Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a633030303a3a2f33342d3334203d3e20323732303533.roa
File:                     323830333a356431303a633030303a3a2f33342d3334203d3e20323732303533.roa (raw, json)
Hash identifier:          MqqBXWFzUP4xqvSSUlmHr88sdayTUZ9MdmJZ/a42Ch8=
Subject key identifier:   33:C5:93:91:20:A8:1B:BF:1E:78:14:87:E6:F7:B4:63:B9:FF:A6:16
Certificate issuer:       /CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
Certificate serial:       6F4760AF27EE6ACB6E8B4202EC9CF8ED3F26E070
Authority key identifier: F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a633030303a3a2f33342d3334203d3e20323732303533.roa
Signing time:             Mon 23 Mar 2026 17:50:01 +0000
ROA not before:           Mon 23 Mar 2026 17:45:01 +0000
ROA not after:            Mon 22 Mar 2027 17:50:01 +0000
asID:                     272053
IP address blocks:        2803:5d10:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:47:60:af:27:ee:6a:cb:6e:8b:42:02:ec:9c:f8:ed:3f:26:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
        Validity
            Not Before: Mar 23 17:45:01 2026 GMT
            Not After : Mar 22 17:50:01 2027 GMT
        Subject: CN=33C5939120A81BBF1E781487E6F7B463B9FFA616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:de:36:6f:1f:15:b4:ba:4e:49:99:f6:be:
                    a6:33:7a:6d:ec:c6:77:4f:94:22:f8:a3:d8:45:37:
                    e6:cc:d1:d6:ac:57:11:fd:ae:9d:6f:66:ef:5d:72:
                    87:d8:1b:eb:69:57:e5:91:34:a9:11:21:3a:0b:e6:
                    54:39:38:23:44:59:35:0f:51:11:b5:3f:45:a1:88:
                    e9:5b:27:61:63:93:35:8a:c2:be:81:27:4c:95:60:
                    ea:b4:57:e8:ac:78:6b:fc:9c:a7:be:ed:d7:de:3d:
                    39:ce:91:35:15:17:0c:19:e1:6d:cd:63:48:d4:a5:
                    98:15:57:64:5e:a7:b1:1e:03:75:bf:a7:28:ee:72:
                    b6:a8:d4:25:46:84:91:15:d0:b0:c6:95:9b:27:29:
                    99:73:33:c9:9c:69:d6:28:a9:c1:f0:d2:08:9b:25:
                    04:82:50:cf:96:42:7e:8a:77:8c:8b:44:7c:1f:a9:
                    21:06:e1:aa:b8:fb:9c:56:26:84:1d:66:2e:e6:3d:
                    ff:6e:fb:bb:aa:b5:2e:47:70:ca:dc:32:0e:d9:1f:
                    b9:c0:7f:58:91:fc:09:c4:67:75:9d:3d:bf:10:f1:
                    4c:df:4d:61:7e:24:95:d1:fa:d1:2c:b3:3d:8a:6b:
                    93:9a:dd:0b:97:11:5f:ec:1b:a5:de:9f:17:f4:4b:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C5:93:91:20:A8:1B:BF:1E:78:14:87:E6:F7:B4:63:B9:FF:A6:16
            X509v3 Authority Key Identifier:
                keyid:F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a633030303a3a2f33342d3334203d3e20323732303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d10:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:46:2f:a0:18:b5:5d:6b:25:44:3e:f0:fd:a0:ac:39:cd:c6:
         ac:36:4e:2f:e3:b4:db:5c:0a:60:99:96:6c:e3:79:19:a1:30:
         7a:dc:fa:df:25:44:9a:5c:cc:dc:f1:c0:ea:36:ab:5e:0c:5a:
         b7:42:54:56:98:c5:1d:55:4f:4e:de:4e:a8:6f:7c:57:9d:ea:
         f5:1f:62:39:09:48:e8:a4:b1:9a:10:ed:f6:96:a5:5c:e6:18:
         f5:03:89:ab:4d:01:06:fc:5a:78:2a:a6:30:b0:04:1a:46:91:
         62:cf:c5:68:dd:b5:6a:86:39:0e:e7:f8:6b:e4:32:a9:13:a4:
         be:c5:b7:d7:1b:a7:0b:f1:4e:77:16:4a:6e:fe:c7:cf:59:34:
         f0:17:bc:1e:09:85:40:3f:59:d4:1a:ef:12:a4:88:db:f6:36:
         73:0f:6e:a0:a7:82:2d:5c:c3:e0:ed:2b:f0:30:81:0a:33:05:
         43:68:f8:e3:a6:73:15:8a:e9:09:85:75:4f:10:13:df:9b:bb:
         9e:9a:a0:54:40:21:80:e8:f0:b3:00:1b:9c:2e:0c:e9:f1:32:
         45:09:81:5f:4b:c2:90:91:40:5e:2a:2e:76:5f:a2:59:45:59:
         7e:cf:ed:37:66:8d:5b:49:4d:91:fd:8b:60:09:b8:c5:55:14:
         69:a5:17:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:08:34 2026 by rpki-client