Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a323a3a2f34382d3438203d3e203532333932.roa
File:                     323830333a623130303a323a3a2f34382d3438203d3e203532333932.roa (raw, json)
Hash identifier:          Oz3YzOzpuKOOcwgpZ05z1aJFR3F5YZGoY7ZYmcE68BQ=
Subject key identifier:   A8:E5:D1:17:63:EF:0F:3B:A1:C8:5C:25:7C:27:BC:19:61:E5:94:7D
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       6A7EB736D66DD48553CD34D330E49DD488BA0C
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a323a3a2f34382d3438203d3e203532333932.roa
Signing time:             Tue 23 Jun 2026 21:49:16 +0000
ROA not before:           Tue 23 Jun 2026 21:44:16 +0000
ROA not after:            Tue 22 Jun 2027 21:49:16 +0000
asID:                     52392
IP address blocks:        2803:b100:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7e:b7:36:d6:6d:d4:85:53:cd:34:d3:30:e4:9d:d4:88:ba:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jun 23 21:44:16 2026 GMT
            Not After : Jun 22 21:49:16 2027 GMT
        Subject: CN=A8E5D11763EF0F3BA1C85C257C27BC1961E5947D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:4c:d6:94:77:4f:62:26:5e:1b:6e:9b:9f:
                    9b:39:a9:04:52:59:a4:7d:00:00:76:fd:49:3f:c2:
                    9d:c1:f8:bb:ac:65:4b:ba:d3:94:ce:07:15:34:18:
                    51:c6:f6:8d:5e:98:29:00:63:21:66:df:23:54:d9:
                    1f:4e:db:58:c5:83:93:c2:95:41:09:5f:fb:54:54:
                    1d:a4:8c:df:f8:92:9b:81:1d:fa:de:43:42:e4:b6:
                    3a:b2:00:0a:04:26:c5:99:8f:e1:14:e0:94:58:a7:
                    fb:19:03:ae:0d:f8:5f:49:91:09:63:be:ad:3e:09:
                    46:c0:52:a5:c4:34:f3:99:3e:e5:f1:34:4c:cc:35:
                    08:83:4f:04:43:83:e2:64:b5:31:6b:15:03:57:29:
                    84:cc:81:f6:8f:bd:38:95:da:9f:a3:9b:f7:e8:ec:
                    e7:41:91:44:71:1d:43:3c:f7:33:2d:2c:80:91:ed:
                    5a:27:80:f2:d7:d0:86:42:3e:05:7e:c0:19:25:5f:
                    f3:a4:c0:09:d7:18:c5:70:e7:be:d3:d0:12:78:bf:
                    00:4e:91:0f:64:7b:65:8e:27:c4:58:4f:94:75:a9:
                    71:7c:7c:75:db:46:5a:db:2b:cc:1b:ef:f6:f6:fd:
                    d3:50:15:de:83:26:4b:77:d3:78:89:b9:95:5c:5b:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E5:D1:17:63:EF:0F:3B:A1:C8:5C:25:7C:27:BC:19:61:E5:94:7D
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a323a3a2f34382d3438203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:cd:77:51:02:eb:71:26:64:37:14:c4:ea:75:73:5c:90:62:
         3a:b3:0c:ce:bd:47:a7:28:46:af:1a:91:f6:11:30:47:e3:d7:
         83:48:c5:79:92:65:7e:07:97:1a:fc:b4:e4:ca:6a:ce:1e:4d:
         ad:dd:48:ee:9b:46:18:11:6e:18:a7:26:51:7d:e2:8b:27:51:
         50:74:ca:02:f4:2d:e8:b5:c9:ac:5a:c1:3f:09:60:63:3b:85:
         2c:5d:e7:c3:b9:13:ad:48:33:c8:1f:f1:60:e2:2c:ad:c8:4e:
         75:77:1c:1e:f9:d5:f9:a9:5e:95:78:18:02:34:bd:a4:9c:19:
         f9:87:a9:e5:12:0f:8a:11:05:92:81:a5:36:d7:e2:f8:5c:b8:
         c8:1d:3c:df:e8:f9:6f:b8:0e:c6:d6:61:cd:bc:ce:33:24:53:
         51:a5:e3:31:df:a8:ad:1a:b7:23:c6:6a:f1:fb:3a:ae:2f:14:
         30:34:ca:05:64:3a:3f:0d:7a:78:46:2a:95:b2:39:66:49:9c:
         ff:05:14:0f:df:b2:7a:89:2a:a8:19:16:5d:06:bd:49:42:08:
         c1:a6:b9:35:f6:db:84:42:96:1a:3e:27:36:8c:c5:a7:07:e7:
         3a:f0:73:2d:f3:18:f8:63:9c:f4:a7:80:fe:e1:93:01:df:b2:
         39:77:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:04:20 2026 by rpki-client