Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353033323a3a2f34382d3438203d3e203532343339.roa
File:                     323830333a636436303a353033323a3a2f34382d3438203d3e203532343339.roa (raw, json)
Hash identifier:          kCrK+iZeceeWqPteJ0iAFsv2zi6pnspF+UqlpZxFkys=
Subject key identifier:   30:59:F9:92:B0:7A:DD:55:06:94:C8:88:CB:67:F3:0E:EE:C4:CF:7A
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       053EF3AF63935B712B3FACDE09C1771E945E30B2
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353033323a3a2f34382d3438203d3e203532343339.roa
Signing time:             Tue 28 Apr 2026 02:10:00 +0000
ROA not before:           Tue 28 Apr 2026 02:05:00 +0000
ROA not after:            Tue 27 Apr 2027 02:10:00 +0000
asID:                     52439
IP address blocks:        2803:cd60:5032::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3e:f3:af:63:93:5b:71:2b:3f:ac:de:09:c1:77:1e:94:5e:30:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Apr 28 02:05:00 2026 GMT
            Not After : Apr 27 02:10:00 2027 GMT
        Subject: CN=3059F992B07ADD550694C888CB67F30EEEC4CF7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:95:ca:b6:e5:3f:af:5e:94:7b:aa:db:49:ca:
                    bc:59:ec:73:31:b0:62:2d:93:a0:29:8e:dc:cb:08:
                    52:cc:f7:5e:62:3b:dd:bf:a4:5f:f7:4a:6b:78:93:
                    55:3e:56:dd:51:ad:ca:ba:fa:63:48:55:c1:e0:aa:
                    c9:77:37:96:0e:7d:da:82:2c:7c:55:d7:72:e4:4e:
                    0b:c7:10:96:3a:1f:78:ed:08:d4:6d:d7:aa:84:85:
                    4b:38:c0:9a:e6:ae:b9:70:bc:3e:5b:a6:de:d2:2b:
                    89:18:1f:24:55:dc:4c:08:1a:e3:09:b7:05:35:e3:
                    2d:29:7d:b9:01:99:3d:6f:24:89:df:59:68:0e:fb:
                    32:34:d8:60:6c:70:63:15:dc:9a:6e:cc:e5:6b:ef:
                    c0:36:bb:97:84:35:7b:0d:a6:f7:66:70:58:8f:bd:
                    83:ec:fa:1a:44:22:e9:40:90:9c:25:d0:ec:7d:14:
                    6f:70:b4:8f:fc:08:94:b2:a1:a8:e5:a8:8c:73:e7:
                    d9:cb:3c:25:ee:e4:b3:c6:e0:b8:29:f1:00:1b:96:
                    45:c5:1c:8d:55:c5:5b:4d:56:10:8d:8c:d5:db:0d:
                    5f:f3:8f:be:fb:2a:66:fe:37:c8:5c:c5:6c:21:bf:
                    63:ed:fc:8d:bf:5f:c6:4b:ce:f5:1e:82:3a:e3:44:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:59:F9:92:B0:7A:DD:55:06:94:C8:88:CB:67:F3:0E:EE:C4:CF:7A
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353033323a3a2f34382d3438203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60:5032::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:13:ce:37:01:c5:ff:d3:36:8c:fd:69:fa:66:d3:76:bc:bd:
         a6:03:28:0e:58:59:fa:c7:e3:43:af:fa:54:e6:e2:c9:b3:ae:
         ac:46:66:fb:8b:4a:92:1a:e8:5e:40:bb:fe:b4:d1:ef:23:00:
         f5:02:e7:66:5b:64:0a:87:e9:37:50:8a:6b:d2:73:d4:91:98:
         b0:9c:a2:94:19:75:39:1b:79:5b:ca:af:e5:93:56:30:d6:68:
         24:d4:f9:73:7a:66:e3:f0:20:a9:50:c4:2b:e3:44:aa:32:65:
         b7:61:74:f0:82:57:01:ae:69:92:69:1e:78:df:57:c7:00:51:
         e1:d7:02:eb:e8:be:7f:3a:2f:b3:23:66:06:fe:55:dc:3f:fe:
         e9:38:57:9d:9d:fa:fd:84:3e:45:07:75:f9:3e:67:cc:f0:a8:
         7a:06:75:5a:32:7e:14:23:ed:0d:01:f1:32:78:cb:fd:63:1e:
         b0:86:7c:83:8a:d3:9d:13:60:18:12:06:4d:17:45:12:19:6c:
         8b:3a:09:11:95:c1:e4:af:84:79:62:dd:f1:65:8c:9c:f0:1d:
         28:e3:eb:1c:bb:af:6a:42:ca:25:60:c9:ef:0f:49:22:ea:1c:
         4a:a1:25:5e:51:0c:60:7f:84:da:e5:d2:80:d1:c1:3c:26:78:
         1b:f3:f3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:44:48 2026 by rpki-client