Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a313030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a313030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          c1o3HfyAHlh7vnO7KzONiI8Yiug+vZwWEYeuoGtSV1s=
Subject key identifier:   1E:2B:D6:00:3E:57:07:D8:83:0B:25:08:F7:B2:57:36:15:75:08:C9
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       7085F60A27615D34FAB325F0CC36926831380C73
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a313030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Tue 28 Apr 2026 15:40:08 +0000
ROA not before:           Tue 28 Apr 2026 15:35:08 +0000
ROA not after:            Tue 27 Apr 2027 15:40:08 +0000
asID:                     273142
IP address blocks:        2803:2c50:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 09:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:85:f6:0a:27:61:5d:34:fa:b3:25:f0:cc:36:92:68:31:38:0c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Apr 28 15:35:08 2026 GMT
            Not After : Apr 27 15:40:08 2027 GMT
        Subject: CN=1E2BD6003E5707D8830B2508F7B25736157508C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:ea:5d:61:b3:96:c2:e4:c4:3f:fd:16:90:
                    92:f4:27:c4:dc:87:b9:81:c0:b3:1a:38:94:de:b9:
                    76:57:fb:88:12:52:73:24:0b:74:2e:47:e2:7e:fc:
                    9d:fe:37:8c:5c:2c:cb:7d:1b:8b:a2:1b:21:84:9e:
                    ae:bf:9a:74:c6:3c:96:3c:93:07:a9:af:07:50:1a:
                    f9:62:4d:07:01:64:d8:f4:2f:d1:67:3d:ed:e0:9d:
                    c2:71:40:91:51:85:dc:6b:1f:b3:f1:04:3a:ae:27:
                    34:44:b1:be:0e:82:16:7e:97:53:67:b4:7b:98:2f:
                    3d:a7:3f:50:98:12:5d:c0:57:2f:a4:2a:33:df:48:
                    2e:e1:ef:b0:0f:19:fe:ca:a1:99:a8:55:63:02:3f:
                    5c:a1:74:53:6b:74:e7:3a:37:3b:ed:af:4f:e1:ed:
                    92:14:80:e3:d0:35:89:ad:60:f6:e2:7b:dd:06:0c:
                    2c:96:d4:78:dd:41:01:6f:42:94:28:d7:b2:85:52:
                    02:0a:8a:72:c1:5f:fc:b8:7f:ff:1e:5b:2e:29:7b:
                    14:90:7c:42:84:67:a0:24:1a:f5:95:b4:80:a6:37:
                    5a:b7:a6:e4:93:af:0b:48:66:0b:24:a0:b1:7a:e5:
                    06:3d:38:1d:50:90:0b:4f:56:3e:f7:c6:da:77:f0:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2B:D6:00:3E:57:07:D8:83:0B:25:08:F7:B2:57:36:15:75:08:C9
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a313030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:98:55:fc:c7:18:fa:5d:cf:e7:6f:0a:8f:c0:8d:51:12:83:
         61:b0:8d:9d:65:99:97:18:72:7f:64:4b:c3:a1:e5:8c:60:d8:
         12:84:c7:d5:cd:74:5b:9f:ab:ee:87:d2:0a:f9:9f:b7:70:65:
         92:84:a2:60:90:77:79:22:93:73:fd:a7:2f:a3:41:c8:48:7a:
         73:37:b2:2c:99:13:41:18:07:58:1a:dd:51:2e:e8:b8:fd:67:
         94:0f:0e:6b:e7:57:f4:c0:39:54:81:8c:56:22:d6:d3:f6:76:
         cc:ce:a7:c0:92:62:77:d1:77:a0:7a:d3:27:3d:e1:98:5c:0b:
         35:77:d8:f6:80:93:1e:c7:9c:82:b5:ae:aa:59:a2:5c:eb:1a:
         ea:88:54:a8:83:ac:af:c4:7a:08:9c:eb:c8:c3:79:a4:aa:58:
         d5:cc:19:b5:10:a4:f2:d5:46:90:97:8c:e6:cf:ec:2a:25:11:
         e7:e8:bf:1e:20:ac:f2:b4:2f:01:3e:9e:9c:cc:ae:62:e2:b0:
         38:eb:e9:c9:46:fe:ed:77:7b:0f:55:b1:6c:93:36:a9:4f:20:
         9b:6f:91:20:26:34:d6:9c:da:23:55:a5:4e:2c:51:43:0f:34:
         83:3e:f8:a0:ba:56:84:06:16:d5:3f:e2:fc:96:7f:a1:38:b0:
         90:2d:50:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:35:54 2026 by rpki-client