Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa
File:                     323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa (raw, json)
Hash identifier:          Tbjw5vSM331J78JUvGLQIOlXEeUmLHTNkYOJQuHeXaY=
Subject key identifier:   52:E2:41:3A:4D:0E:31:E3:5D:F6:EA:FA:B8:C5:06:E8:7D:E8:3E:1C
Certificate issuer:       /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial:       422688C1E649A6B67F188EA1B9510F8EBA49420A
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa
Signing time:             Wed 29 Jul 2026 03:55:26 +0000
ROA not before:           Wed 29 Jul 2026 03:50:26 +0000
ROA not after:            Wed 28 Jul 2027 03:55:26 +0000
asID:                     264837
IP address blocks:        2803:22c0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 21:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:26:88:c1:e6:49:a6:b6:7f:18:8e:a1:b9:51:0f:8e:ba:49:42:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
        Validity
            Not Before: Jul 29 03:50:26 2026 GMT
            Not After : Jul 28 03:55:26 2027 GMT
        Subject: CN=52E2413A4D0E31E35DF6EAFAB8C506E87DE83E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8c:ed:cc:2c:b2:06:21:77:3e:9d:ea:73:a5:
                    00:43:1a:eb:d6:73:f9:92:61:34:3a:fb:aa:46:dc:
                    11:c5:0e:46:76:c6:09:f0:40:14:bb:63:e6:c6:2e:
                    46:f2:97:4d:a0:04:4b:87:a5:94:1d:d8:bc:2d:bb:
                    1e:83:5f:74:7d:3d:23:13:dd:59:5d:c0:ba:75:64:
                    d0:53:f3:17:83:de:f9:00:15:75:06:da:98:2f:46:
                    21:9c:dd:b0:ad:79:38:82:7e:48:93:83:0b:ce:58:
                    80:2e:81:4a:a6:4d:33:67:0d:69:be:52:5c:d7:8b:
                    b5:53:50:38:5e:4c:22:b2:16:08:ff:d8:8b:18:39:
                    e7:43:ce:20:67:a2:76:65:c5:e1:3d:3d:b3:fe:79:
                    c6:b6:e9:f1:4f:13:47:84:6b:f1:af:f9:a5:32:a5:
                    95:dd:56:51:56:86:f1:bb:04:e8:22:26:91:fe:6c:
                    83:c2:5f:44:f8:ae:ef:23:e5:0c:26:b5:bd:cd:3b:
                    31:ef:76:b8:18:09:f2:ee:72:fd:b2:0b:07:41:a4:
                    9b:38:62:cb:f7:8e:c8:67:87:d8:54:14:e0:53:ab:
                    10:46:11:63:73:4f:7d:91:18:ac:d3:d1:1e:c0:86:
                    a8:a0:c5:23:d7:8c:28:aa:35:bd:07:e7:0a:7e:64:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E2:41:3A:4D:0E:31:E3:5D:F6:EA:FA:B8:C5:06:E8:7D:E8:3E:1C
            X509v3 Authority Key Identifier:
                keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:22c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:ab:df:1a:66:ee:aa:0b:a6:fb:fe:65:41:54:24:22:58:
         a4:c0:bc:f8:5b:dd:9a:e0:9d:2e:e0:70:de:68:1f:98:cb:cd:
         23:f6:bb:1d:5d:3e:32:8d:15:16:1f:9a:79:8d:17:43:5d:03:
         a6:85:75:3f:f4:ea:67:2f:99:d5:fb:8a:25:d5:9d:33:36:25:
         fc:c7:ea:6b:a6:f7:97:e5:9e:cd:68:b7:aa:59:39:bd:d5:54:
         f8:02:72:ca:10:70:da:30:ea:38:ef:da:07:22:31:8e:f0:53:
         64:3e:ad:0d:d7:ee:42:fe:e5:03:4d:9f:8b:97:b1:1e:8d:94:
         dd:0b:bd:39:91:c8:d2:0b:9e:6b:20:13:a7:cf:80:22:52:4b:
         36:34:c9:58:96:21:7e:33:22:7d:49:ca:53:6e:ca:47:73:68:
         8e:62:4f:40:dc:f5:fb:8d:a8:67:89:6d:b9:89:d6:76:a7:63:
         74:ba:bf:d4:f4:34:34:50:1f:c7:21:9a:20:9d:96:4f:41:e9:
         04:ae:0a:51:36:57:dd:13:75:10:a9:0b:50:af:57:5e:2b:e0:
         7a:67:ec:51:93:96:21:b4:ca:e6:f0:17:64:b6:dd:b9:b3:ea:
         7e:4f:58:63:86:18:2b:ee:04:2b:d0:f9:1d:12:03:94:96:45:
         2b:69:7b:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:13:23 2026 by rpki-client