Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/323830333a653033303a3a2f33322d3438203d3e20323734323736.roa
File:                     323830333a653033303a3a2f33322d3438203d3e20323734323736.roa (raw, json)
Hash identifier:          UOpqlkbi2zb6FRVdzVkcy3SAMvh8QfuJ1c4xmpWJ/5Q=
Subject key identifier:   18:DD:24:1E:8C:4B:D4:37:2D:B3:67:76:99:A5:CB:78:6C:3F:E9:91
Certificate issuer:       /CN=B58248DFCF834DEBC85955FE54DE2DE44E802015
Certificate serial:       5D72A7ACB97FA7727644F9EB35455E1C977DF4BA
Authority key identifier: B5:82:48:DF:CF:83:4D:EB:C8:59:55:FE:54:DE:2D:E4:4E:80:20:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/323830333a653033303a3a2f33322d3438203d3e20323734323736.roa
Signing time:             Wed 17 Jun 2026 23:25:00 +0000
ROA not before:           Wed 17 Jun 2026 23:20:00 +0000
ROA not after:            Wed 16 Jun 2027 23:25:00 +0000
asID:                     274276
IP address blocks:        2803:e030::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.crl
                          rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:72:a7:ac:b9:7f:a7:72:76:44:f9:eb:35:45:5e:1c:97:7d:f4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58248DFCF834DEBC85955FE54DE2DE44E802015
        Validity
            Not Before: Jun 17 23:20:00 2026 GMT
            Not After : Jun 16 23:25:00 2027 GMT
        Subject: CN=18DD241E8C4BD4372DB3677699A5CB786C3FE991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:9f:2b:c7:06:47:4d:e3:ff:32:eb:d7:b9:
                    b5:54:ad:ef:57:cf:8a:74:9e:57:f9:2d:f2:78:53:
                    49:a3:be:8c:36:cb:d2:28:73:d9:dd:b7:4f:cc:4d:
                    0f:c7:4c:6b:74:36:14:1a:89:e1:a1:f1:da:0a:56:
                    81:4b:f4:dc:25:51:32:71:23:85:90:00:97:83:38:
                    80:93:78:72:db:d1:56:e9:3a:ae:2f:ed:19:61:e9:
                    4b:24:5a:10:c0:e4:52:6f:60:f5:4a:48:ad:83:dc:
                    21:7f:2e:70:3b:ec:d2:46:c4:c7:ee:69:3e:0f:2c:
                    ae:06:80:fb:c1:a2:a1:46:58:97:f8:9d:26:2d:bc:
                    d9:68:c6:5b:45:3d:67:c1:85:11:84:0f:ed:e4:24:
                    71:56:f2:b5:c1:4e:36:03:f8:b4:61:6c:a0:0e:e0:
                    2a:44:d3:32:a9:3c:60:de:2e:6c:0b:d4:64:a0:bf:
                    a1:95:82:cc:54:d1:d4:7c:c1:cb:52:6b:41:5a:c4:
                    eb:7e:65:9d:7b:cf:21:7f:1f:87:ef:b3:38:d2:2e:
                    43:f4:33:cb:18:3e:9b:b2:d6:60:f6:46:d6:f6:5f:
                    86:56:f1:66:9b:ea:12:5a:9f:53:10:6f:f7:41:ba:
                    16:65:fd:6a:cc:b8:41:12:d3:33:5b:0b:e2:d6:99:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:24:1E:8C:4B:D4:37:2D:B3:67:76:99:A5:CB:78:6C:3F:E9:91
            X509v3 Authority Key Identifier:
                keyid:B5:82:48:DF:CF:83:4D:EB:C8:59:55:FE:54:DE:2D:E4:4E:80:20:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/323830333a653033303a3a2f33322d3438203d3e20323734323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e030::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:ea:8d:3c:ff:76:53:3f:0f:61:01:c6:93:b9:d9:33:ac:07:
         0d:97:e6:a2:6a:77:97:8a:ef:4a:10:7f:8b:5b:ca:eb:8f:54:
         5e:03:54:9c:87:42:c6:29:83:5c:52:71:81:de:d8:c9:22:26:
         dd:b2:1a:4d:6a:a2:7a:e4:3e:28:d3:c5:38:f0:60:a0:1a:95:
         f1:c8:30:ca:61:41:e3:0f:08:bc:31:c2:e2:0a:c6:3c:8c:f6:
         42:a1:e9:32:f6:e8:18:cd:77:c0:a6:61:c1:47:a5:89:9c:8e:
         f7:6c:a1:2a:3e:88:66:ec:da:89:83:16:99:b7:14:1d:5d:3b:
         26:d6:9f:fb:66:7c:d2:00:fc:0d:5f:d2:84:52:48:a9:93:3b:
         f7:9d:df:fa:73:5d:85:8e:4a:09:50:4f:d4:6a:0a:86:49:a3:
         16:ca:32:cf:4b:14:62:c9:ff:f7:03:79:b4:44:19:31:08:22:
         8f:05:ba:0d:1a:0a:2b:e5:2a:af:ec:ad:28:7b:4e:32:bb:80:
         3b:fd:e4:d9:a6:66:7b:07:8c:c5:9d:f2:57:cb:ce:7b:93:7f:
         11:48:70:9f:c0:5f:0a:a9:77:d3:cb:44:6a:02:12:b2:c7:f6:
         c0:d7:37:67:75:fa:91:42:27:27:8c:c8:4b:7b:5c:e5:46:2c:
         33:89:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:09:40 2026 by rpki-client