Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e20323635373335.roa
File:                     323830333a633363303a3a2f33322d3438203d3e20323635373335.roa (raw, json)
Hash identifier:          Vi75tBeIgdoKcESyIvGGYYXAlhPMZoJTcPOS9Hs4drI=
Subject key identifier:   2C:6A:CF:63:D4:AC:EE:59:70:5D:2D:5E:81:17:CB:CF:EC:FC:6E:95
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       5C4F0DC2CE4AA720DE2DBF82183A28AB10E85410
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e20323635373335.roa
Signing time:             Wed 17 Jun 2026 21:48:21 +0000
ROA not before:           Wed 17 Jun 2026 21:43:21 +0000
ROA not after:            Wed 16 Jun 2027 21:48:21 +0000
asID:                     265735
IP address blocks:        2803:c3c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4f:0d:c2:ce:4a:a7:20:de:2d:bf:82:18:3a:28:ab:10:e8:54:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Jun 17 21:43:21 2026 GMT
            Not After : Jun 16 21:48:21 2027 GMT
        Subject: CN=2C6ACF63D4ACEE59705D2D5E8117CBCFECFC6E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:5a:ec:e4:91:70:86:7e:ff:09:31:29:0c:
                    a5:65:91:89:02:8a:f2:bc:5c:76:a7:e9:0b:35:67:
                    a2:0f:06:e4:56:62:64:c1:6c:c9:32:30:30:4c:7d:
                    0b:d3:01:0e:f0:36:c0:26:ae:45:2f:14:73:00:74:
                    9a:ff:45:60:56:58:a6:8b:da:03:7f:3e:ed:92:1c:
                    cf:e2:43:e3:82:b6:c2:a4:69:db:23:7c:6a:5b:ac:
                    9e:d4:c5:ec:87:49:35:54:52:bc:2f:54:e9:9a:6d:
                    41:1f:1d:77:bf:34:77:68:9a:60:38:6f:4c:48:dc:
                    76:3d:08:85:9c:50:2a:9d:49:5d:46:56:4b:5a:42:
                    ee:8c:7a:e6:45:f0:21:d1:61:27:27:13:24:61:9d:
                    9e:61:c6:92:8b:33:64:e8:d8:2d:b1:80:f3:b7:fd:
                    a1:bd:6f:a8:f6:ee:21:00:57:ca:ea:09:1c:26:5c:
                    e4:b2:68:3d:19:cd:cf:1a:4f:42:f8:f6:15:b5:81:
                    e2:6b:7c:1e:b7:4b:a2:61:eb:d9:1c:79:aa:24:b8:
                    49:26:e9:3e:71:0c:3a:c7:4d:20:b7:f1:49:e0:fd:
                    76:06:6f:7c:d8:e3:3c:f4:09:b9:62:6c:3c:3a:2a:
                    98:7f:da:e5:41:27:e5:75:5b:58:a6:41:5c:16:a4:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6A:CF:63:D4:AC:EE:59:70:5D:2D:5E:81:17:CB:CF:EC:FC:6E:95
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e20323635373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:0d:52:95:38:0f:c6:a1:ec:7f:3e:17:c0:0e:86:e6:bb:
         ce:8a:08:b9:93:4f:ce:a0:99:71:93:4f:cc:ff:d6:ec:22:cc:
         4f:6d:cf:8c:b3:a4:5b:2e:5b:42:a6:41:ed:6f:2a:06:87:ca:
         11:89:38:c6:7b:e2:80:f1:2c:64:0c:1c:5e:5a:e7:03:75:02:
         0f:ff:05:19:50:5e:c8:72:6b:58:29:80:5c:12:8d:a8:09:0f:
         db:cb:a8:55:3d:60:f1:d8:14:17:3a:4e:42:1f:a3:42:87:88:
         11:71:bd:b7:c4:44:b4:94:34:6e:f5:37:02:eb:97:ed:2e:6a:
         5e:91:69:d5:c8:b4:e5:71:dc:c0:a4:16:a9:22:45:2d:b7:d3:
         e0:16:06:ec:8c:3a:76:da:8e:2c:e2:91:86:5e:40:03:ef:da:
         35:0a:d9:b2:f4:f8:ba:78:75:ff:f8:f5:05:d7:af:e7:41:36:
         b7:d7:f4:74:81:fb:68:15:a5:70:7f:a8:44:6e:54:fd:1a:94:
         d9:cf:f1:95:40:fb:03:21:0d:8f:ef:11:bd:7f:92:9e:72:7e:
         a6:1a:dd:65:08:bc:fb:c9:c8:92:b0:68:f8:21:a3:97:fb:69:
         79:a6:08:d0:71:a4:38:05:7d:8a:c0:40:31:fc:86:a6:93:5a:
         02:03:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:30 2026 by rpki-client