Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131353a3a2f34382d3438203d3e20323632353839.roa
File:                     323830303a3635303a3131353a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          o37ondwxjOY+Wm/pJ9YHDRSkcxRponjc0l2+Pdrzhlg=
Subject key identifier:   50:CD:3E:A3:E5:07:DF:F1:F7:79:9A:76:A4:02:03:91:D2:19:5B:09
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       165C2A57AC39BE5E22B480FDBD045E5252AB9BC3
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131353a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Wed 20 May 2026 14:43:23 +0000
ROA not before:           Wed 20 May 2026 14:38:23 +0000
ROA not after:            Wed 19 May 2027 14:43:23 +0000
asID:                     262589
IP address blocks:        2800:650:115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5c:2a:57:ac:39:be:5e:22:b4:80:fd:bd:04:5e:52:52:ab:9b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: May 20 14:38:23 2026 GMT
            Not After : May 19 14:43:23 2027 GMT
        Subject: CN=50CD3EA3E507DFF1F7799A76A4020391D2195B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:1b:8e:c2:de:23:dc:de:a5:1e:5e:21:53:
                    94:05:07:69:db:62:e6:de:98:4a:61:9f:69:61:b8:
                    a9:39:f8:34:19:75:28:95:b5:22:d8:48:77:4f:f6:
                    60:c4:e1:79:d0:35:0b:a4:22:b1:48:2b:d6:5f:c7:
                    eb:25:1a:97:37:d1:fa:9c:e1:15:17:d6:bc:9e:ab:
                    b2:3c:0f:7d:02:41:a0:fb:e3:8a:29:7c:03:06:50:
                    65:8a:b5:1a:e2:41:ca:78:6d:7c:73:af:28:46:19:
                    a4:ca:58:9d:50:5d:06:6c:13:7f:29:6c:a8:04:3b:
                    38:52:a6:a3:8e:5c:4c:e4:22:71:ba:61:c8:76:3f:
                    d5:52:8e:7e:e3:4c:c8:8c:90:5a:ce:45:94:7a:b9:
                    aa:8d:e1:49:f4:2e:70:f4:0b:81:b4:8e:c8:42:3b:
                    4d:d7:c3:b3:43:7e:51:69:cd:65:99:e2:a1:a3:80:
                    07:2f:eb:e0:1c:b8:c8:c1:52:a3:15:28:59:e9:f5:
                    55:1f:e6:55:82:81:bf:65:ec:0d:a5:f9:c9:58:cc:
                    52:f1:74:62:d0:be:e0:8b:8d:89:53:96:a8:f4:ea:
                    73:09:23:15:ab:f1:68:d1:74:7f:02:49:64:92:5c:
                    8b:e2:59:ec:cf:28:45:c6:9a:5e:09:bd:52:90:fe:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CD:3E:A3:E5:07:DF:F1:F7:79:9A:76:A4:02:03:91:D2:19:5B:09
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131353a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:0f:7d:bc:55:dc:26:bf:2a:1a:18:bf:54:c8:90:3f:c5:
         8d:4e:ea:d3:52:77:d1:36:84:84:d6:32:b0:7e:46:46:e3:f4:
         a8:10:13:be:4a:41:8b:78:5c:16:a4:e9:f0:48:21:a1:06:f0:
         5d:68:24:53:39:f9:de:27:51:ed:04:ab:93:21:a0:58:cb:25:
         b8:25:a1:4c:36:96:30:ce:87:73:8b:42:4d:15:5e:83:c1:6d:
         49:67:34:97:4c:e1:86:c5:a5:14:8b:55:8b:02:27:c7:ea:87:
         43:a4:9c:be:1d:34:93:68:aa:63:90:ca:3d:1c:c2:3d:85:fb:
         d8:5d:b1:58:5d:0c:c7:e4:b4:d1:1e:51:ca:0e:bd:ad:b1:f3:
         f5:58:36:cc:cd:67:e9:4d:39:1c:21:5d:f3:d0:74:e2:c7:bc:
         6d:6c:ca:23:e6:0d:5f:d5:b9:be:8f:63:ba:35:c5:70:76:12:
         98:30:e9:39:2f:50:c1:0f:d2:50:ed:24:aa:79:de:8a:f3:3b:
         b2:ba:2f:57:68:fa:d0:93:51:dc:2b:84:bc:63:7b:db:8a:d3:
         18:9e:a3:83:f5:a5:0d:70:c6:f8:ba:d8:6d:65:3f:ce:7a:7b:
         08:aa:95:d0:0d:fa:e6:6e:e5:bb:14:96:47:00:0f:b5:bd:92:
         ec:ee:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 15:04:07 2026 by rpki-client