Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/323830333a653335303a3a2f33322d3438203d3e20323733383839.roa
File:                     323830333a653335303a3a2f33322d3438203d3e20323733383839.roa (raw, json)
Hash identifier:          gWgGBzqeueW9tjpgtUnCIEVvSujUyIYvYovapmselPI=
Subject key identifier:   0B:47:EE:64:71:A8:78:90:C4:1D:CE:A0:75:11:65:46:21:F0:3D:50
Certificate issuer:       /CN=64BC48E3A6135CF82F39FBD21751AF299756F257
Certificate serial:       1E7ABAF1315EEEEE87D5BE590561C1C6D880780D
Authority key identifier: 64:BC:48:E3:A6:13:5C:F8:2F:39:FB:D2:17:51:AF:29:97:56:F2:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64BC48E3A6135CF82F39FBD21751AF299756F257.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/323830333a653335303a3a2f33322d3438203d3e20323733383839.roa
Signing time:             Wed 10 Jun 2026 04:47:15 +0000
ROA not before:           Wed 10 Jun 2026 04:42:15 +0000
ROA not after:            Wed 09 Jun 2027 04:47:15 +0000
asID:                     273889
IP address blocks:        2803:e350::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/64BC48E3A6135CF82F39FBD21751AF299756F257.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/64BC48E3A6135CF82F39FBD21751AF299756F257.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64BC48E3A6135CF82F39FBD21751AF299756F257.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7a:ba:f1:31:5e:ee:ee:87:d5:be:59:05:61:c1:c6:d8:80:78:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64BC48E3A6135CF82F39FBD21751AF299756F257
        Validity
            Not Before: Jun 10 04:42:15 2026 GMT
            Not After : Jun  9 04:47:15 2027 GMT
        Subject: CN=0B47EE6471A87890C41DCEA07511654621F03D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:4d:dd:4a:ae:43:23:87:a5:9c:16:e3:9a:
                    8c:80:f0:6a:26:4a:c0:de:ae:e1:e7:9e:5e:69:9d:
                    0e:22:05:02:5b:34:8e:21:a3:7d:10:95:0c:bf:31:
                    e7:79:23:98:ea:c0:8f:f3:f0:34:9e:0e:3a:05:e7:
                    64:54:2f:03:dc:6d:89:56:03:45:15:9b:35:0f:cb:
                    3e:24:c9:06:fa:c0:a6:00:fe:4e:b5:38:60:8f:73:
                    a8:c2:1a:cd:fb:e7:30:ce:ff:60:dc:94:59:be:30:
                    95:7d:0c:ca:39:63:24:f5:a9:75:91:ce:09:d7:05:
                    c8:d5:e0:25:fb:77:33:9b:9b:e9:23:93:5c:d3:70:
                    9f:6e:e4:00:bb:f4:d2:94:03:6a:d5:e2:a2:d8:5a:
                    5c:a3:ef:00:0b:b8:9a:a9:3f:91:29:7b:0f:ef:8a:
                    03:d7:57:d3:64:ff:a9:13:78:fe:7a:b4:b9:6c:ed:
                    60:96:e7:e0:3f:e8:0e:6a:0f:86:cd:7c:aa:e4:01:
                    3e:8f:97:bb:de:aa:06:30:cc:93:49:ad:dc:d8:c5:
                    13:48:cc:45:fc:e8:b8:e8:91:3d:72:0d:e8:ef:01:
                    7c:19:84:a8:d3:5d:4b:b9:8b:19:33:27:5f:17:7e:
                    8f:d4:53:6b:1d:01:af:6a:b5:cc:4f:d3:ae:59:16:
                    60:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:47:EE:64:71:A8:78:90:C4:1D:CE:A0:75:11:65:46:21:F0:3D:50
            X509v3 Authority Key Identifier:
                keyid:64:BC:48:E3:A6:13:5C:F8:2F:39:FB:D2:17:51:AF:29:97:56:F2:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/64BC48E3A6135CF82F39FBD21751AF299756F257.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64BC48E3A6135CF82F39FBD21751AF299756F257.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/323830333a653335303a3a2f33322d3438203d3e20323733383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e350::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:48:61:61:d2:7a:ee:b5:e3:20:93:49:68:ae:93:df:e3:76:
         b9:cb:bd:2e:d5:b2:23:32:67:11:40:34:37:f0:4b:7c:28:65:
         87:9f:d9:18:a5:48:3e:17:81:f3:e3:a8:f4:bf:4d:a0:e1:04:
         ba:10:57:ae:d1:a0:54:0f:af:b2:64:af:57:e5:a1:c2:b4:5e:
         22:a7:92:47:47:61:66:2c:72:ff:db:ef:f3:56:24:e0:b7:15:
         aa:de:54:6c:94:b2:6d:1c:cd:c1:dd:6a:ad:08:1d:4d:c9:7b:
         e2:e1:73:9b:0b:70:64:6a:a8:67:94:7a:b3:b2:e6:3b:c5:16:
         04:6e:39:57:a1:8b:b1:21:57:b3:a1:f8:88:d1:57:f1:ac:3a:
         9f:1c:01:42:ea:0f:3b:e9:17:62:40:f1:01:e7:17:ee:f5:7c:
         49:75:06:78:b7:f5:5d:98:76:8d:a3:a4:09:aa:eb:10:1f:16:
         ad:c9:7e:08:35:8d:56:c5:c2:43:94:d9:d9:f7:d8:db:9f:df:
         5c:23:90:65:8c:bf:94:c8:9c:ee:79:55:93:5c:1c:74:c9:79:
         1d:5d:b0:e8:3a:c0:dd:48:34:90:96:83:9c:73:b2:22:94:3e:
         e7:31:74:f4:e7:c8:94:31:28:16:b1:b3:79:d0:06:e6:ae:cd:
         37:4a:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:09:02 2026 by rpki-client