Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D2BAF654743F74120D1743F8571943B672F0F97DEBB95045B194C2A11932312/0/323830333a663535303a3a2f33322d3634203d3e20323733383631.roa
File:                     323830333a663535303a3a2f33322d3634203d3e20323733383631.roa (raw, json)
Hash identifier:          6bq4Rxf4tW02EfkMNE7UwbC8NXPHPTLuJUrh7Wlm2vk=
Subject key identifier:   3E:0B:49:77:A1:81:F5:21:44:71:7C:B6:54:87:F7:3A:35:CE:30:60
Certificate issuer:       /CN=E31420E7B1818FE19FC0B93568F75A68F4DEC1AC
Certificate serial:       5A6ABD557F3C913141A384E81BFA9D9250515FF0
Authority key identifier: E3:14:20:E7:B1:81:8F:E1:9F:C0:B9:35:68:F7:5A:68:F4:DE:C1:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E31420E7B1818FE19FC0B93568F75A68F4DEC1AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D2BAF654743F74120D1743F8571943B672F0F97DEBB95045B194C2A11932312/0/323830333a663535303a3a2f33322d3634203d3e20323733383631.roa
Signing time:             Thu 02 Jul 2026 02:05:00 +0000
ROA not before:           Thu 02 Jul 2026 02:00:00 +0000
ROA not after:            Thu 01 Jul 2027 02:05:00 +0000
asID:                     273861
IP address blocks:        2803:f550::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D2BAF654743F74120D1743F8571943B672F0F97DEBB95045B194C2A11932312/0/E31420E7B1818FE19FC0B93568F75A68F4DEC1AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D2BAF654743F74120D1743F8571943B672F0F97DEBB95045B194C2A11932312/0/E31420E7B1818FE19FC0B93568F75A68F4DEC1AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E31420E7B1818FE19FC0B93568F75A68F4DEC1AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6a:bd:55:7f:3c:91:31:41:a3:84:e8:1b:fa:9d:92:50:51:5f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E31420E7B1818FE19FC0B93568F75A68F4DEC1AC
        Validity
            Not Before: Jul  2 02:00:00 2026 GMT
            Not After : Jul  1 02:05:00 2027 GMT
        Subject: CN=3E0B4977A181F52144717CB65487F73A35CE3060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:0e:13:ad:59:3a:c4:99:45:29:50:98:fd:
                    39:4e:cb:b0:b9:85:f3:ab:49:68:91:53:a3:70:e6:
                    0a:33:71:23:19:0e:72:b0:c2:91:a2:a7:b1:41:bd:
                    ba:d7:4b:05:46:d4:e7:c3:76:af:25:41:f5:85:f3:
                    e1:16:d7:69:70:25:10:c3:86:92:3a:82:90:16:52:
                    bd:12:cb:37:74:c0:7b:d8:6f:fc:a6:fd:18:b1:70:
                    67:d1:a5:b6:8b:ee:16:b4:94:cb:69:8a:e0:45:a6:
                    51:82:7c:fe:c2:99:54:fa:ce:66:0c:a6:0d:33:d7:
                    52:01:a3:0e:93:c4:67:5f:24:48:69:d9:c0:09:da:
                    2f:c5:80:6b:2d:90:4a:8a:1c:94:0b:fc:89:50:97:
                    6c:43:91:4b:9b:49:8e:1c:ad:8b:90:f1:12:de:8f:
                    f8:a2:da:45:52:80:3e:aa:47:94:a7:4c:2b:8a:55:
                    04:59:ab:05:65:e2:40:b3:eb:09:18:56:8d:63:15:
                    43:a6:f4:3c:1f:b6:6d:f8:d5:43:ab:5d:9f:b3:71:
                    2f:33:48:9c:91:87:28:37:c0:1f:75:e3:ab:5c:cf:
                    26:ba:20:88:14:c6:77:2f:f9:fb:7b:1e:5a:d9:79:
                    f5:c5:91:34:9e:f1:36:85:6b:c2:41:34:21:a4:d2:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0B:49:77:A1:81:F5:21:44:71:7C:B6:54:87:F7:3A:35:CE:30:60
            X509v3 Authority Key Identifier:
                keyid:E3:14:20:E7:B1:81:8F:E1:9F:C0:B9:35:68:F7:5A:68:F4:DE:C1:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D2BAF654743F74120D1743F8571943B672F0F97DEBB95045B194C2A11932312/0/E31420E7B1818FE19FC0B93568F75A68F4DEC1AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E31420E7B1818FE19FC0B93568F75A68F4DEC1AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D2BAF654743F74120D1743F8571943B672F0F97DEBB95045B194C2A11932312/0/323830333a663535303a3a2f33322d3634203d3e20323733383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f550::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:9a:71:84:65:f0:c1:9e:fc:39:aa:b5:26:a6:a9:f5:c4:
         62:e5:fe:e5:01:43:79:2f:d9:93:3b:b7:be:49:1b:83:8d:b7:
         2d:fe:3b:c7:eb:d7:c3:bf:76:5d:d3:91:90:6d:f7:e4:91:1c:
         bf:0c:48:1c:61:4d:04:fa:cf:ae:6b:a4:40:a8:d6:ea:50:1b:
         db:96:d3:8d:a2:42:f6:f8:df:2f:57:c6:eb:b7:5e:63:99:24:
         c3:d8:95:7c:42:89:c4:76:2c:b8:29:bd:99:30:bf:e9:1f:38:
         7c:44:87:fd:6b:44:2f:06:30:3d:87:e6:0c:33:fe:43:8f:a0:
         89:f6:98:43:ac:c3:e9:1e:3a:93:87:08:d4:a4:ba:dd:93:ce:
         cf:7b:6b:fb:86:16:a4:c5:ae:72:7f:10:1f:15:48:9d:08:8d:
         7f:07:76:b2:3c:ad:b9:00:25:92:c1:fd:a0:fc:89:e4:5e:88:
         f4:f3:89:5c:26:3a:18:b5:44:d4:19:66:90:e3:44:87:33:d2:
         64:43:2b:32:75:9d:3d:ba:87:85:c2:fd:2a:96:2c:f8:f8:0e:
         89:35:90:54:97:5f:ed:08:ca:14:7e:db:6c:fa:ef:1c:36:17:
         b1:4f:ac:f4:e7:f7:62:23:4a:54:b1:07:38:e9:6b:9d:b4:f0:
         a6:b1:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:12 2026 by rpki-client