Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a313030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a313030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          m1gbCq3LsdLGkvcZJXZbkVpZf8hKpRGNCaaxfChb5lA=
Subject key identifier:   AC:50:70:F0:7C:82:EC:19:1E:03:F8:64:30:4C:60:27:F3:CB:86:0A
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       26F244A79A0C0EC4322DDC9B48F38E988370F4BB
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a313030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Tue 27 May 2025 15:20:11 +0000
ROA not before:           Tue 27 May 2025 15:15:11 +0000
ROA not after:            Tue 26 May 2026 15:20:11 +0000
asID:                     273142
IP address blocks:        2803:2c50:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f2:44:a7:9a:0c:0e:c4:32:2d:dc:9b:48:f3:8e:98:83:70:f4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: May 27 15:15:11 2025 GMT
            Not After : May 26 15:20:11 2026 GMT
        Subject: CN=AC5070F07C82EC191E03F864304C6027F3CB860A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:06:4e:80:e2:7a:90:f3:22:3b:a9:8f:7c:
                    bf:b3:06:6f:d6:c8:b4:9f:12:a4:29:47:77:c9:12:
                    b1:52:9b:8f:b6:0a:af:5a:92:07:30:d2:56:04:b3:
                    46:6a:6a:70:08:49:74:ff:b0:c3:26:ab:4c:b9:df:
                    dc:70:74:62:66:12:e1:7d:e7:b4:46:72:db:29:48:
                    67:1a:a6:d6:fd:3d:b7:84:41:40:6b:04:b1:d5:42:
                    c8:76:bf:33:e6:c5:70:9f:2b:1f:a5:31:c6:28:aa:
                    fd:f4:c6:37:01:5e:20:0f:7a:0c:58:6c:3f:2a:a6:
                    e2:1a:41:dc:20:55:6c:97:ea:17:c3:80:54:29:80:
                    11:bd:85:ca:60:0d:7c:39:cb:83:95:29:5f:7d:8c:
                    75:9c:ad:23:9f:cc:09:2b:16:d4:13:23:27:75:48:
                    4b:de:3a:61:02:e9:ca:1e:ee:38:87:64:1f:18:bc:
                    db:dd:90:57:9b:e8:a6:30:dd:5c:78:59:08:ef:ac:
                    6a:2e:e0:92:49:b2:a9:44:aa:de:8a:bd:2a:1a:11:
                    fa:9c:49:81:26:de:dd:95:6b:e2:56:63:c7:5d:1c:
                    39:08:88:da:83:00:de:85:64:0a:8f:cf:7a:d4:de:
                    0d:61:f3:ec:ff:1d:53:4c:cd:02:3e:2b:81:0d:da:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:70:F0:7C:82:EC:19:1E:03:F8:64:30:4C:60:27:F3:CB:86:0A
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a313030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:e0:de:14:77:fd:a7:df:ad:ca:2a:a3:43:fa:e5:ec:04:
         f3:04:4b:02:0b:87:0b:bc:65:b2:ee:50:07:fe:ce:df:7e:42:
         16:cb:1a:58:40:51:48:cd:4a:39:58:a6:5c:39:2d:5d:80:36:
         7f:2b:c1:78:6a:51:26:71:a1:5a:7f:8a:3c:fb:64:c1:5b:f3:
         ee:c3:0d:a6:d6:1f:b3:16:0b:a4:fa:d3:b4:05:02:95:af:44:
         bd:cb:00:9f:b8:43:59:e0:ec:a3:ad:88:a8:e7:af:cb:a3:af:
         19:f6:3b:b8:64:01:40:1b:5b:4d:3d:c6:16:9c:43:11:4a:df:
         a3:79:d4:eb:2d:fb:f5:ac:ce:01:de:73:c7:2f:3a:33:3c:80:
         f8:d2:42:75:89:12:a1:d4:99:4e:80:45:97:59:de:94:e1:30:
         c7:df:d4:8b:50:2a:a7:a2:85:47:90:16:48:70:08:f9:5d:e1:
         b5:53:63:d8:9a:85:c7:f1:78:62:46:40:f3:0c:86:c2:1c:f4:
         f5:f1:fb:e2:a4:74:4b:c3:89:0b:07:5f:69:fb:ec:66:92:72:
         2b:38:6d:ae:a4:f2:36:e9:75:5e:90:20:65:ce:9b:eb:16:75:
         5a:d8:fe:1b:9b:c4:30:aa:a2:f4:d3:ac:87:34:80:1a:f4:88:
         58:9a:9d:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:05:02 2025 by rpki-client