Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7267F0F23E6097BBF444C1B8BC1738ADD4B400715CBD29BEE9E424898322D8D4/0/323830333a343464303a3a2f33322d3438203d3e20323734303035.roa
File:                     323830333a343464303a3a2f33322d3438203d3e20323734303035.roa (raw, json)
Hash identifier:          AUpFBAOrRD1klsLToJQaRQAor3gKWFfBbh1xa/1A/9g=
Subject key identifier:   94:42:EB:98:17:15:C9:9C:DD:2F:44:DC:B6:B0:00:A2:8A:78:2F:EE
Certificate issuer:       /CN=C57DDF4F00A20877448B327D7FAD0C60ADD7747A
Certificate serial:       696A884301BC0A4087F30E6768B8688DAEF3DED7
Authority key identifier: C5:7D:DF:4F:00:A2:08:77:44:8B:32:7D:7F:AD:0C:60:AD:D7:74:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57DDF4F00A20877448B327D7FAD0C60ADD7747A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7267F0F23E6097BBF444C1B8BC1738ADD4B400715CBD29BEE9E424898322D8D4/0/323830333a343464303a3a2f33322d3438203d3e20323734303035.roa
Signing time:             Thu 14 May 2026 17:42:33 +0000
ROA not before:           Thu 14 May 2026 17:37:33 +0000
ROA not after:            Thu 13 May 2027 17:42:33 +0000
asID:                     274005
IP address blocks:        2803:44d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7267F0F23E6097BBF444C1B8BC1738ADD4B400715CBD29BEE9E424898322D8D4/0/C57DDF4F00A20877448B327D7FAD0C60ADD7747A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7267F0F23E6097BBF444C1B8BC1738ADD4B400715CBD29BEE9E424898322D8D4/0/C57DDF4F00A20877448B327D7FAD0C60ADD7747A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57DDF4F00A20877448B327D7FAD0C60ADD7747A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Jun 2026 14:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6a:88:43:01:bc:0a:40:87:f3:0e:67:68:b8:68:8d:ae:f3:de:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57DDF4F00A20877448B327D7FAD0C60ADD7747A
        Validity
            Not Before: May 14 17:37:33 2026 GMT
            Not After : May 13 17:42:33 2027 GMT
        Subject: CN=9442EB981715C99CDD2F44DCB6B000A28A782FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:c3:94:cb:12:18:94:ba:9a:99:2d:83:b4:
                    54:4a:0e:42:8b:34:d8:a0:da:3c:d5:c7:ca:51:9c:
                    2c:c9:84:13:54:5d:ae:e5:1c:56:3e:53:af:52:f3:
                    7b:23:bf:f4:ea:e9:99:15:81:ef:9a:67:18:a5:19:
                    13:b0:48:80:1f:1a:f1:59:7d:dc:9c:2b:a6:9b:e4:
                    2b:b9:ae:eb:3a:0b:d1:c2:cf:3e:95:53:12:ed:a3:
                    6c:35:f4:66:d8:aa:dd:63:f3:13:b6:72:c9:73:91:
                    51:e0:9a:cd:7a:91:57:63:13:a8:78:da:48:40:d6:
                    f5:44:bc:00:fb:7d:b0:c8:d5:d1:07:dd:0c:9b:8e:
                    dc:d1:a9:b8:49:d1:a3:92:36:0f:96:6f:9c:02:ec:
                    e9:b8:cb:ec:48:2f:f5:81:71:3b:cf:4a:36:0b:f4:
                    7e:87:a9:41:8c:a7:af:2b:97:e9:63:63:39:c0:61:
                    16:25:ca:d6:9c:32:fb:ca:58:c8:dc:f3:31:d5:53:
                    46:83:93:c6:9f:74:85:65:80:0b:ce:d6:5e:2d:2e:
                    9d:1b:21:c5:fa:88:3e:88:2f:0b:d8:16:5e:3f:44:
                    2c:ef:71:27:0e:d1:41:59:a1:ca:1d:1e:96:16:cc:
                    46:6e:8e:db:2c:08:00:81:bd:81:19:88:00:b6:9d:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:EB:98:17:15:C9:9C:DD:2F:44:DC:B6:B0:00:A2:8A:78:2F:EE
            X509v3 Authority Key Identifier:
                keyid:C5:7D:DF:4F:00:A2:08:77:44:8B:32:7D:7F:AD:0C:60:AD:D7:74:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7267F0F23E6097BBF444C1B8BC1738ADD4B400715CBD29BEE9E424898322D8D4/0/C57DDF4F00A20877448B327D7FAD0C60ADD7747A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57DDF4F00A20877448B327D7FAD0C60ADD7747A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7267F0F23E6097BBF444C1B8BC1738ADD4B400715CBD29BEE9E424898322D8D4/0/323830333a343464303a3a2f33322d3438203d3e20323734303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:44d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:bc:c7:c2:cb:2d:7e:3f:60:a1:36:dc:31:7f:ed:27:57:
         ae:f2:c3:a1:24:e5:36:4f:97:2d:f7:25:60:8b:31:af:9f:0c:
         1d:e7:c7:b1:c0:6a:ec:7f:ac:81:fd:f0:07:a0:75:14:75:ea:
         07:85:22:ac:c0:8e:f9:f3:f2:a1:7c:4b:8e:05:2e:c4:68:48:
         d3:6b:0e:da:2c:af:53:df:98:a6:9c:4f:fc:e3:75:dd:b0:16:
         8c:40:56:bf:60:5e:32:db:13:19:3c:10:cd:3a:d1:80:5b:87:
         01:ba:f6:4d:d9:cf:31:25:10:68:41:f7:1c:3a:e1:30:48:59:
         df:38:08:62:95:bb:c0:19:4f:f6:f9:78:fd:bf:9c:65:83:7a:
         58:be:54:7c:02:a9:46:d0:24:ce:6f:27:fb:5c:8d:97:d6:e5:
         e2:45:a5:d1:cc:b1:7b:a5:ff:a8:29:47:04:60:05:a7:af:e4:
         50:1b:6c:70:84:01:58:ac:bd:4d:66:79:9e:d0:56:87:68:7f:
         07:dd:9f:da:4d:2c:7c:eb:e7:8f:1d:b7:00:c8:b7:f0:1f:c3:
         7c:1c:93:12:62:f0:39:2e:4d:26:80:f6:66:e6:91:be:a0:f6:
         fd:3a:d4:9a:90:85:be:c5:52:d0:e6:a4:cd:b4:5c:39:da:2e:
         22:14:52:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:16:43 2026 by rpki-client