Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa
File:                     323830333a326135303a3a2f33322d3332203d3e20323733313830.roa (raw, json)
Hash identifier:          A/NuQx7FcXOVbKUXuNcPmY3G2DIQtqwiK+TTsI3aPQg=
Subject key identifier:   70:21:FD:22:09:EB:09:B6:CD:FA:97:89:0E:F1:F6:00:D6:E0:7D:78
Certificate issuer:       /CN=45036BDB7E22AA4777363E0285556F756CC67A52
Certificate serial:       3B138796A022A27C2F02FEA2AB1893C160F58065
Authority key identifier: 45:03:6B:DB:7E:22:AA:47:77:36:3E:02:85:55:6F:75:6C:C6:7A:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa
Signing time:             Mon 25 May 2026 18:44:04 +0000
ROA not before:           Mon 25 May 2026 18:39:04 +0000
ROA not after:            Mon 24 May 2027 18:44:04 +0000
asID:                     273180
IP address blocks:        2803:2a50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:13:87:96:a0:22:a2:7c:2f:02:fe:a2:ab:18:93:c1:60:f5:80:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45036BDB7E22AA4777363E0285556F756CC67A52
        Validity
            Not Before: May 25 18:39:04 2026 GMT
            Not After : May 24 18:44:04 2027 GMT
        Subject: CN=7021FD2209EB09B6CDFA97890EF1F600D6E07D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:9d:18:c0:69:58:68:18:9a:68:ba:10:35:
                    a1:5b:b9:f2:6b:f7:af:eb:59:6b:0a:8c:56:77:47:
                    f1:b8:ec:af:c8:a7:ad:b3:61:cd:a2:06:94:be:3b:
                    3b:e7:bd:eb:10:32:60:2b:09:35:4c:b5:42:7c:af:
                    b6:b6:99:53:5d:f9:5a:d5:67:93:4c:39:5e:f7:d6:
                    c5:3e:fb:ca:43:3a:24:ab:60:e7:6d:72:b9:5d:05:
                    69:7e:1e:7e:d1:7b:92:83:73:22:8e:2d:46:18:ff:
                    16:d9:80:a9:35:d7:d5:0a:7f:85:99:70:a5:12:8e:
                    e2:0a:1e:13:d7:41:51:2d:4d:ad:7e:55:16:e6:af:
                    60:10:29:dc:66:77:03:b7:22:f6:ea:40:f1:7a:4e:
                    cb:31:32:c5:b9:ef:de:e6:a1:82:cd:bb:2f:16:08:
                    e1:0c:82:d3:4c:25:7b:39:67:40:57:c7:f2:56:fb:
                    34:f7:c6:88:9c:5d:85:5c:34:78:e9:44:6d:2e:bb:
                    68:da:10:b2:1b:f4:4e:68:fa:13:97:50:25:86:db:
                    d5:0e:c7:72:7c:f6:50:35:d4:88:e4:0d:9a:a1:e8:
                    57:af:c4:06:6a:07:89:7d:03:07:c9:75:aa:17:c6:
                    8b:3e:30:d8:96:39:ad:e5:af:6b:4a:dc:c5:29:c8:
                    cc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:FD:22:09:EB:09:B6:CD:FA:97:89:0E:F1:F6:00:D6:E0:7D:78
            X509v3 Authority Key Identifier:
                keyid:45:03:6B:DB:7E:22:AA:47:77:36:3E:02:85:55:6F:75:6C:C6:7A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:56:3f:78:01:6b:46:0e:ca:94:e2:cd:7a:2b:98:88:9e:
         23:ed:12:de:86:20:7d:24:55:42:d5:db:16:49:72:bc:4a:83:
         f1:7b:ca:38:cb:0d:05:6c:e2:7b:a3:e1:cd:73:73:14:83:fe:
         97:8f:fa:f8:b0:4b:6b:14:43:de:28:4a:39:0e:3b:10:42:56:
         73:2f:d1:31:7b:42:d2:18:f8:b9:c0:83:dc:e2:7c:8e:23:20:
         38:5c:ca:88:7f:d9:72:62:96:e4:61:c8:04:fe:94:b2:24:c6:
         b8:2f:38:ac:42:98:ed:40:f2:53:fc:57:e3:81:34:5c:8e:cb:
         fe:a9:dd:49:f4:d5:08:6a:8d:72:c9:3e:c3:ff:99:2e:07:72:
         9f:78:45:db:b5:9a:6c:17:b1:03:66:3e:ff:aa:ad:de:25:51:
         c2:ed:38:59:1c:4d:ef:82:ce:f1:f5:b9:89:15:8f:94:99:62:
         69:e3:a7:35:11:2b:fc:e4:f8:e9:e4:e6:78:56:dc:26:8e:41:
         c3:84:df:78:ef:6b:21:f6:ab:0c:46:a7:f8:12:19:9f:8c:57:
         36:b9:cd:5f:91:2b:00:98:e0:17:89:17:0a:b1:00:6c:38:fe:
         83:82:7f:3f:55:69:22:1e:09:83:4b:ef:2a:eb:e1:14:a5:64:
         58:1a:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:36:55 2026 by rpki-client