Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a3a2f33322d3332203d3e20323733323434.roa
File:                     323830333a616539303a3a2f33322d3332203d3e20323733323434.roa (raw, json)
Hash identifier:          I1ZLzqh4R1bFJMLR34zOVsE6DP2Ckrb8KqnOuMNGDSE=
Subject key identifier:   54:7F:C4:55:00:D6:74:90:29:A3:F1:66:6D:7B:F1:C2:7B:7F:C5:A8
Certificate issuer:       /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial:       228056A69749929178EB46E9511F2DE4AB7E298B
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a3a2f33322d3332203d3e20323733323434.roa
Signing time:             Tue 28 Apr 2026 18:30:00 +0000
ROA not before:           Tue 28 Apr 2026 18:25:00 +0000
ROA not after:            Tue 27 Apr 2027 18:30:00 +0000
asID:                     273244
IP address blocks:        2803:ae90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:80:56:a6:97:49:92:91:78:eb:46:e9:51:1f:2d:e4:ab:7e:29:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
        Validity
            Not Before: Apr 28 18:25:00 2026 GMT
            Not After : Apr 27 18:30:00 2027 GMT
        Subject: CN=547FC45500D6749029A3F1666D7BF1C27B7FC5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:c7:86:77:48:36:33:db:d2:5d:d7:a9:95:
                    b3:7b:d7:85:30:7b:58:a2:ce:9a:e2:3b:cd:e9:3d:
                    d4:b7:8e:97:59:e5:a4:02:9c:9b:21:e5:36:84:8c:
                    81:e3:5a:70:ca:9c:02:3f:11:b6:99:16:d7:a4:12:
                    47:59:fd:4a:41:d7:ed:5a:fc:ac:29:3f:33:25:e1:
                    0f:51:2b:88:03:f0:59:10:9b:52:8f:1a:4b:85:52:
                    cc:a9:84:73:0b:fe:ac:b8:c7:95:33:72:f0:18:cb:
                    ac:6f:9b:55:ee:ea:94:60:16:0e:60:38:b4:37:7c:
                    21:8b:ca:17:26:0d:e6:f3:c8:2b:08:ad:80:5d:ed:
                    b5:8d:05:06:18:85:79:be:66:08:85:37:c3:1f:0c:
                    4f:4b:46:98:73:b9:bc:48:65:85:89:0e:80:69:f8:
                    8b:09:55:ee:60:9d:55:34:0e:56:97:d4:90:ce:68:
                    7e:ce:71:ac:09:0a:b4:3c:35:0d:2b:a3:9d:f5:8c:
                    75:8e:e7:51:f1:8b:bf:d1:b9:1d:ef:f0:bb:49:b3:
                    27:b3:11:ee:35:6d:d4:25:ed:de:50:a7:8a:cc:18:
                    5a:4c:d8:fb:62:f8:3f:ff:6d:e0:ae:85:27:bb:7c:
                    52:45:0d:47:8d:da:b4:98:62:1a:ab:2f:82:03:b8:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7F:C4:55:00:D6:74:90:29:A3:F1:66:6D:7B:F1:C2:7B:7F:C5:A8
            X509v3 Authority Key Identifier:
                keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a3a2f33322d3332203d3e20323733323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ae90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:2c:4a:f8:14:ff:13:56:c7:77:5a:c3:dd:c1:80:ef:4a:04:
         9f:9d:67:58:fe:60:54:3e:dc:cc:22:72:51:db:e1:56:ea:b4:
         a0:fe:57:fc:ca:58:e0:16:3f:a3:7c:99:e2:89:71:02:79:7d:
         ff:3c:4c:35:a4:a4:5b:ad:7c:9f:ee:30:bd:01:34:01:13:e2:
         95:d8:e4:e1:9c:cf:18:34:f4:37:17:bd:da:11:b3:49:d8:88:
         26:fc:2e:d8:94:94:72:bf:6f:cc:23:d0:e2:05:65:95:30:59:
         a8:3e:3f:86:1e:ad:23:c5:9b:3b:54:57:45:e9:09:69:17:b0:
         2a:99:8a:3b:60:8b:70:18:7d:00:32:77:62:f2:62:19:3f:0e:
         44:99:bb:09:b2:e6:ec:6a:0d:9c:05:d0:7c:01:64:c4:4a:a3:
         f5:44:e7:e5:51:cc:ef:56:c5:d8:ee:a4:d3:03:7b:96:14:90:
         17:89:b5:55:85:5d:64:3c:c7:17:76:32:64:1e:16:dd:6d:12:
         07:30:1e:a8:72:57:ad:22:e8:f6:50:9d:f6:f7:7d:d3:7c:12:
         59:82:0b:7f:bd:7f:89:02:30:cd:8a:7f:0e:fe:69:9f:8b:c7:
         07:ec:4f:45:87:65:3e:06:e2:db:7a:b5:47:77:2f:07:48:3b:
         b2:e7:06:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:10:17 2026 by rpki-client