Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663830303a3a2f34312d3432203d3e20323634383330.roa
File:                     323830333a3263303a663830303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier:          XCs8VFFKKmmzGtAOrqTB+9Pe8JhO8Si7qXNi71vv9f4=
Subject key identifier:   A2:2B:07:CE:A3:DF:0C:9F:95:67:5A:C7:42:A9:EB:BF:9E:71:A4:70
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       74B08DA9B7183726A0609E0EE859BF4E97E03B77
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663830303a3a2f34312d3432203d3e20323634383330.roa
Signing time:             Thu 19 Mar 2026 14:20:00 +0000
ROA not before:           Thu 19 Mar 2026 14:15:00 +0000
ROA not after:            Thu 18 Mar 2027 14:20:00 +0000
asID:                     264830
IP address blocks:        2803:2c0:f800::/41 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b0:8d:a9:b7:18:37:26:a0:60:9e:0e:e8:59:bf:4e:97:e0:3b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Mar 19 14:15:00 2026 GMT
            Not After : Mar 18 14:20:00 2027 GMT
        Subject: CN=A22B07CEA3DF0C9F95675AC742A9EBBF9E71A470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:23:dc:27:27:74:4a:77:72:06:6a:c6:47:3c:
                    e6:e7:25:4d:f5:38:a6:55:94:ae:2f:e1:a1:80:0d:
                    b7:43:9e:f4:d1:27:82:a4:ae:d4:56:26:20:27:d2:
                    de:4b:ab:d3:d8:63:55:50:3a:7f:9d:43:ac:d2:be:
                    99:7e:82:80:14:a9:1e:11:b7:4d:69:6a:ed:55:cb:
                    07:4a:b6:22:e8:6b:50:63:ce:bc:58:17:78:12:20:
                    48:ef:c2:48:a8:1b:61:74:95:28:f8:47:61:1e:76:
                    d7:37:25:b3:e6:11:08:e1:29:50:bf:15:0c:92:d3:
                    15:59:24:ff:51:8e:c0:ba:d7:be:33:a3:33:37:c3:
                    e2:a2:8a:7b:e6:ee:ae:75:92:ff:41:74:7f:9c:d5:
                    f5:ca:2c:3f:6a:51:3f:d1:51:3d:f9:61:75:14:14:
                    74:24:db:d1:0f:3d:57:33:ce:7c:6a:df:6a:09:77:
                    40:a2:a9:08:a5:0f:a8:0b:eb:93:d8:97:b2:c3:53:
                    49:b0:08:3b:2a:bf:c4:e8:a1:a1:fd:aa:3d:f3:91:
                    25:52:5b:cd:0c:97:71:36:85:0a:30:7b:d9:f0:e8:
                    9d:12:11:a6:be:f3:84:88:69:b0:4a:80:62:2c:bf:
                    9f:89:94:db:72:99:45:75:6a:96:99:61:d4:fa:a3:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2B:07:CE:A3:DF:0C:9F:95:67:5A:C7:42:A9:EB:BF:9E:71:A4:70
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663830303a3a2f34312d3432203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f800::/41

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:1d:33:87:e3:5e:34:1d:5b:ac:52:11:fd:8c:69:df:e5:
         ca:11:61:f7:da:66:4d:57:13:96:54:79:07:2e:73:cc:5c:01:
         9c:98:d3:8a:80:ef:92:fa:33:b4:f8:35:79:f5:1a:02:04:2e:
         4b:65:8d:11:f9:54:41:17:26:dc:dd:70:7f:77:62:06:d8:08:
         bb:0a:2d:b8:b8:97:72:82:b5:39:b7:08:7d:3e:e5:1d:a8:f9:
         62:a2:da:78:29:cc:c1:e1:cf:43:50:ff:90:69:d9:4e:99:38:
         20:26:9e:16:a9:4a:bd:06:5d:8a:43:fc:b0:81:e8:e4:99:a9:
         b7:5e:36:0f:9b:fe:9e:5b:91:c2:06:67:35:86:13:0d:fc:81:
         80:6b:38:11:22:cc:ff:5b:3e:94:c1:c3:69:30:e2:43:49:dd:
         b6:61:58:f1:9b:9d:19:96:f8:1f:18:2d:92:12:1b:f3:67:80:
         a0:ef:e4:f6:bf:26:ca:ef:45:24:1e:5a:31:97:52:1e:96:29:
         58:32:3d:1e:9d:55:e8:c0:5a:e6:02:c8:5a:96:d7:5f:4b:f0:
         12:52:f7:06:cf:d4:42:49:0d:21:7c:c9:c7:0c:ab:0c:cc:a3:
         2a:e4:6a:98:fb:23:ef:8d:e1:4c:cb:75:2a:61:33:d7:8e:0b:
         08:18:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:05:23 2026 by rpki-client