Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/323830333a646332303a3230303a3a2f34302d3430203d3e20323635383333.roa
File:                     323830333a646332303a3230303a3a2f34302d3430203d3e20323635383333.roa (raw, json)
Hash identifier:          1NRdPTDlV5CFInmZ17W2Jb71c5j+PgvCqqvKyko3xxM=
Subject key identifier:   AB:57:01:BB:06:47:53:6A:2F:CB:65:B5:17:72:9D:B0:37:2D:A5:2F
Certificate issuer:       /CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
Certificate serial:       28537F5D9E424EB39BCA00DF543A0508CF8A35F6
Authority key identifier: 80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/323830333a646332303a3230303a3a2f34302d3430203d3e20323635383333.roa
Signing time:             Fri 17 Apr 2026 22:15:01 +0000
ROA not before:           Fri 17 Apr 2026 22:10:01 +0000
ROA not after:            Fri 16 Apr 2027 22:15:01 +0000
asID:                     265833
IP address blocks:        2803:dc20:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 00:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:53:7f:5d:9e:42:4e:b3:9b:ca:00:df:54:3a:05:08:cf:8a:35:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
        Validity
            Not Before: Apr 17 22:10:01 2026 GMT
            Not After : Apr 16 22:15:01 2027 GMT
        Subject: CN=AB5701BB0647536A2FCB65B517729DB0372DA52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:e7:6a:5b:84:fe:ac:50:e7:7d:67:ab:0a:
                    1b:04:4b:03:ed:b5:c0:05:a4:6b:cc:72:3e:a9:97:
                    7b:c8:f4:86:2f:55:5d:50:a1:f9:49:f7:63:05:2c:
                    81:88:08:23:58:f9:5b:be:34:04:4d:7a:12:20:65:
                    18:39:9f:1b:1f:f4:f6:5d:58:d6:38:9e:23:69:0e:
                    17:4a:8e:d9:26:60:ea:98:c2:5c:a9:51:4f:d1:73:
                    ae:4a:76:60:b1:e6:ad:3f:89:1d:28:d7:58:03:4a:
                    4f:3a:40:85:ab:7e:0f:cb:d8:85:42:a7:0d:0d:69:
                    bf:9a:37:ec:48:9d:a5:8f:30:30:a4:27:08:9d:24:
                    47:66:02:a1:24:be:cb:ee:c4:1f:f4:fb:66:42:21:
                    b7:e4:51:e4:da:b3:f4:e8:7d:e6:5f:58:c2:d1:12:
                    28:bf:62:30:44:a9:e3:ff:bb:fb:f3:61:06:bc:28:
                    44:f2:84:b9:17:d4:55:8c:3c:13:3d:3a:d3:36:25:
                    30:4a:62:28:7b:b1:6a:92:93:75:b2:1c:9c:c0:73:
                    cd:a2:84:03:c5:8b:cc:cd:8b:26:a8:1e:92:ff:08:
                    5f:7a:25:89:32:52:82:9c:04:78:ec:da:f3:b4:d2:
                    bc:ef:d5:41:b2:ba:bb:1b:0b:40:2c:cd:46:ca:53:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:57:01:BB:06:47:53:6A:2F:CB:65:B5:17:72:9D:B0:37:2D:A5:2F
            X509v3 Authority Key Identifier:
                keyid:80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/323830333a646332303a3230303a3a2f34302d3430203d3e20323635383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc20:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:83:fa:d7:40:8a:86:bf:73:e6:6d:7e:ef:72:38:98:e7:
         7d:68:bc:a8:ea:52:2a:b2:b8:07:cb:e0:83:44:7d:6f:69:af:
         a9:a2:8b:58:e8:89:f5:23:a9:66:1e:7a:e7:d0:c3:ea:96:cc:
         51:89:77:60:75:10:ea:d1:4d:08:a4:2c:9e:c5:da:c1:32:5f:
         ba:8b:2d:15:a8:ef:4b:e8:90:b6:85:79:3a:b9:2e:2d:0f:4b:
         c6:b0:e4:d9:b6:83:5c:3f:e9:7c:c3:70:6b:c2:37:db:17:41:
         07:fe:aa:e5:2b:a8:5d:8a:fd:ba:2d:26:65:a8:d1:98:92:0d:
         a8:9b:11:33:cb:56:9c:cf:9b:4d:ad:8b:11:3f:c9:1f:18:b6:
         17:27:8d:ca:13:a2:a6:59:7f:bf:45:7a:fc:fb:04:7c:2e:8c:
         28:55:17:77:47:00:87:ad:da:2e:30:ba:d8:13:f9:0c:21:d9:
         4e:87:4d:87:7d:b9:c6:58:f5:90:48:5d:f6:4c:4c:ce:d4:1e:
         f6:b6:32:6d:de:f5:cb:bb:87:c9:3a:a9:3d:a5:eb:78:d4:45:
         67:5e:52:f9:94:c1:a8:c9:eb:05:5b:88:53:50:98:33:69:87:
         55:ab:5c:38:e3:b6:52:29:d9:9e:4f:93:1b:5b:50:ef:4c:27:
         4d:c3:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:31:08 2026 by rpki-client