Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/323830333a373035303a3430323a3a2f34382d3438203d3e20323733313332.roa
File:                     323830333a373035303a3430323a3a2f34382d3438203d3e20323733313332.roa (raw, json)
Hash identifier:          7UV3gBnftQhmLs5a66FEarj1QLJeH3R0IGZc0qsblGc=
Subject key identifier:   DA:BD:BD:69:49:ED:2B:55:D6:2D:3A:A1:96:7B:1B:E1:FD:26:50:6A
Certificate issuer:       /CN=E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD
Certificate serial:       2DFF9A9EDECE1CFAEF8D4E4D43850F82F23AF88A
Authority key identifier: E1:E4:22:82:BE:74:0A:42:DA:7F:F3:B6:6D:83:D1:A5:E6:A5:C4:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/323830333a373035303a3430323a3a2f34382d3438203d3e20323733313332.roa
Signing time:             Fri 24 Apr 2026 20:00:00 +0000
ROA not before:           Fri 24 Apr 2026 19:55:00 +0000
ROA not after:            Fri 23 Apr 2027 20:00:00 +0000
asID:                     273132
IP address blocks:        2803:7050:402::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 18:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ff:9a:9e:de:ce:1c:fa:ef:8d:4e:4d:43:85:0f:82:f2:3a:f8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD
        Validity
            Not Before: Apr 24 19:55:00 2026 GMT
            Not After : Apr 23 20:00:00 2027 GMT
        Subject: CN=DABDBD6949ED2B55D62D3AA1967B1BE1FD26506A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:8f:5b:fe:6d:63:75:37:8d:75:2b:47:b4:
                    ca:ec:e4:83:8e:75:a6:ab:a7:30:04:0b:0a:10:7d:
                    53:08:10:01:6e:60:d5:82:ce:69:1b:d3:3d:43:52:
                    7e:c3:b7:fd:a9:de:86:f2:72:77:13:be:f9:e8:38:
                    f6:86:4a:7f:86:37:4d:54:c6:5b:2d:57:6e:ff:95:
                    4d:81:32:7b:4a:d1:5b:30:12:d7:3e:d5:4a:33:f4:
                    97:dc:03:88:40:71:ed:b1:a4:3b:e6:66:7b:b4:76:
                    33:6c:65:86:e2:f7:52:37:ce:cc:97:c0:ac:4c:e1:
                    60:e8:f6:d7:18:b8:7c:90:7e:7f:e4:7d:8c:2f:3a:
                    b6:27:4a:c1:79:61:db:23:46:0c:ee:eb:e6:53:41:
                    9e:a9:1f:23:64:c2:48:51:0a:ad:7e:ec:20:d6:97:
                    46:32:8d:be:a4:e8:ae:e2:da:d1:93:69:23:b4:d0:
                    f7:f0:53:25:44:79:d6:a2:75:19:47:05:88:da:05:
                    db:93:ad:c9:dd:7f:39:21:d1:f8:ba:e8:4d:fc:cc:
                    88:8c:4c:1e:8c:97:a8:f1:2d:a0:33:d6:65:f4:66:
                    98:83:f7:0e:b1:de:38:27:5e:92:b7:62:46:1d:54:
                    21:71:32:22:5f:10:81:4d:19:c0:19:63:d7:b8:be:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BD:BD:69:49:ED:2B:55:D6:2D:3A:A1:96:7B:1B:E1:FD:26:50:6A
            X509v3 Authority Key Identifier:
                keyid:E1:E4:22:82:BE:74:0A:42:DA:7F:F3:B6:6D:83:D1:A5:E6:A5:C4:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/323830333a373035303a3430323a3a2f34382d3438203d3e20323733313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7050:402::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:42:6b:03:e0:fb:0a:9e:47:46:d1:b4:97:a6:81:82:3d:
         32:f8:8a:97:39:35:7b:b8:1a:4d:6d:3a:3e:94:00:f7:3f:7c:
         8d:e8:53:52:d3:fb:91:14:9d:3d:3d:cd:f3:ff:57:2a:55:47:
         19:9c:1d:07:33:ba:6d:ce:be:f6:93:8f:40:7e:f6:b6:b6:32:
         26:aa:6f:fe:5d:c2:7b:f4:74:96:c9:3b:6f:15:60:79:40:a5:
         e1:f3:19:3d:f3:94:e9:77:b4:c7:b3:93:a2:29:af:a8:9f:70:
         26:42:18:d6:21:a3:16:89:ee:37:d7:4a:de:06:0b:a7:6a:15:
         34:dd:ab:56:84:25:c3:90:57:42:92:a2:bc:bd:b1:16:23:8a:
         5d:df:0a:a8:09:46:d4:df:7d:16:c2:84:29:8e:33:59:3f:c1:
         d3:5a:f4:88:6c:f4:b1:fc:a0:48:5e:6e:24:a1:02:19:3a:78:
         13:52:74:2d:c3:5d:cb:c7:1c:93:2f:f8:f1:9e:a9:b9:f0:c3:
         6e:2d:2e:b5:73:28:de:90:13:c1:91:cb:7b:74:11:6c:00:d6:
         6c:97:b8:79:bb:30:b2:6e:41:99:16:cf:a4:06:cc:9e:2d:ed:
         60:02:1e:f3:a8:c4:0b:73:97:ec:6d:cc:68:e1:bf:d9:7c:ac:
         5d:8e:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:43:42 2026 by rpki-client