Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/323830333a343365303a3a2f33322d3438203d3e20323730303634.roa
File:                     323830333a343365303a3a2f33322d3438203d3e20323730303634.roa (raw, json)
Hash identifier:          hMlr7fCz4rxzMF3rDjWvkgJtW7QNSHidNlpChLKEWXo=
Subject key identifier:   02:1C:A1:7E:57:10:75:D3:12:C0:59:07:25:4C:64:3A:59:4F:8D:B3
Certificate issuer:       /CN=D1124389491FB420AF7FDE7F9D2323ACF465291F
Certificate serial:       430A54C85567C7C891D1B468EC7B4CF77394D28E
Authority key identifier: D1:12:43:89:49:1F:B4:20:AF:7F:DE:7F:9D:23:23:AC:F4:65:29:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/323830333a343365303a3a2f33322d3438203d3e20323730303634.roa
Signing time:             Sat 09 May 2026 17:41:51 +0000
ROA not before:           Sat 09 May 2026 17:36:51 +0000
ROA not after:            Sat 08 May 2027 17:41:51 +0000
asID:                     270064
IP address blocks:        2803:43e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 13:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0a:54:c8:55:67:c7:c8:91:d1:b4:68:ec:7b:4c:f7:73:94:d2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1124389491FB420AF7FDE7F9D2323ACF465291F
        Validity
            Not Before: May  9 17:36:51 2026 GMT
            Not After : May  8 17:41:51 2027 GMT
        Subject: CN=021CA17E571075D312C05907254C643A594F8DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:ca:15:85:b1:24:74:6d:bc:be:1b:56:3c:
                    58:32:83:27:d1:26:9f:4d:31:53:2b:b6:48:cc:6d:
                    5b:16:9e:4f:e1:6a:e2:3b:ec:63:59:c6:f7:7f:35:
                    e0:eb:66:bc:aa:80:68:be:51:a2:a8:8f:8b:9f:9b:
                    c5:c0:37:18:89:b7:89:28:88:51:5e:ac:72:ac:e4:
                    0a:8a:84:22:f6:bb:58:4f:ea:52:c5:0a:f7:38:f5:
                    71:f3:88:4d:4b:4a:52:e4:c6:43:49:6c:2e:61:76:
                    db:84:7a:85:d0:6b:3d:f9:43:d4:23:71:64:a7:ca:
                    9f:7b:2d:d3:ff:1c:71:14:2e:ab:21:a8:4e:ed:2c:
                    b1:ba:06:6d:b8:96:3d:3b:6c:5f:5a:72:95:34:47:
                    5b:cc:43:49:10:e3:35:9d:4b:95:c4:cf:6f:0f:b5:
                    4e:5a:9f:58:16:8a:5d:35:98:b7:6e:01:8e:e2:cb:
                    bc:64:c4:21:17:20:4b:83:f0:69:a1:13:db:f5:be:
                    7c:a9:fe:14:72:31:1e:28:20:90:0b:28:47:6c:44:
                    81:a8:74:64:4f:1f:ca:8b:8b:51:43:cf:74:2e:1d:
                    13:df:82:74:ad:53:87:00:2d:17:f2:34:65:87:a8:
                    51:68:aa:09:0a:bc:56:ba:ce:56:a6:a4:c8:70:7a:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1C:A1:7E:57:10:75:D3:12:C0:59:07:25:4C:64:3A:59:4F:8D:B3
            X509v3 Authority Key Identifier:
                keyid:D1:12:43:89:49:1F:B4:20:AF:7F:DE:7F:9D:23:23:AC:F4:65:29:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/323830333a343365303a3a2f33322d3438203d3e20323730303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:ac:7c:ec:7b:23:5b:37:46:2d:a5:92:ec:c2:34:95:87:
         c1:dc:56:85:2a:85:73:04:be:6a:7a:cc:ca:4b:1b:81:c8:41:
         7c:61:d4:6f:f7:0d:d3:15:c7:81:b4:4e:fe:02:1b:35:35:9a:
         95:62:44:93:72:08:2f:65:f6:81:f2:08:07:92:77:e6:51:2e:
         b4:bf:22:76:f6:66:ee:16:90:90:5b:41:77:62:56:cb:7c:04:
         fe:05:c0:00:56:30:0c:aa:4b:2c:fe:2e:ca:67:bc:a3:61:b7:
         cd:7f:dc:d2:fc:27:69:cc:53:00:06:ed:f2:54:f7:a1:8e:38:
         78:ce:4d:3f:74:99:f5:77:53:14:53:f9:ac:33:f9:be:ea:42:
         1f:c4:80:33:f5:a2:84:1e:a5:63:aa:c6:ff:0c:b7:52:1b:77:
         86:45:90:f8:fd:be:e0:af:a7:59:3f:31:7c:87:5e:a0:4c:d5:
         cd:a7:b2:22:74:62:ca:9c:64:f6:2d:07:84:85:17:9a:d7:fd:
         82:7a:c5:19:b4:2b:5f:fd:aa:1c:ed:fe:7c:ee:2c:35:0b:5e:
         a8:28:46:c8:1c:c3:bc:63:38:dd:13:f9:c0:cd:73:1f:a3:39:
         25:13:e3:6b:41:02:08:32:88:4d:39:c4:03:a8:8f:af:8d:6a:
         a9:53:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:18:22 2026 by rpki-client