:84:31:
                    27:52:bf:ab:12:61:e2:08:ea:71:13:ed:07:6c:23:
                    9d:28:61:2f:b5:9a:7e:07:42:6b:93:55:b6:5b:38:
                    d7:1b:5b:fd:ad:fd:cc:b4:90:c6:82:c9:57:ed:2f:
                    98:87:33:c9:27:cf:3e:75:46:eb:65:aa:f7:4b:42:
                    bc:b7:a8:3f:bb:4f:a4:1b:00:c5:10:39:7a:2b:ac:
                    51:80:c9:2a:a3:32:0b:c4:1b:46:f6:56:41:e2:bb:
                    4e:ad:14:03:74:8c:2d:57:58:b9:bf:3f:ce:dd:cc:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:66:15:A6:16:FA:EE:48:0C:BF:C9:D3:4E:64:85:A8:02:BA:BB:5D
            X509v3 Authority Key Identifier:
                keyid:5E:29:6E:A1:74:2C:13:94:B5:C1:87:CC:33:20:7F:54:BB:54:EA:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/323830333a376333303a3a2f33322d3332203d3e20323734383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:23:91:34:00:5e:d5:86:b9:53:5a:40:7a:8d:5f:c1:69:75:
         8c:8a:51:d3:ad:cd:fd:86:32:1f:3d:b5:c3:ba:22:5d:bf:64:
         b5:b0:22:8a:04:03:8e:43:c2:ba:dd:e1:b0:e3:c4:df:b9:e7:
         2f:99:49:8f:4a:81:0c:dd:c0:4e:68:8a:98:9e:95:1b:11:f4:
         da:d4:d3:eb:9c:4a:82:06:c2:a5:ac:77:40:b5:07:a5:1d:21:
         89:42:ef:fe:b0:b5:47:03:52:17:2b:ac:e7:fd:bd:82:ab:54:
         74:80:d8:82:5a:81:76:0a:8a:dd:9c:c2:bb:b7:37:ae:5c:4f:
         0a:ac:57:50:48:41:e4:8b:74:ce:3f:d6:c8:83:94:c5:c8:2f:
         c7:04:21:1c:73:ef:fc:e9:77:c5:57:e0:09:55:c0:e5:51:d7:
         a8:5c:f6:e2:4a:a0:db:d8:36:9a:ee:ec:25:ef:25:07:ae:b9:
         fe:50:e5:64:9d:94:b9:e7:92:b1:0e:66:d9:63:4a:73:e0:f0:
         b8:e3:c6:b4:f3:06:57:d0:c1:4e:dc:90:ce:ad:e7:59:c8:cc:
         d0:31:5f:24:85:f2:99:15:11:e5:a4:47:56:32:ae:8a:a2:11:
         6b:cb:8d:b9:14:6d:c8:2e:e4:ee:52:90:c5:81:57:a5:24:75:
         62:ec:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 04:49:16 2026 by rpki-client