Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3430303a3a2f34302d3634203d3e20323733393434.roa
File:                     323830333a636635303a3430303a3a2f34302d3634203d3e20323733393434.roa (raw, json)
Hash identifier:          jvuBOP6KosVe51bqbiq08aoeh6Ox3PpZxv3IjMu6l/I=
Subject key identifier:   6E:C3:18:E9:FA:11:09:55:39:DB:3D:6C:E2:F3:84:D3:E9:32:5D:62
Certificate issuer:       /CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
Certificate serial:       22C39B41D8B00182B3B9A1C740F47685644B00B3
Authority key identifier: C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3430303a3a2f34302d3634203d3e20323733393434.roa
Signing time:             Wed 08 Jul 2026 15:51:28 +0000
ROA not before:           Wed 08 Jul 2026 15:46:28 +0000
ROA not after:            Wed 07 Jul 2027 15:51:28 +0000
asID:                     273944
IP address blocks:        2803:cf50:400::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c3:9b:41:d8:b0:01:82:b3:b9:a1:c7:40:f4:76:85:64:4b:00:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
        Validity
            Not Before: Jul  8 15:46:28 2026 GMT
            Not After : Jul  7 15:51:28 2027 GMT
        Subject: CN=6EC318E9FA11095539DB3D6CE2F384D3E9325D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:28:3d:e9:07:fb:08:a8:86:e2:fb:b7:2c:
                    fe:05:6d:57:41:f5:4d:ea:7a:ed:bd:f5:d2:b9:50:
                    1f:44:10:cc:7a:8d:8a:ee:e2:19:71:c7:5e:de:ab:
                    dc:6e:70:5a:24:99:0e:e4:c3:bf:e5:a1:25:eb:7b:
                    37:83:d5:3e:5f:09:92:ca:5c:79:f2:d9:89:dc:92:
                    f1:65:76:75:85:7f:82:8b:81:32:cc:f7:75:32:05:
                    bf:b6:97:c2:92:7e:7e:68:ce:8c:22:b5:e4:29:03:
                    d2:4b:9c:2c:a0:bf:72:bd:63:f1:af:ab:84:67:f0:
                    d7:15:ad:8d:b6:ed:fd:4d:f2:f4:c2:f9:52:dd:3d:
                    8b:60:a9:99:b2:80:1f:c7:a8:b9:9c:a3:28:94:c4:
                    ad:91:4c:de:7e:f3:23:04:08:27:82:ec:f9:10:a0:
                    6f:3f:36:27:ad:84:65:54:b7:61:67:c7:5a:7c:1c:
                    89:3a:9f:5c:94:25:47:dc:a6:47:a4:ef:b8:d4:5a:
                    97:37:0b:61:90:ed:da:40:05:98:f6:35:ec:ba:cf:
                    65:28:19:45:1e:3e:01:fe:d6:38:c3:32:03:59:a4:
                    5a:4b:90:8c:67:b4:26:ed:3f:e4:3e:07:e3:77:09:
                    58:ed:3e:70:40:e9:a2:8e:be:2f:87:19:6c:7e:6f:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C3:18:E9:FA:11:09:55:39:DB:3D:6C:E2:F3:84:D3:E9:32:5D:62
            X509v3 Authority Key Identifier:
                keyid:C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3430303a3a2f34302d3634203d3e20323733393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf50:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:6e:f9:da:1d:21:cc:3e:a6:ef:4a:49:33:9a:54:24:d9:
         84:3e:c9:03:13:87:0a:8e:ea:1e:fc:6d:fb:fe:5a:c2:52:e5:
         1c:be:7f:90:ef:70:8f:83:ca:b3:72:4b:a4:51:81:4a:55:3c:
         61:7f:62:bd:f5:fc:98:d8:d6:31:db:9f:c1:f9:5b:dc:c9:a9:
         3a:19:42:b7:2f:a2:15:81:1d:77:c8:2a:57:14:8d:a5:fc:2a:
         76:ec:2b:94:2d:1a:92:90:7b:9a:a4:8e:08:ee:e1:00:f0:ff:
         6c:05:9f:ff:80:d2:28:61:61:a6:eb:af:f7:85:22:7c:d2:57:
         f2:e3:d0:2e:d5:5d:f1:fa:5d:47:0a:90:eb:eb:63:ca:cf:05:
         3a:9a:02:b4:03:bf:12:af:92:24:9e:c9:db:61:f7:58:e3:d9:
         18:96:ec:70:de:c1:b6:06:9d:9b:1e:c0:46:6a:08:fd:38:b3:
         85:b4:b7:76:cb:91:82:5d:1c:8c:18:db:27:e5:91:07:42:7d:
         b7:b0:50:15:e4:0c:c4:e7:10:9d:49:27:82:9f:7a:9e:fa:28:
         e5:df:f1:d4:75:69:bb:7f:fe:9b:df:bd:b1:3d:af:26:bb:74:
         51:c6:dc:76:16:9c:27:94:b1:d1:ba:ea:bc:eb:f9:67:84:85:
         52:99:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:46:42 2026 by rpki-client