Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/323830333a363130303a3a2f33322d3438203d3e20323632323539.roa
File:                     323830333a363130303a3a2f33322d3438203d3e20323632323539.roa (raw, json)
Hash identifier:          XMSa1VZ7NcRJVvTjOtPCFTRO48/kXoIRr93tplXUQQA=
Subject key identifier:   67:12:36:22:C9:DB:41:00:2F:20:7A:12:A7:F9:E4:CC:F9:35:87:74
Certificate issuer:       /CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
Certificate serial:       40C2105BBF256A34B0DF32697B1A393EA8CD2CE5
Authority key identifier: D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/323830333a363130303a3a2f33322d3438203d3e20323632323539.roa
Signing time:             Mon 01 Jun 2026 17:44:53 +0000
ROA not before:           Mon 01 Jun 2026 17:39:53 +0000
ROA not after:            Mon 31 May 2027 17:44:53 +0000
asID:                     262259
IP address blocks:        2803:6100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c2:10:5b:bf:25:6a:34:b0:df:32:69:7b:1a:39:3e:a8:cd:2c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
        Validity
            Not Before: Jun  1 17:39:53 2026 GMT
            Not After : May 31 17:44:53 2027 GMT
        Subject: CN=67123622C9DB41002F207A12A7F9E4CCF9358774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:26:df:f2:a7:77:6d:50:bf:1b:7a:cf:92:
                    40:cc:7d:c0:38:67:fb:e5:89:9d:ca:48:5a:37:1a:
                    ec:a4:99:31:f0:c7:ef:3e:38:f9:42:c6:70:53:a7:
                    4b:12:43:05:b9:a5:a5:5b:f8:9d:a2:f1:ff:9f:b1:
                    a4:16:5f:29:c6:25:93:f7:93:63:d3:eb:ea:f7:5b:
                    1a:a4:8a:0b:76:38:0c:2d:4b:bf:be:46:bd:6e:c2:
                    30:79:de:a6:68:13:1f:6e:de:04:ac:9c:73:1c:cf:
                    aa:59:4e:14:95:a3:f6:4f:1b:4f:cf:50:9a:44:fd:
                    b3:dd:6c:a6:9b:77:d4:c7:7e:69:5c:82:0e:ab:ae:
                    a5:20:7d:7e:84:36:15:85:5c:eb:6d:84:06:dc:60:
                    e2:36:01:80:2a:97:b1:a3:92:0c:3d:7d:6a:41:fd:
                    0d:aa:a7:32:8e:8b:73:2a:d0:09:ac:40:3f:46:2f:
                    75:45:7c:cd:98:cc:5a:a3:69:cd:bd:db:3b:b5:4c:
                    f4:60:c7:24:e8:22:4a:78:bb:28:57:06:dc:e7:62:
                    d9:c7:6c:ac:c4:d6:e1:a2:a1:df:26:7a:4a:c8:35:
                    e1:12:90:ca:7d:03:17:7b:75:df:0a:c1:ff:c3:a2:
                    04:97:65:cc:08:ad:5f:f6:0d:df:f9:de:c0:8b:35:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:36:22:C9:DB:41:00:2F:20:7A:12:A7:F9:E4:CC:F9:35:87:74
            X509v3 Authority Key Identifier:
                keyid:D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/323830333a363130303a3a2f33322d3438203d3e20323632323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6100::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:2f:fd:1f:07:0a:76:a0:19:62:65:85:79:f9:c7:56:95:84:
         28:2a:fc:18:6a:24:7d:85:b9:03:78:d8:55:3a:4a:b1:c8:1c:
         39:48:70:be:e7:cd:aa:f3:86:f6:7b:1b:55:44:a0:db:1a:59:
         df:7c:90:cc:d5:e8:b2:11:c4:e4:c8:2d:1c:a9:7d:f1:cf:58:
         88:c3:5f:6b:d7:19:87:d8:8b:90:49:12:f9:78:f8:e2:1e:9b:
         f7:dc:6d:1c:49:af:7c:72:c8:47:5a:e4:bd:c4:9e:67:3b:b5:
         f4:6c:f2:c7:d4:c1:a9:39:6a:f7:ac:ba:44:0c:b8:20:da:a9:
         c8:90:c5:a7:4c:7c:6d:45:60:33:7b:99:c4:f5:6f:2f:ab:53:
         10:9f:89:12:fa:d9:3c:0f:10:cd:02:5d:22:33:fa:3d:9b:b6:
         15:ed:11:be:b6:5b:19:a6:18:b3:05:02:f8:75:4e:d5:66:c7:
         65:64:07:41:a7:38:e5:69:2e:10:4d:e2:38:8c:80:cf:1a:1d:
         e5:64:e0:ed:cb:54:bc:e3:1f:20:26:1d:39:49:be:91:9e:84:
         ec:5a:2b:82:05:99:82:c2:cd:66:8f:00:fc:95:52:07:a4:77:
         8f:c6:8b:47:fe:74:5e:ad:e8:54:2c:98:93:4d:38:a6:19:ee:
         d9:24:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:09:28 2026 by rpki-client