Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830333a376535303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          TGdG5HljJfmjkxI+0a7YWqOZ0vwzQoshjDp47s9OrD4=
Subject key identifier:   82:F3:9D:E9:96:4C:80:61:2C:F6:16:BC:28:CB:FF:8B:4F:AB:C7:83
Certificate issuer:       /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
Certificate serial:       254D499D0FA4B66E6DB9C0A33836306F021721F6
Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Tue 23 Jun 2026 17:49:07 +0000
ROA not before:           Tue 23 Jun 2026 17:44:07 +0000
ROA not after:            Tue 22 Jun 2027 17:49:07 +0000
asID:                     262589
IP address blocks:        2803:7e50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 Jul 2026 06:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4d:49:9d:0f:a4:b6:6e:6d:b9:c0:a3:38:36:30:6f:02:17:21:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
        Validity
            Not Before: Jun 23 17:44:07 2026 GMT
            Not After : Jun 22 17:49:07 2027 GMT
        Subject: CN=82F39DE9964C80612CF616BC28CBFF8B4FABC783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:f5:9c:44:26:a4:7d:30:8d:c6:12:20:e5:
                    2b:8a:d1:f0:8d:7b:ad:63:41:0d:f4:5b:66:7b:30:
                    0d:b4:64:26:05:9c:35:42:f3:b4:2d:04:cd:ce:6a:
                    56:c0:ca:de:9a:88:9a:3a:d9:f0:10:9f:b2:3b:f0:
                    67:54:88:ff:b9:96:6a:f2:17:60:47:48:02:9e:bb:
                    5c:e7:7d:6e:02:5a:9c:9d:f7:9a:5b:da:5e:7e:73:
                    28:a6:af:7a:97:88:eb:2d:f6:af:5c:af:c8:73:6b:
                    1b:ee:ec:05:84:5e:a0:4b:b4:9c:b6:b2:ff:13:5c:
                    c0:87:d5:dd:bb:fe:50:3d:4e:79:33:93:8e:c2:b4:
                    1c:1d:15:c8:c9:a5:ef:03:07:9c:12:b9:e3:28:8a:
                    79:ae:31:1d:86:70:85:c3:e5:ba:63:36:70:1b:c6:
                    b6:33:8a:10:fc:1b:b8:0d:62:48:65:64:8b:76:31:
                    e2:71:27:a9:9f:45:38:08:07:14:7a:c1:77:97:df:
                    f4:29:4d:68:48:2e:55:46:77:00:b9:af:c7:1f:f0:
                    2a:70:fa:ad:2a:2b:a5:63:7c:1c:2e:8f:20:e1:4d:
                    7f:dd:0c:ec:79:d3:16:c0:d8:b2:6d:e3:44:9f:d6:
                    70:08:2c:62:11:73:77:aa:45:5d:99:e3:55:26:59:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F3:9D:E9:96:4C:80:61:2C:F6:16:BC:28:CB:FF:8B:4F:AB:C7:83
            X509v3 Authority Key Identifier:
                keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:ed:57:d2:1a:68:18:db:99:43:75:3b:d9:97:3e:32:60:05:
         b8:2d:1f:61:f5:c1:d7:17:62:74:b3:07:71:74:70:5c:09:16:
         de:b6:28:e3:26:8a:a7:30:4f:ca:59:30:d7:3b:2b:c1:26:ec:
         bd:0f:c8:31:1b:90:de:6f:54:2d:f5:25:e6:cd:86:49:a1:a5:
         20:14:48:0d:2f:76:62:72:83:e4:55:6b:d1:84:09:65:87:51:
         69:0b:97:2a:b9:b6:69:a5:63:06:f8:12:b8:81:4a:0b:f7:67:
         8b:26:45:e1:a3:be:9d:4d:c7:dd:a7:30:a9:b6:42:2f:1c:fe:
         8d:a6:94:dc:40:80:be:c0:40:26:5a:74:d7:a2:e2:53:40:f7:
         a0:17:2c:3c:f8:62:df:13:9d:42:bd:d6:2d:ed:dd:94:ca:a1:
         b6:e0:75:29:63:72:83:1f:e9:71:42:c4:5c:2c:41:4d:c2:a0:
         d8:47:0e:12:ae:0b:1b:6d:c8:4d:f9:b1:0e:d5:64:b0:90:b2:
         30:08:3d:9c:72:42:67:fd:6e:cc:07:f3:eb:b8:a8:49:3e:a5:
         fb:ba:b5:89:9a:0d:1a:14:49:5b:54:d4:6f:3e:5e:e2:17:1a:
         09:64:85:05:cf:f3:77:06:3f:6f:69:8f:c8:6b:b3:6c:62:0e:
         18:60:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:56:44 2026 by rpki-client