Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/323830333a366161303a3a2f33322d3332203d3e20323636383732.roa
File:                     323830333a366161303a3a2f33322d3332203d3e20323636383732.roa (raw, json)
Hash identifier:          4SFSQEJWuBqhZWt93aFAgNXfNU1fzLQG2zP4sX0uan8=
Subject key identifier:   84:EC:33:61:96:61:24:4C:CD:56:66:77:E1:4A:46:F5:B2:8B:30:F7
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       08B63679CC45AE034B472CE1DB966C3C15765D30
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/323830333a366161303a3a2f33322d3332203d3e20323636383732.roa
Signing time:             Tue 28 Apr 2026 14:25:01 +0000
ROA not before:           Tue 28 Apr 2026 14:20:01 +0000
ROA not after:            Tue 27 Apr 2027 14:25:01 +0000
asID:                     266872
IP address blocks:        2803:6aa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 16:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b6:36:79:cc:45:ae:03:4b:47:2c:e1:db:96:6c:3c:15:76:5d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Apr 28 14:20:01 2026 GMT
            Not After : Apr 27 14:25:01 2027 GMT
        Subject: CN=84EC33619661244CCD566677E14A46F5B28B30F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:c5:cd:12:23:46:6e:84:72:d5:c8:08:9c:
                    77:b9:7c:c5:10:2d:b2:2c:09:57:e2:b1:4b:4b:3a:
                    77:7e:51:50:fd:c2:4d:b9:8d:56:6d:c9:a5:8d:66:
                    e3:af:78:db:d8:61:fe:88:0e:ec:20:70:95:7c:34:
                    bf:d9:0e:ce:9e:e1:ce:8f:25:f0:99:c1:13:15:19:
                    35:66:f4:4c:a1:94:be:5f:1b:40:b6:7a:f0:96:19:
                    3c:85:34:32:9c:87:0c:0f:21:1a:01:3b:77:f4:78:
                    90:98:cf:66:a3:5c:e8:7f:6b:70:cb:dc:ad:eb:e6:
                    af:6a:9d:c6:67:ff:ab:a2:da:c0:4e:15:b2:df:4a:
                    01:0e:a2:22:d0:04:7b:79:44:9a:83:00:7d:6b:35:
                    3c:ef:fa:59:70:bd:2c:df:b2:d8:cc:2f:91:5c:2f:
                    6a:8f:5c:35:ea:7f:fb:1f:9e:4b:7f:1c:6f:19:d0:
                    e3:48:67:18:8d:cd:b4:2b:ad:36:07:5d:1f:31:ce:
                    f3:83:44:05:ce:34:0d:a8:8e:23:69:7f:3f:bb:16:
                    2d:d1:80:75:78:c1:55:21:55:2c:57:cd:30:23:d4:
                    12:45:91:03:d4:f7:ae:48:f7:84:a8:9c:e3:77:cd:
                    a7:07:f8:0d:e6:65:ec:f9:a6:21:b3:e5:c9:dd:0e:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:33:61:96:61:24:4C:CD:56:66:77:E1:4A:46:F5:B2:8B:30:F7
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/323830333a366161303a3a2f33322d3332203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:db:35:2d:49:ab:79:6b:8d:e8:e6:8a:63:10:91:7e:be:fd:
         e9:4b:22:0f:ae:e7:4e:aa:64:fc:38:ec:4a:bd:15:ff:64:16:
         36:93:c0:f3:ef:a1:fb:98:af:4f:f3:a2:4e:f4:04:eb:9a:5b:
         e0:28:c4:79:85:f5:f8:2e:d8:c3:62:48:4d:56:92:d8:7c:c1:
         cf:80:87:a0:73:49:01:d3:36:46:39:f3:87:40:d4:1f:bc:8a:
         d6:ea:1c:eb:1c:9e:05:90:de:f7:5f:78:85:4c:0e:73:24:da:
         62:e3:33:e7:f0:b3:cc:d4:6b:21:1b:4b:71:f0:d6:70:2f:f6:
         a3:98:fa:fe:a8:2e:42:71:11:8f:3e:a3:ec:bd:9f:b6:65:5f:
         33:cd:1d:38:93:d4:bf:e3:54:35:00:52:a8:df:72:99:1e:ec:
         37:7c:51:e8:32:75:ff:e8:f5:b2:fd:05:b3:9d:72:8f:2b:4e:
         2f:23:ce:c5:8d:b7:02:85:df:3e:48:59:20:37:86:4c:3c:48:
         03:1c:38:85:14:d5:23:b4:38:4a:f4:2f:d6:f7:d7:cf:ac:0b:
         75:a5:4d:95:43:ed:dc:be:c6:4c:1d:23:9f:cc:7f:08:43:9c:
         64:a4:4e:50:a6:03:10:53:aa:9f:f6:cb:ef:82:9c:72:77:cf:
         eb:13:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:27:48 2026 by rpki-client