Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/323830333a6664303a3a2f33322d3438203d3e20323734323530.roa
File:                     323830333a6664303a3a2f33322d3438203d3e20323734323530.roa (raw, json)
Hash identifier:          Dg82iQqu/frGmSxw7HUHKquhfezTw0HMMXg99KLdfZI=
Subject key identifier:   61:74:69:02:0A:FA:E9:C5:8D:4F:76:51:84:D1:22:BD:25:09:12:9C
Certificate issuer:       /CN=2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A
Certificate serial:       7A700B0F12439CB38E6CDDFF8AF83497305B8EB7
Authority key identifier: 2B:26:AB:9E:8E:84:10:FB:48:00:8E:CD:E6:D9:DB:82:F8:39:A1:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/323830333a6664303a3a2f33322d3438203d3e20323734323530.roa
Signing time:             Wed 18 Mar 2026 16:05:01 +0000
ROA not before:           Wed 18 Mar 2026 16:00:01 +0000
ROA not after:            Wed 17 Mar 2027 16:05:01 +0000
asID:                     274250
IP address blocks:        2803:fd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:70:0b:0f:12:43:9c:b3:8e:6c:dd:ff:8a:f8:34:97:30:5b:8e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A
        Validity
            Not Before: Mar 18 16:00:01 2026 GMT
            Not After : Mar 17 16:05:01 2027 GMT
        Subject: CN=617469020AFAE9C58D4F765184D122BD2509129C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:69:62:88:42:38:65:61:d3:4c:fb:7d:84:
                    d1:9f:70:ff:e7:8a:0a:e2:b8:d9:c4:bf:c8:0a:f1:
                    41:7b:f9:e8:bc:2d:b8:0d:ac:9d:a7:90:5f:52:9c:
                    ac:91:25:91:b5:34:96:f2:41:7a:e7:10:ab:08:5f:
                    be:b2:98:06:97:c8:a4:f7:d4:df:68:bc:e3:cf:9e:
                    12:ca:4f:76:95:56:6c:ec:1d:db:a1:b1:09:9a:f4:
                    a8:b8:54:09:79:05:ad:b4:8b:9c:64:91:a0:50:62:
                    01:43:f1:f5:d0:05:00:64:ff:43:56:de:b1:6a:f5:
                    00:78:bb:39:8a:98:3d:6f:8e:83:f8:24:31:c5:99:
                    29:83:25:6d:38:6a:1b:b6:83:12:99:a3:09:e0:5b:
                    63:a7:95:f5:16:02:49:97:c6:a6:42:8d:22:d6:52:
                    a9:d2:c1:4c:18:d1:3b:7b:eb:c1:64:dd:66:ba:bf:
                    d0:e4:e3:d4:b3:1f:38:ef:e4:d4:ca:bb:f1:d4:72:
                    5b:e1:89:77:e6:98:d9:74:e1:c8:91:bd:91:47:d5:
                    a6:b6:0b:39:dd:d0:9a:53:71:b7:84:74:c7:41:73:
                    7b:1c:79:35:d4:17:39:ce:a4:c6:e0:aa:ea:cb:83:
                    88:83:19:dd:71:ee:26:07:91:6c:ab:21:4d:7a:86:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:74:69:02:0A:FA:E9:C5:8D:4F:76:51:84:D1:22:BD:25:09:12:9C
            X509v3 Authority Key Identifier:
                keyid:2B:26:AB:9E:8E:84:10:FB:48:00:8E:CD:E6:D9:DB:82:F8:39:A1:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/323830333a6664303a3a2f33322d3438203d3e20323734323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:4e:8f:65:f8:9d:00:26:f8:10:36:ad:c3:55:94:dd:37:96:
         ac:be:7a:3a:07:80:e4:7b:c1:bf:d9:a0:30:5f:4f:58:8c:c6:
         2c:70:61:1e:10:ab:47:46:01:7f:a8:be:eb:c1:21:33:9f:5d:
         97:e3:ae:00:56:2d:8f:2f:c4:02:4a:37:67:ed:e4:6d:f1:d9:
         1a:04:d6:24:9e:62:8c:82:0d:32:9a:60:d7:a7:ad:f8:45:77:
         96:14:af:cd:05:a5:cf:2d:6a:49:06:cf:c4:fb:a0:d8:7a:1f:
         d4:bb:ad:c3:21:af:03:fd:2f:9e:e6:5b:e2:c3:2f:5f:4d:40:
         07:8a:28:bd:de:d4:66:be:49:89:48:6f:68:cc:8d:17:02:5b:
         c6:8f:db:1d:75:9e:31:4d:5d:8c:ec:32:ec:12:c5:b5:85:f6:
         13:40:5f:04:b9:2e:13:29:2c:d3:1d:5e:b0:71:4b:a7:09:5b:
         3e:ec:7b:25:59:a8:50:dd:77:99:c7:58:82:95:44:13:a5:1e:
         51:86:4c:e2:61:42:25:51:3d:91:33:8d:43:04:ac:d7:ee:92:
         bf:0f:0e:6a:14:ad:a5:17:26:42:ce:5a:2b:a8:45:f4:97:eb:
         81:5a:a6:84:ab:4b:1c:02:58:a7:f5:47:21:d4:6e:71:da:71:
         f1:ad:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:30:32 2026 by rpki-client