Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663530303a3a2f34312d3432203d3e20323634383330.roa
File:                     323830333a3263303a663530303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier:          OE2kx9+HqDR3Kg02wTd85UIatoMaUhhvbtnY/t+t7l0=
Subject key identifier:   6B:9B:5B:32:5B:CA:48:26:1E:C6:F3:F8:D9:B5:6A:20:4A:5B:09:87
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       08588A1284BFC223F365DBC1EFEBE4C47EEC1785
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663530303a3a2f34312d3432203d3e20323634383330.roa
Signing time:             Thu 19 Mar 2026 14:20:00 +0000
ROA not before:           Thu 19 Mar 2026 14:15:00 +0000
ROA not after:            Thu 18 Mar 2027 14:20:00 +0000
asID:                     264830
IP address blocks:        2803:2c0:f500::/41 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:58:8a:12:84:bf:c2:23:f3:65:db:c1:ef:eb:e4:c4:7e:ec:17:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Mar 19 14:15:00 2026 GMT
            Not After : Mar 18 14:20:00 2027 GMT
        Subject: CN=6B9B5B325BCA48261EC6F3F8D9B56A204A5B0987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:7d:6f:47:12:fb:c2:1d:46:66:3f:2d:db:
                    83:7a:53:a6:4c:ee:8b:10:2e:ee:3b:37:11:1f:4f:
                    af:4c:19:4e:96:24:f4:e6:7b:d4:b4:50:eb:b5:d5:
                    f0:8f:3b:3b:76:7e:54:aa:bf:20:42:11:b2:53:91:
                    9b:bc:f9:ff:78:39:1c:08:ef:b5:e6:06:80:88:20:
                    33:8d:57:c8:3e:81:42:e2:c7:55:20:4b:e9:25:82:
                    30:15:e3:6e:4b:e8:3e:ed:86:30:66:40:d9:bc:b6:
                    71:1c:a7:34:b1:bb:68:6b:25:cf:f0:c5:31:44:f0:
                    16:53:e6:26:30:78:9b:ed:2d:5c:9b:9b:3f:cf:5a:
                    7d:ff:3b:ab:5e:17:25:d4:f4:12:f4:93:d0:99:79:
                    50:6b:5e:89:8b:83:54:cc:dc:b1:86:c8:bf:36:c6:
                    9f:e8:f1:ba:2e:2a:e7:64:9a:87:e8:2a:48:34:61:
                    5c:93:37:3b:8e:5a:6a:7e:12:fb:f7:af:8e:6c:c6:
                    ac:37:db:db:38:57:55:26:9d:3d:d6:b3:ca:14:42:
                    c2:c0:4e:0a:fa:1b:1c:1b:6a:78:b0:9a:27:c0:b4:
                    5b:6a:58:cc:e2:91:e8:6c:c1:ee:61:95:60:41:83:
                    bd:93:dc:72:7f:38:81:49:5e:2a:8d:9e:75:95:25:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9B:5B:32:5B:CA:48:26:1E:C6:F3:F8:D9:B5:6A:20:4A:5B:09:87
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663530303a3a2f34312d3432203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f500::/41

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:e9:4b:39:0b:cc:81:90:41:8b:9e:95:de:7e:79:af:99:
         bd:a1:22:0a:56:4b:27:20:46:7a:80:c9:26:ec:19:22:d9:4e:
         da:ab:68:b5:56:4f:6d:2e:d6:b3:68:26:5c:aa:ef:22:8a:bf:
         3c:49:2a:8a:64:3f:c2:05:5d:4b:33:58:d7:6a:1f:a8:68:0c:
         aa:50:59:79:9e:d4:82:d7:42:6b:2c:8d:bb:34:28:6f:b1:02:
         45:fc:a7:19:8e:b4:2d:18:b5:6e:37:7c:1f:fb:21:74:a6:15:
         cc:af:f7:b1:fc:d1:6e:14:44:a8:6a:19:ea:08:23:e5:65:d5:
         93:a1:27:eb:93:04:f2:b4:a2:4a:25:e2:b9:cf:8c:7a:4e:a3:
         42:f7:d9:aa:8c:89:36:03:54:09:b1:12:cf:dc:e6:9f:1b:f6:
         a3:43:fc:5b:ee:c1:af:72:86:b9:ed:03:c1:c3:27:8e:2c:cd:
         a0:7d:25:64:76:0f:b5:fb:f4:64:12:40:9c:c2:46:5e:a7:c1:
         20:7e:8b:ff:f6:ee:27:4c:5b:d2:e1:b5:73:c9:71:fa:e4:bb:
         8d:1d:49:9b:7c:fe:47:02:dc:05:9d:db:bf:8d:97:3a:02:cb:
         1c:82:6c:34:78:4b:7e:b2:87:b5:93:68:fc:ca:86:78:0c:40:
         48:cb:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:39:00 2026 by rpki-client