Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/323830333a396535303a3a2f33322d3438203d3e20323733323239.roa
File:                     323830333a396535303a3a2f33322d3438203d3e20323733323239.roa (raw, json)
Hash identifier:          0USMyRGo/x7iBeCXqSgsPlcMdKGhzRqpQXD33q0RT3o=
Subject key identifier:   3D:D0:CA:1A:F2:91:E9:D8:C4:22:91:E6:99:B7:69:46:BD:AB:54:D9
Certificate issuer:       /CN=FCE591EC9AFE558B273332271C01BC10D57D9A4C
Certificate serial:       06805FD4A6E35B87145EFD451F8CECE6AB05F50A
Authority key identifier: FC:E5:91:EC:9A:FE:55:8B:27:33:32:27:1C:01:BC:10:D5:7D:9A:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/323830333a396535303a3a2f33322d3438203d3e20323733323239.roa
Signing time:             Thu 12 Mar 2026 20:33:40 +0000
ROA not before:           Thu 12 Mar 2026 20:28:40 +0000
ROA not after:            Thu 11 Mar 2027 20:33:40 +0000
asID:                     273229
IP address blocks:        2803:9e50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:80:5f:d4:a6:e3:5b:87:14:5e:fd:45:1f:8c:ec:e6:ab:05:f5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE591EC9AFE558B273332271C01BC10D57D9A4C
        Validity
            Not Before: Mar 12 20:28:40 2026 GMT
            Not After : Mar 11 20:33:40 2027 GMT
        Subject: CN=3DD0CA1AF291E9D8C42291E699B76946BDAB54D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:23:a7:9c:34:00:c9:01:60:b9:58:a2:3b:
                    1f:dd:ad:bf:46:68:65:91:fc:5e:2d:09:69:44:d4:
                    75:fc:33:0a:1a:2b:8d:c7:e7:71:3e:20:f6:4c:75:
                    9d:33:ce:04:74:a2:1e:8c:6e:bc:9e:04:51:db:9f:
                    10:95:0e:af:c2:0c:f6:dc:0d:08:8a:60:55:46:7e:
                    1e:ed:ef:29:c7:a9:49:31:be:d9:dc:f0:77:97:e9:
                    12:ed:b4:df:c6:04:68:4f:47:a5:ed:57:c1:1d:1b:
                    12:15:59:d2:ef:52:79:ed:92:eb:72:75:91:a5:74:
                    09:a8:5d:e3:58:d2:39:31:d8:c7:29:60:34:91:cb:
                    bb:4e:41:0c:de:b2:5e:26:b3:7a:4c:4d:6c:1b:be:
                    5b:6a:3d:08:51:80:27:36:cd:73:57:f4:0b:d1:1f:
                    c4:f5:da:7b:7d:8d:73:a6:a6:63:98:ad:71:88:9f:
                    a0:11:70:9c:5a:b4:d6:71:b4:70:a6:10:93:0a:65:
                    86:6a:5b:c5:9f:2d:92:e5:a0:68:65:f0:c7:bb:01:
                    a7:78:27:ad:04:72:ef:25:2f:3e:f9:1e:fa:cc:07:
                    28:82:73:ba:e4:0e:58:91:8e:c0:4b:ed:fc:88:d7:
                    d2:07:85:2f:3c:9b:2d:d0:a0:93:13:50:ca:d9:30:
                    ca:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D0:CA:1A:F2:91:E9:D8:C4:22:91:E6:99:B7:69:46:BD:AB:54:D9
            X509v3 Authority Key Identifier:
                keyid:FC:E5:91:EC:9A:FE:55:8B:27:33:32:27:1C:01:BC:10:D5:7D:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/323830333a396535303a3a2f33322d3438203d3e20323733323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:96:fd:a1:07:c6:59:cb:02:88:d8:72:c4:ed:c7:75:e8:f6:
         f3:0c:52:e0:cc:cb:0f:e1:32:4c:84:6f:86:f5:3a:4f:61:02:
         dd:8b:a5:11:9e:98:16:0f:bc:ad:75:2f:f6:c5:b3:94:1e:d1:
         8b:20:be:de:9e:3c:c4:e2:80:e4:1e:78:da:df:1e:3c:c1:f0:
         7c:53:13:22:28:92:3c:3e:ee:ec:5f:9d:f5:6c:d4:f1:93:ec:
         b6:d7:b8:17:55:36:c7:a5:5b:e2:cc:a1:45:a5:cf:5a:23:89:
         6c:dc:4a:c6:82:2c:d7:f5:aa:32:25:68:e4:c3:35:e7:96:00:
         79:cb:0d:8f:5d:50:ce:2d:18:97:05:b3:ce:42:5d:45:75:f0:
         8d:7e:8b:6d:80:c6:aa:23:44:6a:1b:ef:70:fa:ea:56:57:16:
         62:b0:d8:c5:7e:11:84:fc:ff:91:ae:04:9e:b1:5a:60:db:a4:
         43:d5:ab:c3:d9:1e:37:ed:8d:74:db:58:df:5a:88:80:06:42:
         74:5d:76:d7:59:7e:2f:6b:fc:cc:e1:bf:7d:ca:31:28:74:02:
         44:03:50:20:98:21:e6:31:cb:04:18:cd:55:d2:5e:07:3c:e4:
         1d:4a:76:33:ea:4e:11:e8:c0:39:92:0b:70:bc:75:ac:73:91:
         e0:79:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:26:18 2026 by rpki-client