Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6130303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a6130303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          tlB1nvk4XS8F5CGRiRUREWZRaaA6XJrdio2ojzPw5h8=
Subject key identifier:   A5:7E:D3:FB:98:E5:8F:D1:E3:46:70:A1:79:86:52:EF:49:DF:CC:0B
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       30568A2C6A71E509A95A9F5C61AE45A8C93D6901
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6130303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 26 Jun 2026 02:49:53 +0000
ROA not before:           Fri 26 Jun 2026 02:44:53 +0000
ROA not after:            Fri 25 Jun 2027 02:49:53 +0000
asID:                     273883
IP address blocks:        2803:4350:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:56:8a:2c:6a:71:e5:09:a9:5a:9f:5c:61:ae:45:a8:c9:3d:69:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Jun 26 02:44:53 2026 GMT
            Not After : Jun 25 02:49:53 2027 GMT
        Subject: CN=A57ED3FB98E58FD1E34670A1798652EF49DFCC0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c2:5a:41:ef:2a:7d:c3:31:f3:0e:b8:a4:e4:
                    9d:8c:3d:88:1b:bb:44:72:63:a0:52:22:9e:a4:d7:
                    52:ee:7b:ac:10:5f:d6:a7:29:47:d8:d0:fc:c1:fd:
                    81:76:cb:35:2a:48:cd:18:5b:a4:4f:0b:6a:92:c7:
                    fd:ec:d3:6e:cd:7f:ee:1d:b8:21:2a:07:86:29:07:
                    a8:8d:bd:fd:99:a0:13:df:d2:c4:53:ee:e5:77:2a:
                    6b:09:0b:d1:6f:61:b0:bf:f0:79:8a:62:63:a3:89:
                    be:85:4d:df:24:32:e6:ca:62:49:52:b5:5e:61:3d:
                    03:a2:63:80:1e:8e:af:64:d7:90:9a:dd:28:c4:1d:
                    e9:c2:20:69:df:04:83:7c:97:ff:ef:9b:4e:5f:3c:
                    f5:8d:9f:e7:12:64:55:25:c4:a5:18:5a:92:ab:25:
                    71:de:66:ed:93:12:53:ab:3b:a7:c9:47:82:d6:c8:
                    70:d9:f4:df:5e:88:9c:d7:3c:70:c1:da:68:0d:25:
                    e2:3e:37:77:36:af:c6:92:dd:12:ba:1d:f2:9c:18:
                    ab:f8:09:cf:e3:da:45:d7:17:bb:80:7b:34:d0:fc:
                    85:3f:1a:07:15:f7:89:7b:66:8d:b5:eb:70:4b:b5:
                    79:76:a2:fb:38:1b:00:5b:fb:65:bd:c3:c7:73:84:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:D3:FB:98:E5:8F:D1:E3:46:70:A1:79:86:52:EF:49:DF:CC:0B
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6130303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:af:16:4a:82:79:3f:cc:63:1c:c3:dd:40:b6:e8:aa:80:0e:
         76:1e:96:58:c3:e9:83:c0:f1:61:02:15:76:b2:71:55:55:95:
         c9:a4:eb:88:cf:c3:b9:65:7e:5c:53:d8:6a:45:02:23:38:21:
         8a:96:ae:6a:5c:e8:dd:a4:60:4a:72:46:d6:38:4e:61:54:4d:
         b1:9f:63:df:b4:e2:91:5d:6c:28:0c:5a:c5:b5:c3:c2:df:6a:
         18:6d:70:a8:d1:15:02:56:ec:12:33:f3:01:fd:e1:8e:8c:ee:
         80:4e:e0:1b:5d:76:7f:be:e4:da:3e:2d:a3:77:6c:51:79:db:
         31:3f:1c:60:f8:1c:e4:f2:8a:09:de:f3:04:ea:80:f4:6c:44:
         d2:3e:de:2e:a4:91:55:ea:d6:f9:55:73:2e:1d:e8:15:e5:3b:
         c0:9b:5d:9d:9f:ac:5a:9f:7b:54:66:02:23:94:63:7d:86:03:
         d7:96:c8:84:56:77:fe:7c:21:b9:13:4f:5d:d7:86:79:4d:62:
         ce:89:88:8a:59:fb:08:59:57:80:6c:6e:4b:66:20:3f:a2:5b:
         50:4d:4d:b9:55:10:36:db:e3:e8:ae:3a:c5:3a:56:c7:84:01:
         0d:e7:ed:80:2d:cb:02:57:f3:fd:ac:c8:9d:bd:af:94:b7:19:
         b6:a9:83:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:25:54 2026 by rpki-client