Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3438203d3e203532323632.roa
File:                     323830333a386434333a3a2f33322d3438203d3e203532323632.roa (raw, json)
Hash identifier:          QdWtNiagpHYLAuzrOQetz4/Bk97Pc3TGG5Z8u6rUgMY=
Subject key identifier:   67:2B:AC:75:D2:A9:84:80:CB:74:FC:B5:55:F1:F5:3D:CC:41:25:EE
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       1EAC8CEDD2D9DE983AC4B27B3F136629A3F9B60F
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3438203d3e203532323632.roa
Signing time:             Tue 30 Jun 2026 18:50:22 +0000
ROA not before:           Tue 30 Jun 2026 18:45:22 +0000
ROA not after:            Tue 29 Jun 2027 18:50:22 +0000
asID:                     52262
IP address blocks:        2803:8d43::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ac:8c:ed:d2:d9:de:98:3a:c4:b2:7b:3f:13:66:29:a3:f9:b6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Jun 30 18:45:22 2026 GMT
            Not After : Jun 29 18:50:22 2027 GMT
        Subject: CN=672BAC75D2A98480CB74FCB555F1F53DCC4125EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:4d:b5:04:c9:cd:07:1c:8b:14:6c:93:ec:
                    a9:69:c2:a6:3f:a3:c8:50:4b:6a:78:5c:47:4b:2f:
                    95:22:37:37:5d:53:e6:41:1e:4e:26:b9:2f:78:f1:
                    df:4f:f8:99:46:43:05:4c:1c:0f:5c:ee:e7:0b:71:
                    1f:f6:1b:e5:85:06:71:c8:ba:3c:cd:20:db:bd:6d:
                    ee:b0:78:c9:4c:3f:ed:68:6e:c9:ac:ab:f2:79:6e:
                    1d:0a:00:00:00:07:c8:a8:4c:03:8d:39:79:1c:e2:
                    34:27:83:34:69:c0:ea:d8:48:2a:47:4b:d1:62:24:
                    de:7e:bc:0d:49:ea:ce:dc:d1:c7:50:27:f8:ca:0a:
                    87:d5:2d:09:03:e7:8d:cc:e1:d9:80:29:bb:09:b9:
                    6f:27:79:ba:ff:d1:64:83:ce:d9:a8:27:df:00:01:
                    45:3c:24:9b:d5:af:10:75:69:49:83:f2:fc:03:4c:
                    01:7a:33:0d:42:42:ea:13:e4:e2:dc:d3:2d:a5:aa:
                    2e:9a:54:99:d5:13:ae:e7:94:f2:c9:cd:2c:81:58:
                    1c:db:e5:3a:d9:67:b8:71:ef:c7:02:c5:21:d4:6b:
                    b6:06:71:04:58:84:3a:31:c7:64:c5:fa:79:6d:bd:
                    94:28:e6:37:57:2b:7f:94:46:24:6b:78:67:c6:4d:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2B:AC:75:D2:A9:84:80:CB:74:FC:B5:55:F1:F5:3D:CC:41:25:EE
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3438203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d43::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:bc:61:b2:3e:ea:16:ee:bd:7e:62:65:fa:98:75:94:1d:
         b0:d5:16:5b:11:cb:b5:19:db:e9:52:aa:34:1f:10:9f:ca:b6:
         67:92:ef:bc:69:16:14:8a:0f:37:1a:28:97:27:3d:41:48:b3:
         8b:1c:56:2e:0d:7e:a0:6c:4a:a8:83:36:a8:b8:e4:24:92:40:
         58:40:69:13:a8:d5:d8:45:c6:f3:fa:74:ae:db:a1:ba:33:19:
         00:1e:09:13:af:4b:91:47:84:97:d1:a0:9d:56:d0:44:79:3a:
         2e:2c:c7:0e:f6:6e:d6:61:86:83:da:1c:79:09:35:f5:14:92:
         90:24:c0:21:7c:76:6a:a9:35:a1:7f:c9:dd:b0:ed:88:77:f2:
         ca:55:2c:2d:41:8a:7e:d3:0d:81:cd:1d:0e:e4:72:24:e3:88:
         d7:1b:f8:9e:89:e9:1f:d5:ec:fe:84:5e:bc:a9:74:de:7d:f9:
         4c:5a:c6:11:0f:cb:99:9d:f9:63:ec:b6:59:58:e2:1d:12:63:
         24:aa:f7:be:d6:ac:2d:e5:c5:f8:79:1d:31:b5:fe:ff:90:81:
         59:62:42:e3:98:1e:1d:d5:ba:27:e2:ce:af:13:6a:f8:41:60:
         74:59:cb:28:13:89:e9:2a:20:bd:72:7d:f2:e4:d5:26:4a:f1:
         83:68:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:11 2026 by rpki-client