Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/323830333a6135303a3a2f33322d3438203d3e20323733313734.roa
File:                     323830333a6135303a3a2f33322d3438203d3e20323733313734.roa (raw, json)
Hash identifier:          jJELMioa/Khst+8DF7W0JJYlj6GndQ9CN8vDKek3aGg=
Subject key identifier:   24:E7:4B:B2:88:E5:4E:BC:FF:7A:F0:BF:44:FD:70:48:D2:C8:C9:2A
Certificate issuer:       /CN=BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF
Certificate serial:       13F456D594C1CCEBEC78B270AB0350FAAEC129A6
Authority key identifier: BF:A2:FD:BF:95:BF:4F:A6:96:32:47:02:9E:E0:F0:D7:50:CA:7F:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/323830333a6135303a3a2f33322d3438203d3e20323733313734.roa
Signing time:             Tue 30 Jun 2026 17:05:00 +0000
ROA not before:           Tue 30 Jun 2026 17:00:00 +0000
ROA not after:            Tue 29 Jun 2027 17:05:00 +0000
asID:                     273174
IP address blocks:        2803:a50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Jul 2026 00:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f4:56:d5:94:c1:cc:eb:ec:78:b2:70:ab:03:50:fa:ae:c1:29:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF
        Validity
            Not Before: Jun 30 17:00:00 2026 GMT
            Not After : Jun 29 17:05:00 2027 GMT
        Subject: CN=24E74BB288E54EBCFF7AF0BF44FD7048D2C8C92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:3e:24:3d:a6:ab:ff:ce:5f:40:09:a8:17:
                    ca:10:59:48:b2:65:f2:04:1b:99:c2:29:c3:3d:1b:
                    ff:d1:25:fc:2e:1e:9b:91:b3:40:78:36:7c:a8:92:
                    70:cf:9f:a2:ae:06:c9:d4:00:01:69:61:5b:e6:37:
                    45:7a:7d:78:77:5e:8a:88:ae:7d:c6:ec:b4:80:40:
                    3e:e9:46:f1:3f:50:4d:d4:5d:ec:8d:1d:1e:1c:35:
                    fb:ab:93:05:64:3a:6b:4f:98:7c:46:c4:06:8b:23:
                    8a:fe:f5:54:f5:68:6a:34:df:ae:39:1b:09:6e:9f:
                    bc:ed:20:1b:fd:61:07:b0:9b:20:e0:14:c3:62:60:
                    2a:c0:c1:4a:63:b1:00:d7:4f:9f:0c:f6:c6:51:cb:
                    4a:e2:9f:bc:58:58:d3:23:48:04:2d:25:bd:f2:c1:
                    30:b3:49:29:dc:66:b1:87:3b:d4:ac:2d:0e:46:1b:
                    89:fb:da:0f:8f:e8:64:ae:b8:31:d7:82:88:1a:7e:
                    9e:ee:90:88:8b:e5:54:5e:10:cc:cc:06:bb:8e:d7:
                    8b:04:25:d2:7c:e7:89:9b:02:b9:f5:e5:5f:80:82:
                    3f:9c:27:48:1a:c7:10:52:26:a3:2c:ac:c9:56:8c:
                    55:17:34:33:9b:90:be:50:99:19:76:2d:0f:48:27:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E7:4B:B2:88:E5:4E:BC:FF:7A:F0:BF:44:FD:70:48:D2:C8:C9:2A
            X509v3 Authority Key Identifier:
                keyid:BF:A2:FD:BF:95:BF:4F:A6:96:32:47:02:9E:E0:F0:D7:50:CA:7F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/323830333a6135303a3a2f33322d3438203d3e20323733313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:c2:da:ed:14:8e:11:dd:a6:bc:9d:de:a0:0b:c1:ea:6b:8d:
         3d:a8:ca:eb:20:c1:6e:b5:a2:3c:2f:ae:ab:4a:43:1d:66:0b:
         00:31:72:bd:2d:6c:f6:ed:38:47:6e:3c:60:f9:54:12:87:84:
         66:d4:f1:c8:e6:bf:30:4e:1f:9e:88:0e:18:a5:78:a8:3a:59:
         e3:37:d1:62:f6:3f:66:05:66:58:07:c2:34:14:e1:0a:be:b1:
         66:e1:37:61:56:94:88:5b:49:7c:2f:9d:c9:b1:8a:b1:22:ee:
         2c:a1:12:60:02:cd:58:a3:8e:d5:65:d4:8c:6e:3c:87:37:c4:
         91:bb:f8:c3:db:78:19:18:16:33:1e:ac:a1:3b:18:42:2d:be:
         f8:ec:df:ea:13:64:cf:34:58:5e:d4:a4:51:6a:00:72:85:27:
         b4:3c:0e:57:1f:e6:0b:cd:94:8c:6b:ae:e4:33:c0:58:0a:23:
         80:bc:b5:f5:8b:d5:a4:c8:fb:2d:3a:d7:1d:12:41:ad:c6:e6:
         cb:64:ad:ab:72:03:12:3f:14:6a:a5:03:a3:b7:f5:f4:ef:ed:
         01:35:ba:95:da:74:64:85:89:31:a3:87:d2:c9:86:94:bb:0b:
         be:75:ae:20:89:f4:c1:b4:b6:81:a3:ef:df:08:8a:1d:cb:5a:
         a8:ce:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 12:50:12 2026 by rpki-client