Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/323830333a313535303a3a2f33322d3438203d3e20323733383534.roa
File:                     323830333a313535303a3a2f33322d3438203d3e20323733383534.roa (raw, json)
Hash identifier:          BTFU8/XEPfZXjt9fa19bJKpw12rLTIEAyTXZJ8xfv7k=
Subject key identifier:   18:9D:62:CF:4D:B2:4C:8E:65:8C:1E:43:8B:24:9C:4B:F7:2A:24:D3
Certificate issuer:       /CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
Certificate serial:       4EB4B89ACD6CB720D139BD6C7BF373780B3349AA
Authority key identifier: C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/323830333a313535303a3a2f33322d3438203d3e20323733383534.roa
Signing time:             Wed 29 Jul 2026 19:19:13 +0000
ROA not before:           Wed 29 Jul 2026 19:14:13 +0000
ROA not after:            Wed 28 Jul 2027 19:19:13 +0000
asID:                     273854
IP address blocks:        2803:1550::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b4:b8:9a:cd:6c:b7:20:d1:39:bd:6c:7b:f3:73:78:0b:33:49:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
        Validity
            Not Before: Jul 29 19:14:13 2026 GMT
            Not After : Jul 28 19:19:13 2027 GMT
        Subject: CN=189D62CF4DB24C8E658C1E438B249C4BF72A24D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f6:18:f9:4c:56:7f:0a:83:f1:7a:a3:aa:9f:
                    b5:b8:7b:c4:68:ea:26:11:90:8a:bc:db:da:ac:3f:
                    77:78:02:d7:6e:25:4e:3c:aa:0a:9c:88:b3:4a:34:
                    03:2d:8b:26:d7:22:06:5c:9a:5a:a0:06:a7:ae:19:
                    a3:a5:10:06:a9:49:3c:d0:f6:01:4d:0a:97:78:23:
                    fd:89:64:23:8f:6c:85:d1:5e:88:25:99:00:50:c5:
                    e1:ca:de:47:c8:db:f5:6f:98:12:f1:9a:ee:dd:e2:
                    e6:56:12:d6:91:10:5d:68:e9:39:b8:f3:ce:c4:a4:
                    2c:3d:ae:1f:0a:fa:6a:78:20:72:8e:e5:99:ed:92:
                    bf:94:ba:92:aa:9f:66:d5:52:8b:d5:23:11:58:10:
                    c6:54:ae:19:75:aa:99:10:e6:99:7c:8d:b4:95:02:
                    fa:8b:3e:54:cf:f4:aa:53:b7:0e:1d:c3:18:c1:40:
                    66:95:ed:04:2c:de:d0:54:a1:17:06:e7:d8:01:fd:
                    b4:cc:93:68:54:d4:70:eb:49:58:b3:83:a8:92:24:
                    02:e0:21:d7:3f:b3:54:2b:3d:6a:3e:a8:ac:80:e4:
                    f0:b7:c1:17:1d:6a:17:34:75:bf:c8:06:d9:2f:09:
                    c4:ce:5c:c6:7a:b5:6b:f6:20:e8:76:38:a7:88:52:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9D:62:CF:4D:B2:4C:8E:65:8C:1E:43:8B:24:9C:4B:F7:2A:24:D3
            X509v3 Authority Key Identifier:
                keyid:C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/323830333a313535303a3a2f33322d3438203d3e20323733383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1550::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:c9:2a:8d:2a:3f:83:cb:da:52:71:d7:8e:de:44:0b:27:
         22:4f:71:62:52:5f:d2:de:a4:43:1b:04:fb:32:e8:56:81:0d:
         18:4d:27:a1:78:1f:c5:f5:f6:79:85:fb:12:09:56:d4:36:43:
         15:30:87:37:af:92:8e:4a:17:53:e3:a5:72:e3:5d:cc:9a:26:
         0b:fe:66:48:1d:2b:9d:4b:d1:69:f1:2b:f6:6c:2f:91:04:51:
         8f:7f:74:44:df:15:36:45:60:0b:47:a8:0b:df:63:92:37:62:
         46:a1:b0:b9:2d:6a:98:85:c8:f1:de:7d:59:77:8a:14:6e:57:
         88:f2:11:52:28:e2:d7:11:e9:0e:5c:e6:58:c0:59:41:0f:fb:
         8a:ea:af:cb:04:59:13:91:99:b0:90:41:d0:3e:52:0e:a4:ec:
         6e:7d:88:ae:75:eb:69:d3:f1:9c:9d:df:a9:c7:3c:e7:ec:be:
         93:dd:15:19:c0:f9:03:2d:67:33:71:d9:6d:eb:f6:2c:37:03:
         b3:ee:6d:06:f3:76:ea:40:e7:46:72:71:da:2a:91:bc:b2:7b:
         20:e1:da:78:d8:6d:94:da:b5:19:85:b7:af:c1:92:bd:a6:c6:
         97:17:71:a0:0b:7c:e5:21:f0:ee:b8:4b:07:31:f1:14:81:59:
         92:55:5d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:36:30 2026 by rpki-client