Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a353a3a2f34382d3438203d3e203532333932.roa
File:                     323830333a623130303a353a3a2f34382d3438203d3e203532333932.roa (raw, json)
Hash identifier:          DnSbPKJQAkgb3+Mk6+kFIEgrbQKViFoTshpKOwkviWI=
Subject key identifier:   6B:14:45:F3:DF:89:BD:C9:C7:AF:B0:51:AA:6E:79:77:A2:E8:FD:E1
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       1D9CDC401E7B027D103DEEFF21CF3913518DE612
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a353a3a2f34382d3438203d3e203532333932.roa
Signing time:             Tue 23 Jun 2026 21:49:19 +0000
ROA not before:           Tue 23 Jun 2026 21:44:19 +0000
ROA not after:            Tue 22 Jun 2027 21:49:19 +0000
asID:                     52392
IP address blocks:        2803:b100:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9c:dc:40:1e:7b:02:7d:10:3d:ee:ff:21:cf:39:13:51:8d:e6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jun 23 21:44:19 2026 GMT
            Not After : Jun 22 21:49:19 2027 GMT
        Subject: CN=6B1445F3DF89BDC9C7AFB051AA6E7977A2E8FDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:51:61:e3:f9:ea:2c:c8:f0:5f:40:bf:5c:
                    db:c3:d9:df:fd:58:88:28:de:9f:27:32:81:67:90:
                    f6:a3:c8:a2:80:c7:d0:34:55:45:46:1c:c3:b0:cb:
                    db:45:46:e9:c2:a4:78:4b:7e:57:5d:01:77:8e:9d:
                    45:14:15:ee:65:2b:76:46:b7:8c:07:32:5b:6f:05:
                    29:44:72:6e:96:28:48:53:d6:ca:61:f3:15:03:b0:
                    bf:76:99:c1:78:af:44:34:0c:72:c0:43:d8:68:ca:
                    75:56:c4:cd:c2:fc:c9:a9:89:21:17:ba:1a:db:20:
                    d0:3f:f0:79:9c:36:49:23:79:42:67:31:41:01:b4:
                    02:5f:3d:f7:ec:88:69:88:2e:cc:85:40:6e:96:69:
                    4d:01:f5:24:55:8b:e8:8a:0e:4a:0a:14:f5:cc:e9:
                    5a:4c:17:84:73:41:5a:f4:29:b5:45:bd:27:eb:f7:
                    df:b0:9b:30:51:58:d4:bf:40:ad:3f:9d:ea:f8:4f:
                    e6:93:24:b6:57:38:30:1b:e0:64:39:fd:70:4e:1a:
                    bb:15:24:7d:ad:ef:13:da:c1:bd:1f:bf:49:5a:d5:
                    ea:5a:82:ca:43:79:4a:11:ed:f9:ff:f0:06:c0:e1:
                    a7:38:23:a2:82:1b:2d:26:ef:83:71:8e:70:8e:66:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:14:45:F3:DF:89:BD:C9:C7:AF:B0:51:AA:6E:79:77:A2:E8:FD:E1
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a353a3a2f34382d3438203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:7e:d8:92:ed:15:5a:a0:eb:82:4c:7e:3a:df:e6:b0:83:
         cb:e4:9e:d8:a2:29:d5:64:c9:e1:b2:59:84:4b:99:f7:1a:8e:
         57:0e:d5:b6:db:7a:43:6d:bf:c5:47:22:24:43:89:c3:d7:e2:
         2a:8a:33:1f:39:c5:07:42:b1:c5:23:ec:11:b7:19:47:d6:8b:
         40:a3:12:d2:be:64:ff:d7:4a:a6:09:1d:ff:6b:19:73:06:b8:
         67:9b:1a:3e:7a:45:0d:82:fc:df:36:af:5e:d0:f4:49:47:49:
         af:9e:a9:ae:80:0c:11:09:cc:b3:02:34:16:b2:45:6d:0b:bf:
         9e:73:d4:04:81:59:3c:fa:b0:e7:e7:fe:4a:01:2b:11:8e:36:
         3f:06:2b:65:7b:66:72:e1:d9:f7:9a:97:29:37:d1:9f:8e:f8:
         9a:db:a5:be:73:19:b2:0d:3f:fb:1b:26:8c:4c:19:d5:26:e7:
         3b:5b:fb:d3:2f:91:be:44:9d:0b:ff:71:32:1f:ba:aa:59:dc:
         cd:22:7e:55:2a:c9:52:16:30:8a:51:94:7b:14:9e:86:f1:ba:
         e1:e7:3b:09:1d:e2:48:72:b3:4d:5a:6a:02:a2:87:5d:ee:84:
         87:d1:ea:30:99:7b:bf:fa:6c:41:b1:ea:8e:ad:6b:75:10:af:
         fa:38:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:49 2026 by rpki-client