Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33322d3438203d3e20323639383332.roa
File:                     323830333a6636303a3a2f33322d3438203d3e20323639383332.roa (raw, json)
Hash identifier:          63n8AsSj5iNBAl6zc6i6Wf1XNk8kHh5STbYUCKzAWaU=
Subject key identifier:   78:60:C0:AB:4D:56:A8:D0:F5:19:E3:B4:74:4D:C9:55:31:A1:22:45
Certificate issuer:       /CN=63AD082E201FA5D0985FD46C9DB7E461184583F4
Certificate serial:       4333377FB7409F8AF62981B21B3F47523B334605
Authority key identifier: 63:AD:08:2E:20:1F:A5:D0:98:5F:D4:6C:9D:B7:E4:61:18:45:83:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33322d3438203d3e20323639383332.roa
Signing time:             Thu 18 Jun 2026 15:48:30 +0000
ROA not before:           Thu 18 Jun 2026 15:43:30 +0000
ROA not after:            Thu 17 Jun 2027 15:48:30 +0000
asID:                     269832
IP address blocks:        2803:f60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 14 Jul 2026 11:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:33:37:7f:b7:40:9f:8a:f6:29:81:b2:1b:3f:47:52:3b:33:46:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63AD082E201FA5D0985FD46C9DB7E461184583F4
        Validity
            Not Before: Jun 18 15:43:30 2026 GMT
            Not After : Jun 17 15:48:30 2027 GMT
        Subject: CN=7860C0AB4D56A8D0F519E3B4744DC95531A12245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:00:dd:e4:8e:41:30:bc:c3:45:8f:a7:bc:
                    54:2d:a5:72:1c:b6:e7:6f:df:26:b0:8c:8e:8e:09:
                    65:a7:fd:c3:4b:04:28:b2:7e:10:19:fd:29:78:45:
                    bf:52:f3:42:98:57:ea:7b:cc:e3:bf:01:6b:4d:93:
                    4d:69:ca:79:43:91:d7:46:2a:ef:83:4e:f2:7d:fe:
                    a4:2f:66:db:fe:ab:df:bc:00:96:f8:16:11:27:45:
                    d3:9a:ef:7a:fc:0c:5b:9a:2a:2a:94:20:09:7c:d3:
                    d7:15:aa:50:52:f9:7b:6f:55:b1:ac:90:f1:46:79:
                    d2:77:4a:56:c9:99:50:92:a7:6b:68:cc:1d:a0:d8:
                    20:7a:49:42:aa:a4:5d:93:0d:7c:b8:a3:54:72:a9:
                    b7:fe:7e:cd:11:0d:cd:f3:de:45:28:d2:cc:79:fc:
                    54:54:18:7b:3c:cc:91:ba:04:21:5a:79:b6:24:4f:
                    a6:1e:e8:7a:8b:51:42:08:2e:9f:d5:06:43:50:29:
                    4e:8e:a1:ec:28:e4:56:b2:68:04:34:9a:d2:e1:f3:
                    aa:0f:ba:36:fd:56:d3:b6:10:76:70:df:36:5f:6a:
                    85:4e:86:b2:d0:d4:67:12:d8:0c:7f:81:7e:c1:7f:
                    fc:3c:69:6b:26:5e:b1:e0:94:22:0e:69:7a:cd:ae:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:C0:AB:4D:56:A8:D0:F5:19:E3:B4:74:4D:C9:55:31:A1:22:45
            X509v3 Authority Key Identifier:
                keyid:63:AD:08:2E:20:1F:A5:D0:98:5F:D4:6C:9D:B7:E4:61:18:45:83:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33322d3438203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:ae:9a:ce:36:af:f2:e7:db:24:cd:bd:53:08:4e:77:df:88:
         a6:aa:05:3c:ed:29:2c:a2:d6:64:a4:79:b8:38:1d:8a:f3:c6:
         61:b7:bf:5e:b2:25:53:08:e7:e3:b5:da:9a:8a:0d:13:14:3f:
         bb:c4:e3:6b:26:2a:10:37:02:b6:94:20:54:b3:3f:9c:0c:e8:
         24:10:70:02:40:03:5a:03:7f:16:81:ec:f2:d2:3a:f0:1e:31:
         1f:a2:66:dc:cd:e0:3e:1c:81:8c:4d:a5:11:71:63:d0:ae:08:
         3f:b9:61:cb:44:fe:14:f9:d0:2a:f2:54:49:12:4d:63:f3:69:
         7b:27:37:9a:52:37:e4:ab:98:b1:53:41:65:ad:1e:d6:33:22:
         e4:f8:2f:7a:73:ba:fe:6c:d9:4b:56:88:58:22:9c:af:36:51:
         50:12:33:db:46:fc:84:ef:58:3d:32:15:36:7a:07:f8:c2:85:
         06:d8:16:c3:d6:7c:ce:ba:31:c0:9c:59:53:fb:0f:bf:35:38:
         f1:cb:05:39:ff:b0:ab:e6:4a:59:6a:1b:a3:7d:13:00:fd:34:
         0e:7b:88:fa:a2:89:04:07:7d:43:8c:51:88:71:d8:5b:b3:4e:
         2d:45:24:12:73:9d:5e:49:21:95:7a:6b:df:61:bb:94:ce:20:
         ac:e7:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:58:06 2026 by rpki-client