Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa
File:                     323830333a6335303a3a2f33322d3332203d3e20323733313339.roa (raw, json)
Hash identifier:          JgBo3lJ6lS0SlR5wKgjH9+TNeIJGGAkQ2svdl/rGsfM=
Subject key identifier:   8C:AB:20:7C:22:6C:76:AD:4B:31:97:4D:6A:57:B1:7B:56:86:BE:69
Certificate issuer:       /CN=162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9
Certificate serial:       08AD6C196827684023D9EA51DA7A86107A3F6F6A
Authority key identifier: 16:25:68:E5:3E:E1:CC:63:AF:A6:BB:CE:7B:AD:8F:CB:84:8C:DD:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa
Signing time:             Thu 12 Mar 2026 15:33:38 +0000
ROA not before:           Thu 12 Mar 2026 15:28:38 +0000
ROA not after:            Thu 11 Mar 2027 15:33:38 +0000
asID:                     273139
IP address blocks:        2803:c50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 10:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ad:6c:19:68:27:68:40:23:d9:ea:51:da:7a:86:10:7a:3f:6f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9
        Validity
            Not Before: Mar 12 15:28:38 2026 GMT
            Not After : Mar 11 15:33:38 2027 GMT
        Subject: CN=8CAB207C226C76AD4B31974D6A57B17B5686BE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:ec:51:c8:1f:59:70:c1:07:c0:a0:14:08:
                    8d:33:a8:74:ef:ef:09:46:d4:05:6e:3f:38:87:82:
                    e3:a8:d8:f7:f4:15:3a:a6:c2:80:00:ab:e5:ea:ba:
                    38:a8:30:44:64:58:8f:60:ee:d9:c7:8f:a7:c2:fe:
                    28:94:5f:cd:84:92:4a:60:81:a8:07:95:10:b9:06:
                    02:66:fe:be:49:f3:68:76:28:4b:b5:18:77:f4:4a:
                    72:39:f2:34:4a:53:a9:81:02:2e:8e:21:9c:c0:31:
                    dc:eb:b4:e3:45:07:38:8d:70:4e:fe:06:54:e9:16:
                    94:2d:9e:b8:18:99:ae:1d:7f:10:84:75:cd:32:cc:
                    8a:99:c4:39:bd:ae:17:f0:00:65:5c:43:e9:29:35:
                    09:52:37:d7:5f:c3:db:2b:3b:0d:8c:60:c2:cf:ae:
                    89:16:a1:1e:cc:ec:33:1b:24:98:2c:ec:42:8a:49:
                    a9:22:ee:1c:40:1c:1c:bc:6b:3a:12:b8:42:d0:8e:
                    14:56:e0:dc:1c:6d:39:91:79:35:a0:c4:7d:18:7e:
                    f8:bc:cf:5a:57:76:3a:f2:59:40:e8:76:f8:6c:33:
                    eb:fe:a7:35:46:be:8d:ca:62:12:ac:c8:90:cf:46:
                    24:72:97:29:16:bf:3d:82:91:88:60:62:f8:f4:b6:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AB:20:7C:22:6C:76:AD:4B:31:97:4D:6A:57:B1:7B:56:86:BE:69
            X509v3 Authority Key Identifier:
                keyid:16:25:68:E5:3E:E1:CC:63:AF:A6:BB:CE:7B:AD:8F:CB:84:8C:DD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:9a:25:d0:9a:fc:be:8c:5f:a3:a8:83:9c:0d:b2:81:2a:
         00:d2:b6:6f:46:1e:f4:08:79:a0:a5:c5:e2:b8:76:2c:dc:01:
         1d:94:46:69:dc:01:97:f2:68:2b:d1:a4:83:9d:0e:32:e9:b0:
         73:55:81:71:89:28:ca:4e:0d:52:26:d1:5c:ec:89:64:0a:e3:
         6c:86:b8:ae:6c:f7:a0:0c:8f:1d:a7:65:ac:1d:09:c2:25:b5:
         24:28:9d:a1:1c:1a:29:c1:43:ce:a0:a3:21:f7:18:b5:c3:9f:
         6a:56:e6:62:52:e6:98:9c:08:56:76:64:07:21:a2:91:0d:5e:
         a3:29:b0:91:f9:1e:58:75:58:10:8d:c7:71:18:c9:a5:7f:16:
         5f:19:fc:17:92:9f:8f:cf:45:2b:c1:b7:5c:6d:f8:74:2d:8f:
         d9:c1:66:73:3d:ba:b7:ff:30:9a:99:97:17:36:0c:74:ad:a1:
         8c:49:3e:c5:96:9f:47:44:51:71:91:e2:62:cb:80:ad:4b:d9:
         89:b3:9d:ad:ae:94:d3:4f:29:6a:b7:4f:7f:2e:f8:31:fc:17:
         50:b2:df:e0:25:20:06:ab:1c:15:25:70:da:59:b6:2c:35:f0:
         10:92:d1:a1:56:2b:83:c0:00:7f:41:55:8f:5d:7e:24:2b:ca:
         16:fd:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:55 2026 by rpki-client