Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3630303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3630303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          m8Ujm3hVgpLGdKVW6Bkwt1pzMRABQB/ufzOL5vuOnyE=
Subject key identifier:   66:23:7A:EF:81:E6:B7:CC:14:61:4E:3E:E0:B7:35:6D:6F:B8:89:2E
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       411C723E051ACDDDF1D1F5F34455BE22D87664EC
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3630303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 30 Apr 2026 04:40:20 +0000
ROA not before:           Thu 30 Apr 2026 04:35:20 +0000
ROA not after:            Thu 29 Apr 2027 04:40:20 +0000
asID:                     273858
IP address blocks:        2803:3550:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1c:72:3e:05:1a:cd:dd:f1:d1:f5:f3:44:55:be:22:d8:76:64:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Apr 30 04:35:20 2026 GMT
            Not After : Apr 29 04:40:20 2027 GMT
        Subject: CN=66237AEF81E6B7CC14614E3EE0B7356D6FB8892E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:2b:87:bc:2f:85:71:87:bf:07:ce:d1:9d:
                    c4:66:0c:46:83:53:43:2a:69:01:59:2b:f3:3a:a7:
                    a4:9b:f8:57:73:90:b2:e8:df:81:a1:08:a2:47:cf:
                    e0:c2:c7:fa:41:a2:7b:83:5d:fc:0d:05:fe:bb:9f:
                    22:dc:b9:f3:e9:26:76:89:3a:b1:07:6c:b0:0a:b2:
                    19:37:ac:0e:ab:e2:42:a4:fb:0f:ed:e2:49:9d:e8:
                    d7:22:be:66:cc:6c:52:2b:ed:2d:06:1e:00:07:a3:
                    2a:dc:d9:a5:f9:42:6b:61:a7:f6:eb:37:b9:0c:6e:
                    6b:09:eb:3d:04:88:7d:51:3c:c1:a6:9c:bb:73:58:
                    39:77:62:f5:a1:b7:65:cd:0b:93:df:b0:95:9d:8a:
                    84:2d:a7:a5:69:d1:f5:29:23:51:f9:47:fa:c8:75:
                    06:33:1c:8c:f6:76:02:0e:ae:e9:e8:8c:86:85:a8:
                    4a:0d:e3:61:e2:e7:83:8f:91:e2:09:50:51:4f:9f:
                    73:ee:55:1d:91:b1:7e:a6:1c:12:1b:6a:a8:b3:9d:
                    cc:e1:81:1f:a6:f0:a2:78:fd:d7:4a:4a:5c:6d:74:
                    ed:5b:0c:58:0f:52:cd:06:fd:aa:fd:f2:0a:b9:38:
                    45:90:bc:0a:e6:54:9a:88:8d:ee:bc:8a:e2:eb:fb:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:23:7A:EF:81:E6:B7:CC:14:61:4E:3E:E0:B7:35:6D:6F:B8:89:2E
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3630303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         da:b6:2c:c0:02:a6:6f:61:ae:7c:57:af:87:f1:ed:90:5b:5a:
         20:00:b4:74:be:db:a8:ba:fa:e0:07:0f:bc:af:df:5b:8d:9b:
         7a:c7:18:0f:8d:fa:23:45:eb:d7:1b:58:88:df:8f:3d:91:8e:
         25:31:16:22:fb:c2:64:a7:18:be:84:7b:7d:c7:df:b7:8f:8b:
         3a:c5:82:50:e0:e2:ee:77:fe:ca:db:4f:aa:32:ed:1f:f6:f7:
         be:fd:80:b6:e6:22:71:8d:45:03:75:a7:4f:a9:56:34:3b:0e:
         ea:54:48:f5:3a:a5:ba:47:29:98:3e:5b:3c:03:d2:06:30:e1:
         b5:f0:ec:18:d6:4a:46:1a:24:a1:39:b0:f7:82:e0:c9:9e:ff:
         91:10:56:bd:67:75:2a:da:1f:e4:e1:09:00:be:c8:eb:9d:c0:
         35:19:a3:8a:05:02:21:e5:dd:8e:3a:1b:bf:64:6c:c5:d0:ac:
         d6:2a:61:dc:25:cd:a7:ff:c1:02:da:ac:73:71:a4:38:92:03:
         d3:35:2f:26:1a:45:49:d8:2d:fa:73:f4:d3:95:47:80:7b:b5:
         9a:35:bb:94:f8:d0:0e:4a:07:1a:b9:86:ec:91:3c:f5:34:8b:
         31:d2:90:45:fa:2f:15:4c:83:a5:55:0a:f0:ff:c3:23:29:86:
         d5:fe:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:35:06 2026 by rpki-client