Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/323830333a613233303a3a2f33322d3438203d3e20323734383533.roa
File:                     323830333a613233303a3a2f33322d3438203d3e20323734383533.roa (raw, json)
Hash identifier:          AYGchZ9nkZuV2f25LyA489f8YaBVmLjdLNWvkQN+c0U=
Subject key identifier:   0E:3B:7C:14:04:79:39:CE:02:93:48:69:78:B8:F8:87:45:81:C9:76
Certificate issuer:       /CN=B9ADA3825527F2867E852AD89F0950D61C687D5A
Certificate serial:       6B9FCE3AC33ECCDECDF7D793D841D5BB87E8F46B
Authority key identifier: B9:AD:A3:82:55:27:F2:86:7E:85:2A:D8:9F:09:50:D6:1C:68:7D:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/323830333a613233303a3a2f33322d3438203d3e20323734383533.roa
Signing time:             Sat 07 Mar 2026 20:25:00 +0000
ROA not before:           Sat 07 Mar 2026 20:20:00 +0000
ROA not after:            Sat 06 Mar 2027 20:25:00 +0000
asID:                     274853
IP address blocks:        2803:a230::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9f:ce:3a:c3:3e:cc:de:cd:f7:d7:93:d8:41:d5:bb:87:e8:f4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9ADA3825527F2867E852AD89F0950D61C687D5A
        Validity
            Not Before: Mar  7 20:20:00 2026 GMT
            Not After : Mar  6 20:25:00 2027 GMT
        Subject: CN=0E3B7C14047939CE0293486978B8F8874581C976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:90:d4:a6:9b:ba:4c:6f:2a:58:ec:13:90:2e:
                    f8:bd:07:54:9b:be:0e:23:ab:3b:11:fe:a3:bf:34:
                    f9:59:c6:fc:4e:53:c8:89:d4:63:fe:91:7a:ca:ea:
                    18:69:11:5f:0a:4d:a3:1b:c5:f5:94:17:c6:0f:60:
                    57:11:14:48:ab:40:9e:38:02:03:ab:09:39:84:2f:
                    20:be:a4:bc:2e:2e:94:9b:d0:be:db:a0:3e:5e:b1:
                    fa:2b:c0:49:22:a7:dd:6f:c6:b9:d7:65:02:c8:23:
                    b0:ab:01:6e:f5:29:1b:28:be:ca:6b:d2:8c:a2:41:
                    e4:cd:3d:fb:d7:27:bc:c3:ef:ec:c1:38:e0:be:d0:
                    bc:5c:1c:7f:b6:e4:ae:c5:78:f9:4a:d4:af:78:88:
                    14:92:6e:a0:ae:c2:10:9e:81:e0:db:e9:c9:e5:d1:
                    02:8f:0e:5b:c9:df:36:09:dc:82:1d:93:ca:e3:12:
                    74:af:5b:18:1c:e6:71:9f:82:33:11:14:b2:77:91:
                    fa:d7:df:de:ce:73:d2:13:fe:9b:3e:c2:08:a7:4c:
                    12:0a:0b:92:a5:88:08:80:63:e3:df:ae:98:16:bb:
                    b9:9a:8b:7f:da:96:a0:b9:1c:7c:d9:51:e2:3b:50:
                    94:29:f2:cc:dc:87:85:cf:93:ae:a4:22:2f:d8:b0:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:7C:14:04:79:39:CE:02:93:48:69:78:B8:F8:87:45:81:C9:76
            X509v3 Authority Key Identifier:
                keyid:B9:AD:A3:82:55:27:F2:86:7E:85:2A:D8:9F:09:50:D6:1C:68:7D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/323830333a613233303a3a2f33322d3438203d3e20323734383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a230::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:66:76:fa:89:e7:64:af:11:06:cd:81:b2:82:ae:2d:53:67:
         d1:1e:18:32:5c:43:7f:28:15:39:ce:f8:3c:93:fd:8e:9d:bf:
         1a:4e:02:e0:98:ed:b5:53:8a:bb:89:78:96:6d:76:1a:e2:72:
         57:bb:70:92:56:c1:8a:7d:8f:a1:d8:09:d7:db:d1:cc:0f:8c:
         a7:a5:75:27:cc:6f:29:23:9d:cd:12:31:11:f4:64:e6:0c:91:
         5d:f8:28:1c:c8:fd:5b:73:87:45:cb:80:60:2b:44:b2:2a:59:
         8d:0c:c8:2c:81:fa:03:dc:d4:fc:f2:a3:f7:86:ce:b5:e7:36:
         15:0d:f3:95:a3:1c:aa:70:47:9b:a1:2b:73:3d:64:52:c9:47:
         d2:8f:1f:72:5c:7b:b7:9e:24:0c:bc:49:cd:42:36:3d:73:ae:
         8a:61:42:de:3e:aa:ad:3b:9f:55:42:a4:d7:31:81:c3:28:f8:
         8a:3f:85:44:cc:65:d4:0c:85:2b:ea:d0:0d:16:eb:a4:5c:7a:
         4e:7a:2e:47:e4:0a:cf:2f:59:50:a0:d8:93:8d:4a:b5:9d:4f:
         0f:77:0c:cf:13:0f:d4:02:06:6a:1b:26:ec:9c:3c:61:48:45:
         f8:a8:5b:9a:f0:ca:41:05:d8:a1:62:b0:0b:09:b2:1b:11:c2:
         62:1c:27:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 04:55:16 2026 by rpki-client