Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF70D3C5D89271EE5B8C8B7E5F46757887EFCB17C1B84C9E4EAED61A4C17BF1A/0/323830333a343633303a3a2f33322d3332203d3e20323734383833.roa
File:                     323830333a343633303a3a2f33322d3332203d3e20323734383833.roa (raw, json)
Hash identifier:          LhgA0aaOrUSTBRPSa9bMVTdWV+JZIO5pykAy1CWqqKE=
Subject key identifier:   66:C1:69:C6:A3:46:F0:CA:79:72:7F:C1:E6:E6:1D:DD:5D:AD:3E:78
Certificate issuer:       /CN=AD238E09F1A5A79311D6B8D811AB9E00E8F2E830
Certificate serial:       46219AB7644EA97E229E4CBBF37870977455E5E3
Authority key identifier: AD:23:8E:09:F1:A5:A7:93:11:D6:B8:D8:11:AB:9E:00:E8:F2:E8:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD238E09F1A5A79311D6B8D811AB9E00E8F2E830.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF70D3C5D89271EE5B8C8B7E5F46757887EFCB17C1B84C9E4EAED61A4C17BF1A/0/323830333a343633303a3a2f33322d3332203d3e20323734383833.roa
Signing time:             Wed 17 Jun 2026 18:35:00 +0000
ROA not before:           Wed 17 Jun 2026 18:30:00 +0000
ROA not after:            Wed 16 Jun 2027 18:35:00 +0000
asID:                     274883
IP address blocks:        2803:4630::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF70D3C5D89271EE5B8C8B7E5F46757887EFCB17C1B84C9E4EAED61A4C17BF1A/0/AD238E09F1A5A79311D6B8D811AB9E00E8F2E830.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF70D3C5D89271EE5B8C8B7E5F46757887EFCB17C1B84C9E4EAED61A4C17BF1A/0/AD238E09F1A5A79311D6B8D811AB9E00E8F2E830.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD238E09F1A5A79311D6B8D811AB9E00E8F2E830.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:21:9a:b7:64:4e:a9:7e:22:9e:4c:bb:f3:78:70:97:74:55:e5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD238E09F1A5A79311D6B8D811AB9E00E8F2E830
        Validity
            Not Before: Jun 17 18:30:00 2026 GMT
            Not After : Jun 16 18:35:00 2027 GMT
        Subject: CN=66C169C6A346F0CA79727FC1E6E61DDD5DAD3E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:ef:8d:92:28:c6:48:20:5d:a4:60:c9:79:
                    34:67:84:95:df:f2:58:6b:37:ff:a0:2e:0e:f1:af:
                    a9:ee:9b:d6:58:df:9c:7c:e2:f2:7b:45:d3:4c:f9:
                    a1:47:80:87:26:0a:a2:3f:01:27:5e:bd:26:50:4d:
                    30:f6:bf:45:1d:6b:d3:91:e2:ab:15:d4:e6:18:3d:
                    4b:36:54:c8:66:63:45:c5:be:e7:c1:a4:28:31:8c:
                    b6:cd:3a:ab:f9:c2:f0:cf:59:f1:21:55:9e:6a:7d:
                    ca:9d:c8:5e:e3:5a:01:9b:95:2b:56:3b:81:b9:d0:
                    7c:35:39:d4:d5:21:67:f8:d8:81:f5:76:13:a5:98:
                    4c:a0:cc:6b:a6:9d:76:9a:12:95:b3:33:f3:8a:f7:
                    7b:c4:c8:30:a5:a9:af:98:6b:37:7e:ac:9d:6b:20:
                    64:43:5c:1d:0d:8e:ce:8e:5e:8b:ce:74:7d:20:2b:
                    e8:7c:7d:dd:54:ed:91:d3:40:cd:d4:fe:f8:46:27:
                    81:67:ee:1c:cb:21:84:19:b3:d2:09:a9:3e:fe:41:
                    4d:88:c6:96:b0:68:1a:2c:c5:19:fa:6a:a7:7b:db:
                    d9:59:20:2e:56:ae:8d:60:e8:b4:7c:6b:cc:f1:0a:
                    20:cd:97:e3:e9:5a:52:b0:7c:b9:87:44:af:a3:a8:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C1:69:C6:A3:46:F0:CA:79:72:7F:C1:E6:E6:1D:DD:5D:AD:3E:78
            X509v3 Authority Key Identifier:
                keyid:AD:23:8E:09:F1:A5:A7:93:11:D6:B8:D8:11:AB:9E:00:E8:F2:E8:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF70D3C5D89271EE5B8C8B7E5F46757887EFCB17C1B84C9E4EAED61A4C17BF1A/0/AD238E09F1A5A79311D6B8D811AB9E00E8F2E830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD238E09F1A5A79311D6B8D811AB9E00E8F2E830.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF70D3C5D89271EE5B8C8B7E5F46757887EFCB17C1B84C9E4EAED61A4C17BF1A/0/323830333a343633303a3a2f33322d3332203d3e20323734383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4630::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:f3:af:8d:0d:db:a9:61:2f:f1:91:32:a7:ce:9e:1b:f2:
         b1:02:6c:17:fb:ed:13:b3:80:cd:74:c8:94:df:39:af:9c:12:
         24:e8:2f:c1:cc:ab:e9:a9:80:b3:ed:51:37:d6:f3:26:43:de:
         8e:bd:6b:03:f2:bb:55:1f:bd:01:e8:16:ef:f4:37:6a:39:02:
         45:20:6b:c2:59:c3:61:4e:5c:60:84:48:db:a3:35:91:c2:05:
         35:69:29:ab:58:84:04:5d:9d:9c:15:20:db:80:fe:fe:6f:eb:
         f8:aa:bd:e7:19:c3:25:ea:55:34:01:63:0b:61:30:7f:ed:bb:
         83:76:16:6c:32:76:2a:48:31:b4:18:aa:99:a8:46:51:40:40:
         77:95:28:c4:04:1a:f7:05:f4:b7:f7:bc:2a:f6:29:07:6b:cb:
         a2:98:10:d3:df:32:47:ab:bc:05:2a:fe:c2:17:70:b6:c4:f2:
         ab:75:6f:e7:4b:d8:1a:22:d4:dd:ce:4e:6e:a6:22:40:bd:cc:
         67:5f:60:dd:c4:ca:64:b4:50:48:7a:53:e4:b1:65:81:74:f1:
         fe:b8:1c:3c:79:1a:d1:69:95:89:c4:fc:6e:8b:d7:f1:e7:b0:
         20:0f:a8:06:2e:ae:1b:4d:dc:07:df:f1:f9:27:db:33:8d:84:
         6d:97:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:49 2026 by rpki-client