Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33322d3332203d3e20323733393931.roa
File:                     323830333a393864303a3a2f33322d3332203d3e20323733393931.roa (raw, json)
Hash identifier:          iCFSk1VG3LaZ4Km//I5UtD7gzGT7tcQRvI92E9OpSVI=
Subject key identifier:   1D:49:F4:53:B1:6A:0B:ED:0E:CC:AE:45:01:98:F6:CE:C6:C9:32:1C
Certificate issuer:       /CN=F253CEAAB15B4E845BF8382719CA02FE63CF0E76
Certificate serial:       7FE6D500ADB5FB67CC9D8D8701064C30455D5FEC
Authority key identifier: F2:53:CE:AA:B1:5B:4E:84:5B:F8:38:27:19:CA:02:FE:63:CF:0E:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33322d3332203d3e20323733393931.roa
Signing time:             Tue 14 Jul 2026 19:52:40 +0000
ROA not before:           Tue 14 Jul 2026 19:47:40 +0000
ROA not after:            Tue 13 Jul 2027 19:52:40 +0000
asID:                     273991
IP address blocks:        2803:98d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e6:d5:00:ad:b5:fb:67:cc:9d:8d:87:01:06:4c:30:45:5d:5f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F253CEAAB15B4E845BF8382719CA02FE63CF0E76
        Validity
            Not Before: Jul 14 19:47:40 2026 GMT
            Not After : Jul 13 19:52:40 2027 GMT
        Subject: CN=1D49F453B16A0BED0ECCAE450198F6CEC6C9321C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:fc:d0:85:5b:4e:b3:64:e1:23:0e:34:da:
                    e9:60:ec:7c:7f:5b:f7:fb:fb:28:c7:04:55:19:2e:
                    34:08:4b:2c:b5:f2:cf:61:5c:7c:b6:1e:24:43:f9:
                    be:df:e5:61:19:5f:86:c7:75:3b:44:af:81:82:6c:
                    bb:62:dc:05:35:9c:8a:be:f9:1b:6b:09:84:db:7a:
                    91:4f:40:91:2e:68:72:84:03:20:56:f3:1c:04:6d:
                    34:40:bf:0c:85:15:33:5d:21:cd:15:a6:3c:ed:f3:
                    84:fa:9b:d1:a3:05:69:e4:2e:15:ba:a4:56:4b:70:
                    fd:99:a5:ba:46:d0:9e:89:5b:a9:5b:a6:a8:97:fe:
                    6b:28:d0:0f:38:6f:57:b0:46:3e:76:4a:ff:47:07:
                    17:68:31:ef:42:f3:d9:04:65:da:63:ad:01:1c:fb:
                    ea:d6:6d:9f:d3:e5:2d:7a:60:e9:fa:7a:06:c7:be:
                    32:96:39:95:a2:28:b2:c3:08:b3:20:f7:b1:0f:50:
                    94:f2:eb:df:68:e2:fe:54:ad:83:f0:86:ba:3b:9e:
                    8e:a3:0b:71:83:13:00:dd:1e:dd:24:a6:39:f2:7d:
                    3d:48:56:f1:79:9c:1e:d4:27:f8:e3:95:6d:f5:67:
                    d0:fc:f4:c7:d4:c1:ce:c0:5b:69:f5:5b:73:4b:49:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:49:F4:53:B1:6A:0B:ED:0E:CC:AE:45:01:98:F6:CE:C6:C9:32:1C
            X509v3 Authority Key Identifier:
                keyid:F2:53:CE:AA:B1:5B:4E:84:5B:F8:38:27:19:CA:02:FE:63:CF:0E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33322d3332203d3e20323733393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:98d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:a6:ec:da:4f:5f:7d:52:fd:bb:b3:4f:1f:09:c1:d7:73:ed:
         7f:39:f5:3b:04:4b:9a:f6:f4:39:45:10:5f:54:94:ba:27:f4:
         0c:8a:ea:9a:e4:e5:ec:f1:9a:b5:95:22:ea:18:ec:9c:57:a7:
         c8:85:98:6b:4a:22:11:ca:55:f7:3e:61:d9:0e:a4:3c:8a:67:
         8c:20:c1:c5:f7:4f:b8:c9:f9:82:81:84:45:af:54:4c:fe:30:
         b1:19:77:5a:3e:6c:79:3f:fb:2d:ef:c8:4c:2f:a3:5f:97:0d:
         9a:f0:e3:76:7c:c3:d2:35:e6:1d:c5:4c:a2:9f:19:bd:6d:96:
         ae:59:ce:75:66:ab:c9:ae:b7:11:5d:0b:dc:e5:53:48:65:1a:
         08:ec:91:0f:06:1b:01:17:a4:f1:04:60:2a:b3:e4:d6:37:06:
         cc:4b:0b:1b:b7:25:24:4a:07:ac:b3:5d:ce:4f:80:1e:ca:64:
         14:8a:2a:d3:fb:4e:6a:83:f6:4d:6a:9d:d3:01:c4:53:b7:90:
         43:9e:71:e2:43:8b:43:67:a0:b6:12:1c:d1:4f:40:fc:80:93:
         3a:bd:2a:33:2a:b0:fb:92:34:29:d4:aa:7f:9d:1e:3f:e6:8a:
         97:bc:6f:5b:06:e1:4f:0e:56:2a:e5:83:9b:d1:70:62:58:06:
         fa:e9:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:05:16 2026 by rpki-client