Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663730303a3a2f34312d3432203d3e20323634383330.roa
File:                     323830333a3263303a663730303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier:          Do0WYjxTPHx4BAqnmcB+MYKbPbl4SYdZQrdOMKOXW8M=
Subject key identifier:   C5:E1:6C:D3:9F:14:E5:9C:4E:37:8C:85:50:20:A6:C3:FE:F6:48:06
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       114901B31E7EA96E91449C64255398B30530A5EA
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663730303a3a2f34312d3432203d3e20323634383330.roa
Signing time:             Thu 19 Mar 2026 14:20:00 +0000
ROA not before:           Thu 19 Mar 2026 14:15:00 +0000
ROA not after:            Thu 18 Mar 2027 14:20:00 +0000
asID:                     264830
IP address blocks:        2803:2c0:f700::/41 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:49:01:b3:1e:7e:a9:6e:91:44:9c:64:25:53:98:b3:05:30:a5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Mar 19 14:15:00 2026 GMT
            Not After : Mar 18 14:20:00 2027 GMT
        Subject: CN=C5E16CD39F14E59C4E378C855020A6C3FEF64806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:4e:7b:cf:de:76:56:ae:2e:f3:9d:d4:76:
                    14:f7:1f:db:9a:4c:7d:fb:a0:b9:d4:0f:ba:98:ab:
                    fb:a2:2c:b3:44:a7:ec:6d:66:25:54:77:e3:66:e8:
                    2e:ca:63:b9:43:67:27:7f:97:cf:58:2f:60:bb:f4:
                    63:8e:e3:e7:83:a8:32:c7:be:a6:bc:4b:b8:db:aa:
                    4c:0b:9f:be:4b:a2:43:33:3a:73:db:4b:e6:39:fe:
                    1e:b7:0d:df:43:d4:d1:40:02:2c:87:08:8d:b7:93:
                    ee:41:1a:9f:1d:a4:9c:58:1b:63:d7:70:d3:23:f7:
                    8d:47:cb:21:ab:b3:a3:00:14:ee:c8:a3:ee:59:a7:
                    4e:de:d9:40:ec:e1:b2:8f:18:c4:7a:e9:18:4f:29:
                    f0:c1:58:a2:fa:ee:6c:e5:08:32:e3:4a:e6:1f:e4:
                    e7:e0:73:5c:00:88:b5:c2:33:ce:34:98:ea:3d:ce:
                    e7:ad:f9:ae:a2:1e:51:69:fa:68:72:4c:bb:62:17:
                    18:0c:65:3b:28:c0:95:42:9e:62:36:03:b3:44:ec:
                    46:d4:a2:ce:c5:30:fd:10:6d:77:28:68:cd:a4:ea:
                    65:20:b9:30:7f:be:95:bd:25:b5:92:b6:4a:c2:e6:
                    88:b9:db:d9:53:7a:6d:58:d9:3a:04:19:0d:60:ac:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E1:6C:D3:9F:14:E5:9C:4E:37:8C:85:50:20:A6:C3:FE:F6:48:06
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663730303a3a2f34312d3432203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f700::/41

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:c4:83:19:7e:cc:11:36:d7:3a:a5:10:0b:ef:59:86:fc:
         9f:b9:7f:06:48:f1:ef:ec:18:56:52:97:d4:08:7f:fd:0e:ea:
         1f:d2:e3:45:e9:e8:04:5c:b8:42:5d:da:51:14:90:20:95:99:
         1f:a6:0b:d3:80:69:f2:2f:cf:97:49:0c:e3:e4:15:a6:76:e9:
         5b:8b:4a:b3:cb:db:c7:42:b8:72:c4:93:21:3f:65:a0:05:32:
         06:2b:6d:19:04:66:50:70:df:6f:b8:da:fa:c7:06:19:76:2e:
         c0:dd:f3:e1:a5:51:33:0f:9b:e4:68:8a:b5:b8:db:7a:79:20:
         86:67:35:9a:99:ca:5e:9e:13:64:7e:aa:11:00:e9:53:8a:1b:
         ba:b1:a3:ec:00:27:29:da:cd:f8:33:89:67:6e:8b:06:6d:85:
         b5:9e:18:39:3e:4f:1e:af:73:39:ca:3f:fc:5d:c4:b9:37:d0:
         76:92:a5:c7:9f:9f:95:92:12:f6:36:6d:35:b8:64:bf:e8:13:
         87:1a:b5:87:e4:5b:b7:12:b1:05:cb:1f:14:a1:07:7b:16:ab:
         2b:c9:ca:ce:48:e0:55:0d:b2:53:34:ec:fd:60:15:cb:56:28:
         24:ed:f7:69:bf:06:d2:2d:b6:0e:39:a7:97:d4:94:04:a5:4a:
         da:94:2a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:22 2026 by rpki-client