Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3230303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3230303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          5F0ronUzIPZVjRix9IoG2/lyCecNmCnCaYRuz5DtXJE=
Subject key identifier:   9F:23:18:58:EE:AC:57:14:8D:58:48:F2:33:7E:DF:8C:9E:17:05:5F
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       20F29A472EB060555390991174CC80CBFEE3B0CD
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3230303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 26 Jun 2026 02:49:54 +0000
ROA not before:           Fri 26 Jun 2026 02:44:54 +0000
ROA not after:            Fri 25 Jun 2027 02:49:54 +0000
asID:                     273883
IP address blocks:        2803:4350:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f2:9a:47:2e:b0:60:55:53:90:99:11:74:cc:80:cb:fe:e3:b0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Jun 26 02:44:54 2026 GMT
            Not After : Jun 25 02:49:54 2027 GMT
        Subject: CN=9F231858EEAC57148D5848F2337EDF8C9E17055F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:6c:40:92:e6:5c:58:3d:37:78:8c:ec:af:
                    91:31:b6:3d:24:2e:a3:33:a7:15:06:29:0b:38:75:
                    18:74:25:51:90:da:ee:7e:ae:3e:02:54:cf:fa:c9:
                    4b:89:b4:99:3f:c4:90:6c:5d:01:fc:5d:2d:59:73:
                    5e:73:62:49:f5:c4:07:ce:0c:82:8f:da:2d:4c:17:
                    d0:59:c6:a7:70:30:e7:8f:a3:9d:b4:ed:42:0e:78:
                    3b:23:53:30:f3:55:6b:7a:54:e4:be:23:55:67:71:
                    1e:63:83:fb:d6:c0:b6:2e:e4:6a:ad:99:4c:2c:40:
                    76:44:3a:bb:7f:4e:28:76:b3:42:8d:44:ee:62:f9:
                    d4:fc:cc:e4:b5:97:fb:50:ec:55:63:bd:41:52:db:
                    8f:70:c4:21:3b:13:11:70:43:b2:3a:b8:82:b0:2b:
                    03:02:f4:b7:dd:96:e8:34:4e:da:1d:3d:40:ae:b9:
                    dd:ef:47:d4:20:13:f0:5b:fc:85:f8:e4:9f:87:9c:
                    5f:57:10:52:12:55:1f:5a:6d:4b:e0:0e:b9:9e:ad:
                    e8:22:df:9f:e1:e7:91:a8:89:b5:ea:1f:d3:e3:c2:
                    cd:ba:c7:ff:51:9b:f9:fb:4d:0a:ee:77:c3:5a:ab:
                    c4:a1:f7:b0:7b:77:58:01:a3:85:68:be:e7:67:2b:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:23:18:58:EE:AC:57:14:8D:58:48:F2:33:7E:DF:8C:9E:17:05:5F
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3230303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:0f:21:3b:32:57:85:80:95:b0:93:4f:64:53:83:1c:c2:a7:
         f3:e5:32:5c:c8:66:a5:10:fc:07:0c:12:39:40:37:d1:03:0f:
         83:53:82:65:2e:28:2a:58:f3:46:56:47:41:87:31:79:65:eb:
         1b:ff:fa:63:88:77:58:ce:9f:74:bc:45:d7:f5:a7:3a:8f:87:
         2a:97:6f:c0:73:c9:62:c8:cb:5b:bb:3a:f2:46:6a:a9:32:9e:
         2a:19:d8:3a:50:74:a7:75:ac:06:58:b6:7f:7a:a0:78:b7:1c:
         f4:fb:86:64:48:60:1a:be:b8:f2:0a:9c:c2:6a:23:7c:c1:ec:
         c5:5c:b8:e0:4e:0f:a7:93:19:41:59:4e:9c:82:d3:ed:c9:d4:
         1b:87:47:7b:4f:61:cb:53:fa:8a:12:cd:25:56:12:ca:49:b8:
         66:19:4e:fb:7c:e1:95:93:99:fa:42:a1:02:49:66:02:f4:2a:
         ef:e1:91:6a:a7:9e:6e:e7:d8:40:20:e3:d6:eb:e4:f0:04:d2:
         92:7f:84:14:7f:05:61:67:b8:6b:66:e4:64:7c:6e:b0:56:9f:
         79:16:f3:57:33:bc:96:b1:ef:6b:e9:51:ca:61:52:ac:1e:81:
         a7:9f:22:19:50:60:23:d0:a7:be:40:fd:71:8a:8e:6d:df:fe:
         d2:5f:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:25:41 2026 by rpki-client