Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a3a2f33332d3333203d3e20323732303533.roa
File:                     323830333a356431303a3a2f33332d3333203d3e20323732303533.roa (raw, json)
Hash identifier:          wCfWuRAUfzWYjaBmTrEREnDw5gScrz6yDCbP5ifOTow=
Subject key identifier:   58:7E:48:7C:89:E0:19:55:DF:0A:27:65:7D:28:78:8C:A1:7F:07:EC
Certificate issuer:       /CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
Certificate serial:       350B2856C995911BE5C18EE1A4BBD5E6DF3720A0
Authority key identifier: F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a3a2f33332d3333203d3e20323732303533.roa
Signing time:             Mon 23 Mar 2026 17:50:01 +0000
ROA not before:           Mon 23 Mar 2026 17:45:01 +0000
ROA not after:            Mon 22 Mar 2027 17:50:01 +0000
asID:                     272053
IP address blocks:        2803:5d10::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0b:28:56:c9:95:91:1b:e5:c1:8e:e1:a4:bb:d5:e6:df:37:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
        Validity
            Not Before: Mar 23 17:45:01 2026 GMT
            Not After : Mar 22 17:50:01 2027 GMT
        Subject: CN=587E487C89E01955DF0A27657D28788CA17F07EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:4f:26:01:ae:db:02:37:91:74:d4:e0:3b:
                    4f:4b:c0:ff:cd:d8:41:2d:10:fd:23:61:4f:4e:05:
                    6f:3f:4a:c6:cc:df:6b:20:fb:2d:c3:c3:cf:fe:44:
                    3d:23:12:32:76:db:4a:3a:d7:4d:fb:4b:d9:53:21:
                    77:86:f4:5c:56:7a:ce:a7:db:8b:42:e3:14:30:3f:
                    70:9f:19:5f:66:2d:49:d4:c3:da:a4:a6:97:5e:63:
                    87:1c:6a:5c:10:3f:d3:3b:25:02:e7:cf:f6:c7:34:
                    60:c9:1d:99:aa:7d:72:4d:28:71:8f:67:e7:a8:56:
                    9c:fe:68:f5:d4:4a:00:34:4d:62:4e:7a:f5:a6:47:
                    d0:98:0b:f8:f9:50:36:ec:da:af:a1:c2:ed:2d:07:
                    e0:70:47:8d:1e:b6:a4:48:8a:39:d0:0d:93:eb:44:
                    f5:5e:62:18:e1:9e:68:0e:0e:e1:3f:0b:8a:13:ae:
                    f7:72:34:15:21:f6:81:d3:1b:ff:f6:c3:2e:14:cd:
                    47:9b:04:04:5a:fa:15:11:55:d4:f5:88:a2:45:0d:
                    11:0e:20:9f:81:d5:a9:88:cf:75:cd:56:06:16:ed:
                    a3:89:a1:ce:1c:e2:da:3e:5b:a2:db:2f:5b:3e:e3:
                    f4:f0:d8:ae:01:06:f1:3b:7e:38:27:3e:2b:ef:53:
                    10:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:48:7C:89:E0:19:55:DF:0A:27:65:7D:28:78:8C:A1:7F:07:EC
            X509v3 Authority Key Identifier:
                keyid:F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a3a2f33332d3333203d3e20323732303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d10::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:bf:c0:eb:34:df:6a:17:5e:55:7f:5c:f6:7f:27:51:31:da:
         8e:92:49:cf:6f:4a:97:1d:2e:ea:89:6d:89:1f:91:80:af:17:
         b3:55:99:f0:f9:fd:2a:07:11:30:89:c9:43:80:d5:a5:49:b9:
         94:d1:71:75:db:59:61:7f:a7:28:7e:31:3f:94:a5:8f:33:1d:
         8b:8f:2b:32:40:ac:c9:4f:83:c8:cf:ae:f9:93:13:7c:54:8f:
         f1:e6:6a:36:6b:1b:b9:b6:40:42:01:56:77:2a:2e:c9:79:91:
         09:35:f8:6b:3c:40:74:2c:f7:e2:23:de:3d:e7:f3:00:23:81:
         7c:43:7b:44:b0:60:e5:4b:cf:ed:91:95:3b:f2:54:a3:55:55:
         f9:ac:a3:ca:75:c5:98:28:67:1d:03:5a:ce:e9:f4:51:49:39:
         2e:58:fe:85:21:8e:33:cc:22:52:62:53:ff:1c:67:05:af:1d:
         d5:68:b8:ae:9d:f9:4d:07:99:c9:9c:7a:79:78:26:92:4f:1c:
         09:92:f8:c8:b8:77:8a:d6:d4:60:86:49:13:82:ea:89:ea:dc:
         65:27:f9:48:4f:5a:05:6d:74:16:7f:cf:9e:78:bf:ad:a5:6b:
         b1:28:cd:ef:fa:83:4a:a6:1d:43:aa:2d:9f:37:4a:ad:40:2d:
         b9:6d:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:08:35 2026 by rpki-client