Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/323830333a313233303a3a2f33322d3334203d3e20323732383835.roa
File:                     323830333a313233303a3a2f33322d3334203d3e20323732383835.roa (raw, json)
Hash identifier:          GHqYsBW/jVzPQHPlq1j/wrG6y0zBJQIbzKNaTIqrXEc=
Subject key identifier:   13:DD:26:83:DB:AC:C7:F2:41:B9:96:72:0E:BD:29:B0:AE:F4:CC:A8
Certificate issuer:       /CN=4D589E119E93073CAED797C92FC4BDE3B8AE4D9E
Certificate serial:       721A25190706A5B6684DCE31B13BF6F8740ABC2A
Authority key identifier: 4D:58:9E:11:9E:93:07:3C:AE:D7:97:C9:2F:C4:BD:E3:B8:AE:4D:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/323830333a313233303a3a2f33322d3334203d3e20323732383835.roa
Signing time:             Wed 11 Mar 2026 15:25:00 +0000
ROA not before:           Wed 11 Mar 2026 15:20:00 +0000
ROA not after:            Wed 10 Mar 2027 15:25:00 +0000
asID:                     272885
IP address blocks:        2803:1230::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1a:25:19:07:06:a5:b6:68:4d:ce:31:b1:3b:f6:f8:74:0a:bc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D589E119E93073CAED797C92FC4BDE3B8AE4D9E
        Validity
            Not Before: Mar 11 15:20:00 2026 GMT
            Not After : Mar 10 15:25:00 2027 GMT
        Subject: CN=13DD2683DBACC7F241B996720EBD29B0AEF4CCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:1f:8a:a0:92:27:6b:f9:a0:4b:2c:4d:fd:
                    a7:b0:33:ad:94:f0:78:54:73:0f:55:52:79:18:87:
                    2c:23:c7:29:f1:5e:3d:6d:3e:a4:83:ea:c9:7b:f1:
                    9e:be:e5:20:d6:2f:12:88:81:7c:7f:5f:d2:af:f3:
                    0b:dc:e6:51:2e:5e:00:dc:c5:b2:80:3b:86:aa:9e:
                    c4:57:4a:a2:cb:37:20:4a:b9:4c:ae:8f:e5:0d:f6:
                    f8:a7:4d:fa:0f:54:2a:a4:9f:55:5b:f6:17:e6:d3:
                    70:cd:56:bc:68:7e:b3:44:0d:88:1e:f9:3e:31:e0:
                    50:e8:5e:b7:ff:b0:c7:b1:68:8d:10:ce:72:1d:55:
                    b4:77:5f:eb:50:22:88:5a:31:95:47:80:6e:6f:a7:
                    f5:23:73:09:e6:a3:e4:69:6d:68:d5:c5:10:37:11:
                    86:c6:43:3e:1b:35:c6:aa:94:52:41:a9:c7:9d:63:
                    98:9d:58:77:ef:9d:a1:8c:4d:98:45:b5:98:34:5c:
                    bb:c8:d2:3a:db:95:48:e5:a0:51:e4:a3:b7:70:2e:
                    36:4b:35:a0:00:a2:56:93:dc:04:84:f9:9d:d5:41:
                    fc:e9:8f:27:34:92:8b:e1:a1:0a:5a:93:ea:b1:ff:
                    7c:97:0a:7b:05:db:e1:f3:b9:9c:52:b9:82:ba:b8:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DD:26:83:DB:AC:C7:F2:41:B9:96:72:0E:BD:29:B0:AE:F4:CC:A8
            X509v3 Authority Key Identifier:
                keyid:4D:58:9E:11:9E:93:07:3C:AE:D7:97:C9:2F:C4:BD:E3:B8:AE:4D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/323830333a313233303a3a2f33322d3334203d3e20323732383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1230::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:58:d3:32:36:ba:91:72:68:e0:49:1d:8f:a0:91:54:c9:f8:
         df:ec:81:60:6d:93:53:fb:21:f0:53:03:aa:57:84:e3:76:60:
         de:96:c2:7b:03:7a:8e:ac:8e:23:99:bb:06:d4:43:98:68:55:
         79:be:4c:f0:83:3e:08:31:3a:bf:b9:95:79:ea:d7:65:50:ec:
         59:07:4d:5a:5c:32:e5:18:37:a6:55:b6:ce:23:7b:ae:95:44:
         03:b3:a8:c8:6f:67:ab:26:c1:8b:51:be:63:b7:30:3f:a5:0d:
         b5:14:e3:9e:b1:c8:7f:95:52:fa:9c:24:6c:3a:74:cb:3b:87:
         49:0d:88:d9:fe:c1:a3:25:b4:e7:6c:db:fe:c0:cb:b3:35:af:
         7c:02:53:8b:46:45:0c:db:8b:86:42:51:0a:36:e1:f7:4b:0d:
         25:5a:38:29:f1:59:91:5e:2a:ce:32:6b:c9:af:98:69:23:a2:
         a4:d7:31:01:7c:85:47:16:7a:b0:03:be:25:92:0d:c7:1d:20:
         78:41:96:84:93:74:b2:3b:a7:a2:70:37:4f:6e:53:db:32:0d:
         2f:9c:ba:e3:12:ab:70:7c:87:70:23:c3:f2:6f:42:95:a3:a5:
         aa:be:9a:d6:ea:59:68:4e:7d:33:d3:e2:2e:6d:86:b2:a8:ec:
         ea:dd:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 15:40:35 2026 by rpki-client