Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/323830333a646332303a313030303a3a2f34302d3430203d3e20323635383333.roa
File:                     323830333a646332303a313030303a3a2f34302d3430203d3e20323635383333.roa (raw, json)
Hash identifier:          A7JQ86KZhYvszqE2X6qbcGAyFo0Wf+HqOUEx6lCSKVU=
Subject key identifier:   65:E7:24:EB:64:E3:36:39:D9:A1:9D:43:EF:44:ED:58:53:7E:E3:02
Certificate issuer:       /CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
Certificate serial:       2CDB6A8DD061FB2A28231F2614B34BBF486B8227
Authority key identifier: 80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/323830333a646332303a313030303a3a2f34302d3430203d3e20323635383333.roa
Signing time:             Fri 17 Apr 2026 22:15:00 +0000
ROA not before:           Fri 17 Apr 2026 22:10:00 +0000
ROA not after:            Fri 16 Apr 2027 22:15:00 +0000
asID:                     265833
IP address blocks:        2803:dc20:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 00:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:db:6a:8d:d0:61:fb:2a:28:23:1f:26:14:b3:4b:bf:48:6b:82:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
        Validity
            Not Before: Apr 17 22:10:00 2026 GMT
            Not After : Apr 16 22:15:00 2027 GMT
        Subject: CN=65E724EB64E33639D9A19D43EF44ED58537EE302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:05:fa:5b:fe:6a:f5:fb:45:f7:fe:80:a9:
                    7a:c6:f3:7d:59:d1:9d:09:85:17:04:a5:aa:bb:dc:
                    0a:13:8b:d1:e9:ed:da:d7:fa:c2:f5:6f:9e:fe:33:
                    bc:bc:da:7c:73:8e:91:5d:c9:ea:d6:6e:87:bd:41:
                    75:11:c7:3b:d7:b0:35:25:0c:b8:23:ba:24:cb:15:
                    9c:43:90:5b:b9:64:f8:7c:01:88:65:00:8b:1e:72:
                    83:e6:6b:e4:2a:52:c7:01:5f:cc:b5:c3:f7:35:39:
                    52:55:b6:2e:a0:03:5b:f1:e8:8c:db:9f:5c:a8:d2:
                    1f:4a:97:90:57:fd:ab:c2:40:87:6e:2e:03:ca:e9:
                    46:cb:42:8e:09:fb:87:68:0f:05:1a:73:87:78:aa:
                    4b:a5:4f:e2:90:c4:78:2d:fd:86:20:8e:d5:72:34:
                    ac:d4:66:91:10:17:f2:04:20:6f:72:46:74:9b:4e:
                    c9:21:4d:79:23:ed:78:ac:8c:b8:81:21:73:a8:86:
                    06:c5:64:76:f8:c8:5f:71:d3:57:04:bf:35:fb:02:
                    68:b5:5f:69:d8:55:20:fe:f1:72:8f:61:d1:c1:a0:
                    a3:96:55:0c:11:bf:21:21:4b:fe:35:ec:0e:d8:ff:
                    75:ea:4c:91:40:9b:45:aa:22:02:af:b5:62:0f:cf:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E7:24:EB:64:E3:36:39:D9:A1:9D:43:EF:44:ED:58:53:7E:E3:02
            X509v3 Authority Key Identifier:
                keyid:80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/323830333a646332303a313030303a3a2f34302d3430203d3e20323635383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc20:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:98:db:bb:8e:55:80:48:88:11:04:45:16:ed:69:68:e6:ee:
         f6:98:71:ee:cb:10:53:44:13:c6:c4:09:1e:0d:ee:18:2b:de:
         c8:b8:97:d0:73:bd:75:45:06:c1:93:5a:12:ab:13:38:92:f4:
         e8:a8:ff:32:2b:b1:92:88:db:12:f4:68:3a:22:e0:52:1e:7b:
         5e:e7:04:50:da:19:8a:81:89:d0:f4:ba:d0:78:88:af:0a:5a:
         ae:f3:1f:ce:db:b8:0c:67:57:18:c3:75:e7:b5:c3:45:0a:4a:
         83:02:f2:da:0a:19:1c:63:be:45:ce:88:8c:3f:af:44:47:d0:
         f6:37:23:ad:b9:94:78:8e:6f:18:c6:55:2a:e7:2b:ca:84:ce:
         8f:34:73:36:6d:09:73:e0:d6:fd:d5:db:2a:f1:aa:7e:b7:ea:
         c9:fe:94:34:50:2a:65:b8:11:97:23:0d:00:50:9a:f5:71:ff:
         22:6d:19:9d:a0:1f:fc:b3:12:17:8c:07:87:91:2b:82:75:a3:
         a0:d4:0b:9f:d7:78:cd:10:c8:8c:50:94:6c:01:ed:d3:ba:7a:
         7b:02:61:88:f7:cb:d2:7d:dc:f5:de:e1:97:44:58:22:26:75:
         02:41:97:91:dd:2d:cf:43:58:90:5d:58:ee:65:6c:e0:3e:55:
         82:60:68:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 30 06:31:06 2026 by rpki-client