Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a353a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a353a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          XP+8aeJaUtgnLOQon77Z+wlsOj44nQ/OSky5ehbD93c=
Subject key identifier:   EE:85:DB:47:C9:70:AD:D3:E0:33:1A:0B:FC:80:07:E8:A3:D7:50:FD
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       57B0C7EEF155BB7CF013AA14B600FEFB00351968
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a353a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 10 Jul 2026 23:51:56 +0000
ROA not before:           Fri 10 Jul 2026 23:46:56 +0000
ROA not after:            Fri 09 Jul 2027 23:51:56 +0000
asID:                     267787
IP address blocks:        2803:4fa0:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 20:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b0:c7:ee:f1:55:bb:7c:f0:13:aa:14:b6:00:fe:fb:00:35:19:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Jul 10 23:46:56 2026 GMT
            Not After : Jul  9 23:51:56 2027 GMT
        Subject: CN=EE85DB47C970ADD3E0331A0BFC8007E8A3D750FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:e5:ec:ef:d3:1c:9b:41:c7:df:6d:f6:3b:
                    f2:a3:c8:40:bb:65:60:81:6d:9d:4a:2c:66:4e:b7:
                    c0:19:31:60:61:45:7e:d7:50:0c:9a:8a:aa:ec:be:
                    1c:47:46:1d:61:af:85:9e:6a:15:4b:60:8a:6b:fa:
                    a6:e7:03:cc:1d:1c:5a:aa:01:2c:01:2f:c5:ad:d5:
                    72:85:52:60:1f:f0:4e:49:c1:5b:95:07:f2:ab:8d:
                    51:18:e6:fd:65:3c:ae:5b:1b:e2:a3:5f:b5:f7:af:
                    e0:e1:9f:7c:9d:6a:73:90:42:d0:85:3f:23:32:71:
                    0b:00:c6:26:bf:07:12:0b:67:f1:a6:07:77:05:30:
                    4e:85:c2:99:a6:cd:39:60:ac:a2:00:1c:75:ef:28:
                    46:2a:83:e0:1f:12:47:e0:8f:ee:72:f2:a9:61:35:
                    50:e2:49:15:f4:de:55:e8:8a:fc:ba:dc:79:c3:d1:
                    51:17:b7:18:65:06:04:3b:4e:b6:c1:aa:a0:89:96:
                    a5:d3:7d:d1:0c:73:06:ba:5a:25:17:7a:9c:88:4d:
                    92:40:eb:8b:f2:cb:8b:d0:35:8f:4a:01:01:80:37:
                    27:27:3d:10:98:04:4c:23:f8:9a:9c:6b:de:be:38:
                    1f:45:97:6a:88:8f:5f:cf:a6:84:86:9a:a0:fc:ff:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:85:DB:47:C9:70:AD:D3:E0:33:1A:0B:FC:80:07:E8:A3:D7:50:FD
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a353a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:7e:2d:1c:d0:f2:36:d2:90:16:b1:ec:8e:82:fc:fc:c0:49:
         0a:99:62:77:67:90:b8:47:2c:ef:e7:22:fb:ca:2b:46:74:75:
         36:13:cc:6d:29:6e:64:86:85:97:d7:4b:f5:dd:b7:7c:fb:49:
         f5:bb:93:ca:c4:7b:0d:01:1a:4a:46:96:66:3e:59:72:f1:da:
         12:d9:a4:38:10:0c:c2:34:f9:af:03:48:55:1b:65:62:70:e7:
         18:f6:31:7c:87:8c:6c:ae:7f:a8:30:73:e5:b8:b3:a7:5f:b0:
         1c:ed:b2:49:0e:01:7d:94:f5:cf:86:1f:25:b3:8d:09:93:0a:
         2c:bb:03:01:82:90:e0:da:8a:72:17:30:18:0c:4e:1d:51:39:
         0f:73:ab:5a:d9:58:72:eb:05:d6:d7:20:31:b6:78:f7:16:dc:
         a8:50:b6:da:e9:0b:e5:90:cb:49:e4:0f:9b:52:77:ac:df:33:
         bb:12:4e:52:cb:9b:b3:cb:46:d8:31:9a:97:09:86:41:da:73:
         8f:30:09:b3:e4:9f:35:92:e7:4e:d1:58:9b:13:6a:2c:9e:e0:
         b1:7a:1a:d1:5f:a9:08:fe:67:3b:2a:8e:66:37:77:8f:77:45:
         15:58:ee:d2:93:a9:df:78:42:97:f0:8b:07:3b:29:63:70:a4:
         ed:e3:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:44:17 2026 by rpki-client