Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/323830333a646564303a3a2f33322d3332203d3e20323734313138.roa
File:                     323830333a646564303a3a2f33322d3332203d3e20323734313138.roa (raw, json)
Hash identifier:          70YewiNIDlSkr8E2/7oL424psCh5G6OS9vS2fvozdn8=
Subject key identifier:   E3:A4:7D:B0:C6:1F:F4:74:98:BC:48:B4:A7:AF:DB:73:31:25:2F:7F
Certificate issuer:       /CN=45A000CB7091C2067717C99065D8F7BDF14F630A
Certificate serial:       711BB91789A5703F50F9550496FC5128EF0DF50C
Authority key identifier: 45:A0:00:CB:70:91:C2:06:77:17:C9:90:65:D8:F7:BD:F1:4F:63:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A000CB7091C2067717C99065D8F7BDF14F630A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/323830333a646564303a3a2f33322d3332203d3e20323734313138.roa
Signing time:             Mon 29 Jun 2026 16:50:14 +0000
ROA not before:           Mon 29 Jun 2026 16:45:14 +0000
ROA not after:            Mon 28 Jun 2027 16:50:14 +0000
asID:                     274118
IP address blocks:        2803:ded0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A000CB7091C2067717C99065D8F7BDF14F630A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1b:b9:17:89:a5:70:3f:50:f9:55:04:96:fc:51:28:ef:0d:f5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A000CB7091C2067717C99065D8F7BDF14F630A
        Validity
            Not Before: Jun 29 16:45:14 2026 GMT
            Not After : Jun 28 16:50:14 2027 GMT
        Subject: CN=E3A47DB0C61FF47498BC48B4A7AFDB7331252F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:bd:2c:d4:8d:c7:88:1e:d1:82:db:54:c8:
                    ae:b5:2d:d8:21:d0:4e:56:0b:be:c7:74:c8:ef:35:
                    f8:06:f6:6f:cb:f7:4e:65:cd:22:79:9c:80:14:63:
                    ec:d9:bd:24:21:83:17:3b:87:c0:d6:ed:6d:3c:50:
                    0c:44:f1:c9:d9:9a:b2:40:10:8c:dd:e0:98:6a:91:
                    2a:d6:f9:0a:a9:eb:62:f6:c5:f1:98:95:68:cf:2a:
                    2c:76:8c:2c:50:ff:16:34:e6:02:b2:96:41:c0:71:
                    19:a3:81:46:ff:fa:9e:fa:46:58:3e:a1:5c:e1:22:
                    21:ed:61:93:c3:80:63:c2:17:b5:dc:8e:f1:05:86:
                    84:bf:c6:be:e4:1a:52:91:2e:83:04:e0:52:d0:62:
                    ca:6d:a2:82:5b:6a:83:e0:ee:d3:5e:7c:05:36:ce:
                    68:8d:4f:bb:81:19:0d:9f:6e:6a:56:ab:d5:3e:3e:
                    05:5f:76:87:45:b4:46:42:66:c8:60:ad:7a:bb:19:
                    0b:9d:4d:5f:99:9c:9b:35:88:c7:1e:0d:79:51:b0:
                    c7:42:e4:e1:24:fa:d6:bb:4a:d0:9e:9a:56:ca:cd:
                    f9:5a:f0:62:bf:15:9c:5f:88:e9:16:ad:ba:08:27:
                    21:ea:87:e7:bd:4b:08:f8:89:73:67:ef:a2:4a:b3:
                    e6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A4:7D:B0:C6:1F:F4:74:98:BC:48:B4:A7:AF:DB:73:31:25:2F:7F
            X509v3 Authority Key Identifier:
                keyid:45:A0:00:CB:70:91:C2:06:77:17:C9:90:65:D8:F7:BD:F1:4F:63:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A000CB7091C2067717C99065D8F7BDF14F630A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/323830333a646564303a3a2f33322d3332203d3e20323734313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ded0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:44:d7:69:ea:12:77:15:3b:80:28:0f:41:5f:91:69:90:f4:
         a9:ad:74:14:0a:6d:aa:96:6b:3c:98:58:f6:0f:79:74:d4:ab:
         48:f8:78:e0:be:83:36:cb:66:9f:5c:6f:9b:cb:86:b5:65:15:
         93:fe:94:84:f6:51:16:24:26:51:80:15:a1:6b:a3:64:bd:08:
         a5:32:81:cc:25:69:dc:ba:e7:9d:df:ad:f9:86:40:dd:64:6b:
         6c:ad:3c:86:75:ea:a8:70:e0:37:d7:dc:3f:4d:38:4c:7c:f3:
         d3:16:60:33:e9:85:8c:8b:2c:d1:26:ca:d4:ec:e7:c4:00:9c:
         3d:e3:4a:78:a0:30:af:a4:1c:40:1b:aa:c1:bc:a2:b2:64:c5:
         76:0b:9f:1a:99:67:cb:60:dc:73:5a:14:c2:f8:26:d5:5d:a3:
         bb:1d:a8:59:95:ce:48:69:38:ca:25:11:57:f3:f8:17:51:a8:
         89:c7:9c:7d:40:3a:dc:d7:27:35:8e:72:57:2e:af:8b:2b:4f:
         48:65:79:c8:a3:bc:86:33:6c:61:53:88:4e:b5:75:55:a2:5c:
         a0:80:ec:72:23:d9:2d:fe:6b:e2:5a:a9:63:7d:d2:15:1f:8f:
         9e:62:e7:94:d2:c5:3f:1b:4a:09:16:69:d1:4f:ac:98:02:d4:
         cf:d6:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:31:25 2026 by rpki-client