Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/323830333a663064303a3a2f33322d3634203d3e20323733393739.roa
File:                     323830333a663064303a3a2f33322d3634203d3e20323733393739.roa (raw, json)
Hash identifier:          dwquXVOrRDGZTbOrSjPrqhh7Iknrri4IckGWTq1vC70=
Subject key identifier:   1A:54:10:5C:57:55:3E:04:9B:8B:92:34:6C:3F:3B:D0:99:07:67:89
Certificate issuer:       /CN=A029AD07335F67E8BA47C64CB7192EFA5CC38203
Certificate serial:       74A8CDAB0B5C7701D4C7114E62A740CE29E4ABC3
Authority key identifier: A0:29:AD:07:33:5F:67:E8:BA:47:C6:4C:B7:19:2E:FA:5C:C3:82:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/323830333a663064303a3a2f33322d3634203d3e20323733393739.roa
Signing time:             Wed 28 Jan 2026 18:28:05 +0000
ROA not before:           Wed 28 Jan 2026 18:23:05 +0000
ROA not after:            Wed 27 Jan 2027 18:28:05 +0000
asID:                     273979
IP address blocks:        2803:f0d0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 06:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a8:cd:ab:0b:5c:77:01:d4:c7:11:4e:62:a7:40:ce:29:e4:ab:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A029AD07335F67E8BA47C64CB7192EFA5CC38203
        Validity
            Not Before: Jan 28 18:23:05 2026 GMT
            Not After : Jan 27 18:28:05 2027 GMT
        Subject: CN=1A54105C57553E049B8B92346C3F3BD099076789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:f7:90:b9:ba:2b:5b:a7:6e:cb:76:1b:a0:
                    88:e1:7e:0f:b4:17:d6:42:6c:0e:59:6a:b0:14:2f:
                    50:7c:97:cf:b5:1d:09:c4:9a:fc:b8:e7:64:f4:64:
                    f6:2f:9c:9d:84:39:57:79:2d:19:8b:1b:3b:98:ef:
                    6f:60:fd:af:15:7d:c5:43:07:c5:b8:29:40:7c:ef:
                    15:25:60:81:21:f0:9a:f9:33:3c:4f:4f:30:e6:62:
                    fa:1e:25:40:5b:af:ac:a6:f3:0b:c7:b3:03:d9:24:
                    d9:2c:a8:f9:ce:83:b9:87:dd:cf:f5:8d:f4:bc:60:
                    ee:e3:a4:94:1b:f1:7b:c0:02:f5:63:1c:94:83:09:
                    77:d2:c3:b0:21:f1:03:5a:e2:ee:f8:25:a5:a1:31:
                    82:9e:db:d5:44:d4:d3:6c:ad:3b:a3:c2:b8:1d:4b:
                    89:78:e8:de:38:a3:e6:f4:51:09:c7:c0:ff:86:68:
                    94:0f:b7:10:51:a4:de:74:da:24:73:b2:42:64:1a:
                    7b:7b:87:e0:31:50:0f:5a:1f:b5:2a:ac:31:e5:d7:
                    9c:f3:b1:6a:7a:9e:f7:b4:26:6b:98:cb:fb:07:36:
                    cc:22:07:ac:9d:c6:d9:27:8e:e2:81:30:64:e2:44:
                    9d:29:9f:14:22:a2:fd:c1:b4:3c:2d:88:17:d2:8e:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:54:10:5C:57:55:3E:04:9B:8B:92:34:6C:3F:3B:D0:99:07:67:89
            X509v3 Authority Key Identifier:
                keyid:A0:29:AD:07:33:5F:67:E8:BA:47:C6:4C:B7:19:2E:FA:5C:C3:82:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/323830333a663064303a3a2f33322d3634203d3e20323733393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:c9:fd:61:d6:2d:33:19:da:17:1a:62:c6:09:00:f8:c1:
         f6:61:4a:95:a3:23:73:fd:a2:1f:ca:d8:b0:74:34:a2:07:6b:
         b6:18:b2:96:b7:55:ff:10:1e:dd:61:39:0f:b1:a0:fd:f8:61:
         a4:ab:e6:10:ab:63:ea:10:35:a7:06:7b:3e:a5:2e:f0:88:34:
         e6:b5:3d:1e:e3:31:13:76:5b:af:ae:78:22:d5:57:6d:0e:07:
         df:19:3d:69:79:11:43:56:7e:03:7a:4f:b8:c0:da:50:b5:a2:
         03:12:b8:5c:42:5c:7f:c8:a6:34:c2:b3:2b:d3:26:ec:9c:a6:
         30:56:01:bc:c2:7f:bf:90:cb:c8:85:95:fa:5f:f7:f9:43:88:
         0c:0e:5b:d4:05:68:15:0a:5d:b8:54:15:18:a9:87:02:dc:b7:
         0e:91:86:f8:31:c5:c7:3f:a3:34:b6:94:ba:ad:91:06:2a:3b:
         02:1e:49:ae:80:80:14:26:10:6d:10:c5:c5:8f:80:5e:45:a4:
         f2:6c:94:62:ee:33:17:ea:1b:c8:82:d0:64:c3:81:a6:c0:a9:
         ba:e0:c8:cb:01:fd:02:88:9c:9f:c5:97:eb:f2:04:d8:4e:c5:
         73:2a:42:99:77:dd:82:60:3f:01:78:06:35:4c:00:15:55:59:
         f3:a5:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:51:40 2026 by rpki-client