Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a363a3a2f34382d3438203d3e20323733313538.roa
File:                     323830333a633235303a363a3a2f34382d3438203d3e20323733313538.roa (raw, json)
Hash identifier:          ABZs9fowDzm4G5kb9hNL+aiQs/oderrLZHOKyAhsirE=
Subject key identifier:   2A:82:3B:3D:74:0D:0F:1D:D3:1D:26:F3:F0:31:46:14:10:7E:02:82
Certificate issuer:       /CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
Certificate serial:       386E18A9105A3038524BDB47208C1004CD01FB6F
Authority key identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a363a3a2f34382d3438203d3e20323733313538.roa
Signing time:             Fri 05 Jun 2026 17:46:44 +0000
ROA not before:           Fri 05 Jun 2026 17:41:44 +0000
ROA not after:            Fri 04 Jun 2027 17:46:44 +0000
asID:                     273158
IP address blocks:        2803:c250:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 07:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6e:18:a9:10:5a:30:38:52:4b:db:47:20:8c:10:04:cd:01:fb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
        Validity
            Not Before: Jun  5 17:41:44 2026 GMT
            Not After : Jun  4 17:46:44 2027 GMT
        Subject: CN=2A823B3D740D0F1DD31D26F3F0314614107E0282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0f:ac:40:5e:91:67:6c:bc:47:8c:99:ac:e9:
                    71:92:8f:51:3e:6d:58:9b:4a:68:48:18:12:61:22:
                    1f:3e:d5:45:a6:c0:21:45:4c:61:ec:a3:f8:3c:0e:
                    64:c6:6b:fc:b6:05:5a:61:55:0d:87:55:c3:ab:99:
                    ea:c2:33:9c:ce:03:e0:04:10:de:f2:4a:df:89:29:
                    31:ae:6d:52:3a:d3:e4:cb:4a:c2:6d:ac:33:a4:89:
                    51:54:59:30:d0:5b:69:9c:c8:48:2c:7c:30:88:2c:
                    94:11:d2:75:ec:2b:8c:1c:b0:0a:22:8f:c8:68:54:
                    d0:7b:82:aa:42:d8:eb:68:b3:cb:c5:dd:ed:57:dd:
                    63:9b:32:b3:f8:87:bf:3b:fb:8e:20:ec:dd:f6:03:
                    38:0b:a2:af:90:80:c6:cc:4b:c1:90:ab:4c:e9:02:
                    88:3c:d7:cd:32:b9:f5:72:e3:92:02:0c:2f:6f:b6:
                    28:dd:3d:7b:83:ac:85:f3:ad:e4:54:06:0b:bf:97:
                    14:bc:d1:bd:3f:4c:9b:2a:7d:85:32:52:e1:a4:e5:
                    3a:11:30:36:46:3e:85:f2:22:20:24:14:da:df:02:
                    65:bd:f3:50:19:cb:22:12:9c:a7:99:4f:65:2e:37:
                    77:e1:ed:d0:43:ea:93:53:0e:72:24:b2:e3:56:ab:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:3B:3D:74:0D:0F:1D:D3:1D:26:F3:F0:31:46:14:10:7E:02:82
            X509v3 Authority Key Identifier:
                keyid:D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a363a3a2f34382d3438203d3e20323733313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c250:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:76:e1:48:3f:f9:c1:79:3d:21:06:82:ad:da:5e:76:df:
         46:70:21:27:9e:3f:6f:4a:21:66:22:b7:ca:17:5a:c3:5e:df:
         3c:74:cd:b7:d6:d8:a9:43:22:2d:a1:74:dc:28:7b:24:67:6c:
         77:b8:5c:02:26:ea:e1:44:6b:95:80:8d:b3:3c:9c:6e:4b:9b:
         a7:8a:cf:55:63:04:56:3c:73:aa:8d:d6:ae:de:65:23:a8:44:
         bc:91:5f:68:e0:8f:a4:2e:5e:41:fd:8c:01:87:39:ef:a9:6d:
         88:be:76:f6:ba:92:62:aa:bc:be:96:c1:7d:29:b5:7e:05:8e:
         99:37:49:22:4b:bb:33:b6:93:38:92:85:3e:63:77:c5:13:b7:
         f6:42:95:0f:6d:59:9a:24:09:3b:ee:03:aa:ec:29:32:5e:eb:
         c5:88:ae:4c:a7:77:3a:ab:fc:f3:7d:81:3e:ec:ca:03:12:34:
         a1:2a:1f:8f:7d:96:00:1e:6d:a0:56:3c:aa:f0:f9:a6:99:23:
         87:72:35:88:0c:40:97:b6:70:71:bb:2c:b0:f7:c9:3e:0d:02:
         db:71:eb:0e:1f:11:48:d3:be:2e:05:0e:33:35:3f:14:04:bf:
         16:83:ce:48:e1:c6:26:30:bd:a5:fa:98:1d:d6:45:96:b4:54:
         42:04:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:46 2026 by rpki-client