Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/323830333a656435303a3a2f33322d3332203d3e20323733383639.roa
File:                     323830333a656435303a3a2f33322d3332203d3e20323733383639.roa (raw, json)
Hash identifier:          CNiO4VOmPogw9VYBp1yawnWAO8aulgaG7TcaVUx+g7Q=
Subject key identifier:   6C:EB:4C:EF:42:01:49:FE:61:C3:76:7A:45:7E:C2:C2:62:DF:DF:5B
Certificate issuer:       /CN=2522843848570F9C59A0A97D0D85367C510D573A
Certificate serial:       292BBE84CD62A21F883E6F91CE60577C6F2557
Authority key identifier: 25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/323830333a656435303a3a2f33322d3332203d3e20323733383639.roa
Signing time:             Fri 24 Jul 2026 23:55:00 +0000
ROA not before:           Fri 24 Jul 2026 23:50:00 +0000
ROA not after:            Fri 23 Jul 2027 23:55:00 +0000
asID:                     273869
IP address blocks:        2803:ed50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2b:be:84:cd:62:a2:1f:88:3e:6f:91:ce:60:57:7c:6f:25:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2522843848570F9C59A0A97D0D85367C510D573A
        Validity
            Not Before: Jul 24 23:50:00 2026 GMT
            Not After : Jul 23 23:55:00 2027 GMT
        Subject: CN=6CEB4CEF420149FE61C3767A457EC2C262DFDF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:30:b3:bf:75:45:da:c7:9d:5e:3d:5f:9a:
                    9c:bb:7b:48:45:77:ce:8c:e5:c3:c3:4a:fe:0a:35:
                    59:35:cc:70:3d:85:f1:b4:7f:a7:38:1b:1c:61:3d:
                    45:da:b1:53:ee:9e:db:19:89:d9:ce:58:89:11:07:
                    a8:45:23:73:17:b6:d8:c9:0a:c3:0b:1c:ff:81:ba:
                    b9:81:a0:9e:66:24:6a:f7:0f:13:52:e8:8d:8c:fd:
                    e7:00:12:0d:4c:ac:21:06:5d:e7:da:6f:9b:e3:c8:
                    e6:17:fb:f2:a8:f0:f6:14:a9:3a:70:0e:5c:21:13:
                    1f:ec:38:e6:0b:84:25:b9:8f:2b:f1:1e:e5:4a:2b:
                    6b:a7:76:50:38:40:48:9e:68:cd:32:6c:a0:37:e1:
                    7b:b8:e5:f6:22:1f:98:98:a6:f1:00:e7:6e:51:7f:
                    99:d0:7f:df:27:d0:ec:69:89:42:3f:98:18:d9:eb:
                    0c:30:33:f8:e6:fd:3f:d7:e1:51:db:ae:df:00:fb:
                    f0:38:20:e4:c3:71:99:bc:03:f4:53:76:19:7a:9d:
                    3c:ea:53:67:89:2e:81:dc:d5:ca:8a:9a:91:ff:84:
                    1a:42:34:02:c0:9a:1f:b0:55:22:10:ae:11:a9:af:
                    76:ef:44:dc:66:ac:e3:e7:31:33:96:81:89:6e:7d:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EB:4C:EF:42:01:49:FE:61:C3:76:7A:45:7E:C2:C2:62:DF:DF:5B
            X509v3 Authority Key Identifier:
                keyid:25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/323830333a656435303a3a2f33322d3332203d3e20323733383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ed50::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:4c:76:63:38:f0:b5:15:d6:6e:77:cb:80:2a:30:46:88:53:
         05:87:d7:93:9f:2f:ce:2f:00:b5:bd:98:e0:f2:c8:0b:06:c0:
         4b:3b:2c:64:aa:f4:c7:f2:8e:33:bc:34:42:31:ce:86:07:ba:
         49:d3:d8:14:11:30:33:2c:62:89:36:d7:10:cb:65:62:f8:2b:
         7a:67:6d:8b:18:ec:ec:21:29:c5:f2:ad:7f:7e:b5:97:2f:d5:
         4c:71:e6:03:5b:40:ca:49:eb:f5:3f:47:6d:d8:8b:57:f0:32:
         8b:d2:5b:06:66:24:9e:87:3b:70:ef:87:19:68:df:7b:1b:c1:
         3d:c3:e6:b6:42:d1:ef:2e:61:6e:2e:ec:e8:59:39:3b:2c:4b:
         01:53:9c:72:ca:66:a8:ab:1d:cf:b8:b6:70:fa:19:b9:e5:70:
         69:d3:64:4e:50:20:d1:0f:c2:8a:85:39:2e:ea:25:5d:ba:96:
         38:b4:06:d8:e1:63:15:cf:b0:76:13:fa:0c:df:d0:fc:8a:60:
         0b:ce:73:58:91:37:84:1d:0d:cd:88:1b:26:2f:43:52:15:e0:
         45:d2:25:48:7a:f6:84:22:a8:4f:f3:d8:5c:50:23:6a:e2:88:
         16:1f:c6:0c:fc:ce:52:c7:47:4e:42:6e:a2:6e:36:3e:8b:fa:
         b1:f9:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:07:24 2026 by rpki-client