Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3530303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3530303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          HqTblRN62eNQz2tHsVu9XNQ8CeOqjoz0M3eS2pFMyq4=
Subject key identifier:   4C:11:7D:ED:AA:95:40:63:98:D9:F0:26:93:CD:EA:E2:F6:2A:37:E9
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       0584B1B8568363089C2C608E21B0FB1528974BFE
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3530303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 30 Apr 2026 04:40:21 +0000
ROA not before:           Thu 30 Apr 2026 04:35:21 +0000
ROA not after:            Thu 29 Apr 2027 04:40:21 +0000
asID:                     273858
IP address blocks:        2803:3550:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:84:b1:b8:56:83:63:08:9c:2c:60:8e:21:b0:fb:15:28:97:4b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Apr 30 04:35:21 2026 GMT
            Not After : Apr 29 04:40:21 2027 GMT
        Subject: CN=4C117DEDAA95406398D9F02693CDEAE2F62A37E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:43:fb:f0:2f:34:69:16:96:9d:ea:6b:35:
                    8b:ba:bf:72:f8:a7:b2:b9:80:57:f4:ae:bd:b3:9e:
                    f1:3d:4a:7b:a6:99:d9:55:4e:d1:c3:e6:b3:31:18:
                    62:72:87:d6:24:44:2c:4d:16:b0:97:04:d6:21:92:
                    de:0b:ad:9a:81:b6:cf:1d:f2:21:cc:0d:64:33:28:
                    57:6d:df:80:ae:f6:d9:1d:b5:ab:af:67:fa:d7:31:
                    74:ba:0f:61:0a:80:1f:87:ce:e3:4a:2a:95:73:9d:
                    b0:7c:ed:f3:ce:60:2e:42:c6:48:f6:0a:42:ba:68:
                    69:38:61:46:d1:ce:bb:e9:36:32:40:00:95:53:cb:
                    36:83:6d:e9:60:8a:d7:8a:05:6a:20:43:07:a5:e7:
                    31:8e:79:10:ae:01:f0:f5:5c:62:22:3e:e4:ee:9b:
                    aa:1a:a9:81:8e:44:7e:2a:ea:41:1a:1e:80:51:57:
                    e6:cc:9b:02:c4:63:1c:5a:53:ec:2f:4b:12:8c:0f:
                    1a:44:2c:41:a1:ea:99:76:bb:01:12:8d:4d:02:b1:
                    ff:bf:42:de:81:a2:2a:ba:ea:2e:08:53:fc:89:87:
                    4a:fa:3a:be:27:67:b2:1f:21:0b:0d:dd:77:dd:cc:
                    1d:99:f0:e4:04:b7:47:57:32:14:06:9b:fe:ed:16:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:11:7D:ED:AA:95:40:63:98:D9:F0:26:93:CD:EA:E2:F6:2A:37:E9
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3530303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:3b:bb:67:8b:ec:10:c4:e5:d4:63:cd:62:5d:40:07:19:c2:
         d7:2f:3a:08:3d:54:1a:17:00:b1:39:e5:f4:4f:b7:66:a0:d4:
         c4:e7:c9:b4:0f:1c:52:c5:b3:70:cc:0e:26:08:00:12:04:24:
         2c:93:11:82:e6:71:ef:c3:cd:68:dc:2a:7b:d6:d0:68:2f:3e:
         9f:40:22:67:4f:36:96:6d:dc:1d:7b:12:82:40:7b:93:d6:b7:
         67:48:74:e6:eb:e8:8f:11:60:bf:1b:06:a8:b7:93:10:5c:f5:
         5c:c1:84:29:aa:c5:ef:00:c5:b3:85:65:55:f1:8c:bd:86:16:
         fc:60:36:5c:cf:57:92:28:49:4a:4f:e3:13:74:8b:be:56:ff:
         d9:a4:2a:b0:bc:da:c5:b4:3a:59:86:b4:74:18:ba:c8:36:ce:
         1e:1a:5e:22:93:04:a6:66:b4:97:4a:a5:63:e1:a5:37:f6:f0:
         9d:c2:5d:10:68:7c:b9:a1:80:c1:9d:e7:7c:51:90:f4:a4:49:
         cc:d8:75:e0:2a:57:25:1c:cd:71:56:b6:cc:8c:e2:d0:cb:7f:
         59:01:6b:ea:08:65:bb:80:96:21:6c:38:bf:21:ca:18:eb:6b:
         41:10:2b:61:29:eb:58:ad:ab:f6:c2:17:f8:f7:ba:69:00:6c:
         e7:2d:0f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:34:23 2026 by rpki-client