Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/095D41019F3992154D065C13A6A9B1D5F61325721046EFF947C870BC7002D182/0/323830333a3535303a3a2f33322d3430203d3e20323732313439.roa
File:                     323830333a3535303a3a2f33322d3430203d3e20323732313439.roa (raw, json)
Hash identifier:          TOLqt+BCwLZB5ymAqQ0w+Kug0kqj25BMvX4pLZicIo4=
Subject key identifier:   13:6C:D6:94:36:3B:A1:BE:D2:38:8E:A2:96:2A:62:9F:51:45:C4:9F
Certificate issuer:       /CN=3A360FE99D1806B83C9DB77F5A9BCA266B148C65
Certificate serial:       6A9FC9CEB6789DE615A6C98DBD8BEF1031663C7D
Authority key identifier: 3A:36:0F:E9:9D:18:06:B8:3C:9D:B7:7F:5A:9B:CA:26:6B:14:8C:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A360FE99D1806B83C9DB77F5A9BCA266B148C65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/095D41019F3992154D065C13A6A9B1D5F61325721046EFF947C870BC7002D182/0/323830333a3535303a3a2f33322d3430203d3e20323732313439.roa
Signing time:             Fri 08 May 2026 05:41:44 +0000
ROA not before:           Fri 08 May 2026 05:36:44 +0000
ROA not after:            Fri 07 May 2027 05:41:44 +0000
asID:                     272149
IP address blocks:        2803:550::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/095D41019F3992154D065C13A6A9B1D5F61325721046EFF947C870BC7002D182/0/3A360FE99D1806B83C9DB77F5A9BCA266B148C65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/095D41019F3992154D065C13A6A9B1D5F61325721046EFF947C870BC7002D182/0/3A360FE99D1806B83C9DB77F5A9BCA266B148C65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A360FE99D1806B83C9DB77F5A9BCA266B148C65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 20:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9f:c9:ce:b6:78:9d:e6:15:a6:c9:8d:bd:8b:ef:10:31:66:3c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A360FE99D1806B83C9DB77F5A9BCA266B148C65
        Validity
            Not Before: May  8 05:36:44 2026 GMT
            Not After : May  7 05:41:44 2027 GMT
        Subject: CN=136CD694363BA1BED2388EA2962A629F5145C49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:dd:3a:e3:2e:10:c6:ee:ee:0e:c0:19:1a:
                    28:05:6d:34:17:18:0e:06:47:cb:8b:04:8d:4e:0c:
                    9c:f8:05:fb:85:f5:66:d8:97:c8:50:51:a8:fc:f3:
                    38:2e:33:04:bd:4d:a8:1c:43:b8:f4:fa:c5:82:fb:
                    22:19:d6:ff:d2:73:cf:25:1f:d4:1c:1a:7f:2f:2d:
                    2d:73:4c:d5:aa:27:d5:74:8e:f5:67:7d:a5:3e:e1:
                    bd:ae:c4:f7:af:4a:7e:3c:23:e2:0b:a9:23:6e:e9:
                    2a:88:1c:e9:3a:3f:57:a8:8a:58:ae:46:b7:79:6b:
                    21:f2:63:61:21:92:83:76:d1:c1:d8:29:56:c7:c6:
                    65:c7:a5:bb:3b:c6:ce:55:21:a9:c6:f7:ae:c1:a0:
                    0f:a6:01:ff:48:0a:98:aa:00:03:7b:58:dc:6b:6f:
                    0a:5b:62:ce:ea:b0:2e:28:89:13:0a:f8:3f:c0:e2:
                    87:8f:2c:b3:b0:48:26:04:fc:72:57:bf:b3:dd:77:
                    0b:02:74:8d:2a:a8:8f:58:b8:5b:83:95:93:c9:ac:
                    ef:f5:97:79:0b:10:89:15:88:f0:a9:11:44:fa:ca:
                    50:ac:86:a8:12:a8:fd:80:d3:6b:52:17:11:29:b0:
                    82:39:e3:3a:1b:69:68:74:a7:e6:4f:86:a9:dc:7b:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6C:D6:94:36:3B:A1:BE:D2:38:8E:A2:96:2A:62:9F:51:45:C4:9F
            X509v3 Authority Key Identifier:
                keyid:3A:36:0F:E9:9D:18:06:B8:3C:9D:B7:7F:5A:9B:CA:26:6B:14:8C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/095D41019F3992154D065C13A6A9B1D5F61325721046EFF947C870BC7002D182/0/3A360FE99D1806B83C9DB77F5A9BCA266B148C65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A360FE99D1806B83C9DB77F5A9BCA266B148C65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/095D41019F3992154D065C13A6A9B1D5F61325721046EFF947C870BC7002D182/0/323830333a3535303a3a2f33322d3430203d3e20323732313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:550::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:84:69:0f:2b:90:24:ec:b0:6b:0f:33:6b:73:f8:6d:bb:57:
         0a:8c:a1:2e:fa:b8:1c:a1:53:03:cc:b7:d2:6d:2e:99:98:29:
         4d:eb:5b:d3:59:b9:65:4a:ce:59:8a:f4:ce:52:71:fc:71:b7:
         a9:3e:c9:32:14:7f:cc:b3:4d:8f:ca:28:7b:45:4a:ca:f7:7a:
         38:f0:e2:9b:43:6d:f3:5d:6d:15:63:21:dd:81:2f:50:d4:28:
         c1:f6:f0:f4:86:ff:d5:8c:0f:93:f0:7c:ae:3a:04:44:f8:cf:
         e1:76:f3:a8:d8:e2:2d:7c:5d:b5:45:32:05:c2:1c:d7:cf:3f:
         f2:b0:b9:65:2e:af:ee:f2:72:a6:3a:09:0e:09:19:70:51:a4:
         e3:89:3b:ad:75:e3:62:ed:54:99:02:c4:67:6e:60:0d:ad:79:
         7d:9f:88:27:e5:ce:92:e0:36:85:e6:31:0a:28:5b:42:e4:bc:
         31:87:b6:79:a8:ef:b0:fa:b1:eb:0d:27:28:5c:84:57:0f:50:
         b3:f4:a9:2a:50:2c:7e:78:2d:ef:a7:b7:0b:91:f1:c9:bb:44:
         62:ef:8e:84:12:74:b1:f5:df:6d:29:8e:7c:f0:8b:8c:aa:dd:
         a9:da:95:4a:76:c4:87:c0:de:0b:0a:58:98:c3:b3:3f:cf:19:
         a6:7e:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:00:45 2026 by rpki-client