Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/323830333a393335303a3a2f33322d3438203d3e20323733383933.roa
File:                     323830333a393335303a3a2f33322d3438203d3e20323733383933.roa (raw, json)
Hash identifier:          SOsqJp25w4jl2ZflhrFSLHIb/tMXVAupQkjA5zXD8Xc=
Subject key identifier:   F7:88:B8:AB:63:94:22:E9:BC:AE:C4:C0:1A:8E:AB:45:42:1F:74:C5
Certificate issuer:       /CN=3D4EDB71493212338A6F430E592DC26FF3AD6E45
Certificate serial:       307257CF16A75E9CE8C913884B842A7929C1ECB5
Authority key identifier: 3D:4E:DB:71:49:32:12:33:8A:6F:43:0E:59:2D:C2:6F:F3:AD:6E:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/323830333a393335303a3a2f33322d3438203d3e20323733383933.roa
Signing time:             Thu 18 Jun 2026 15:48:29 +0000
ROA not before:           Thu 18 Jun 2026 15:43:29 +0000
ROA not after:            Thu 17 Jun 2027 15:48:29 +0000
asID:                     273893
IP address blocks:        2803:9350::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:57:cf:16:a7:5e:9c:e8:c9:13:88:4b:84:2a:79:29:c1:ec:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4EDB71493212338A6F430E592DC26FF3AD6E45
        Validity
            Not Before: Jun 18 15:43:29 2026 GMT
            Not After : Jun 17 15:48:29 2027 GMT
        Subject: CN=F788B8AB639422E9BCAEC4C01A8EAB45421F74C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:9b:f1:01:e8:c8:ae:97:3a:37:f1:6b:59:
                    87:3a:dc:6c:d8:22:ec:d7:c5:cd:9b:93:cf:0d:00:
                    36:cb:dd:65:65:f9:de:09:63:90:95:75:19:09:43:
                    1b:02:cb:93:21:7d:9f:4d:d2:d4:9f:79:37:59:1b:
                    66:cb:2c:8a:11:52:16:b0:ef:ba:95:a9:66:9a:1c:
                    a0:28:09:6f:d9:61:3e:cc:50:a2:ef:57:5c:23:cb:
                    34:0f:cd:6b:a2:75:0e:3f:af:0b:0d:72:1f:fe:70:
                    5f:1e:07:c9:77:6a:6f:7a:93:c3:47:b4:97:63:aa:
                    2d:fd:f4:ee:2c:1f:01:24:38:7d:fc:5d:7d:eb:f1:
                    08:11:01:ca:35:3e:8e:d5:69:99:0e:83:e6:21:81:
                    3a:3d:d9:ad:3a:af:a5:93:ba:f6:cc:49:6a:11:bc:
                    90:99:fc:e3:26:b3:47:b9:4d:eb:29:22:12:43:bf:
                    a7:b3:a3:f2:b8:9c:7d:68:6e:f9:22:ab:26:e5:1c:
                    e0:72:b7:fb:29:2a:62:a8:c3:5b:2b:2a:e5:36:44:
                    52:bc:05:ca:b3:8a:54:c2:b3:ba:17:54:e8:39:24:
                    3d:58:bc:9a:d0:37:31:b0:f4:30:a9:8d:d1:51:7e:
                    ea:31:9f:37:a7:a5:33:39:04:1c:fe:43:5a:68:36:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:B8:AB:63:94:22:E9:BC:AE:C4:C0:1A:8E:AB:45:42:1F:74:C5
            X509v3 Authority Key Identifier:
                keyid:3D:4E:DB:71:49:32:12:33:8A:6F:43:0E:59:2D:C2:6F:F3:AD:6E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/323830333a393335303a3a2f33322d3438203d3e20323733383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9350::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:99:33:ef:64:6d:06:7a:a7:f8:b2:1b:73:eb:62:ad:26:af:
         56:e2:7a:35:53:86:b6:7c:1f:92:f6:96:d7:b2:96:bc:d6:7b:
         75:a5:9b:45:9c:b4:12:df:78:d9:fd:7e:f8:b4:1a:3b:96:ef:
         13:81:1c:1e:8f:b2:3f:ac:b7:6c:d4:08:26:e3:eb:9c:ab:ea:
         d2:55:a1:e5:a5:dd:e8:06:d9:11:df:c4:79:d5:89:0c:50:a4:
         3e:50:8c:5c:1d:d9:0b:5c:5f:44:b7:9b:cb:05:d7:32:43:51:
         19:31:cd:db:98:18:2a:7a:fa:f1:f9:7f:5f:39:aa:96:4b:2d:
         8a:22:f1:39:f2:f2:37:47:26:dd:83:35:32:6f:33:a2:26:00:
         f2:0a:cd:be:30:d5:c4:52:08:e5:5d:09:c5:0c:82:9a:e6:f8:
         28:59:df:30:62:13:ff:41:0b:97:2f:1e:1b:e6:e1:7f:74:9e:
         3a:65:6f:75:c1:4a:53:24:5c:2a:6b:d8:fa:f5:46:d3:48:15:
         7a:a8:99:15:74:6c:b8:6c:40:f2:aa:8b:f6:ba:1c:fe:25:57:
         5b:ea:47:31:84:73:07:7c:12:04:9c:f6:5b:a3:ed:e2:e8:68:
         2a:f0:83:57:ab:87:0d:da:77:a7:5c:2b:83:e3:e7:1c:d0:98:
         32:6b:77:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:54 2026 by rpki-client