Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a3a2f33342d3334203d3e20323636373831.roa
File:                     323830333a646632303a3a2f33342d3334203d3e20323636373831.roa (raw, json)
Hash identifier:          DTlNd6/YOwH+g5PICnOEeUnPpYAqPeptjuOG/6xWVQI=
Subject key identifier:   5A:AD:25:40:EA:B0:C8:2C:7F:1B:BB:43:1E:0A:3F:A2:AA:C7:90:0B
Certificate issuer:       /CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
Certificate serial:       66A4782754C8C78C0BDE2611194736B5FDBC70FD
Authority key identifier: 74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a3a2f33342d3334203d3e20323636373831.roa
Signing time:             Thu 26 Mar 2026 12:36:00 +0000
ROA not before:           Thu 26 Mar 2026 12:31:00 +0000
ROA not after:            Thu 25 Mar 2027 12:36:00 +0000
asID:                     266781
IP address blocks:        2803:df20::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 17:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a4:78:27:54:c8:c7:8c:0b:de:26:11:19:47:36:b5:fd:bc:70:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
        Validity
            Not Before: Mar 26 12:31:00 2026 GMT
            Not After : Mar 25 12:36:00 2027 GMT
        Subject: CN=5AAD2540EAB0C82C7F1BBB431E0A3FA2AAC7900B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:75:74:e0:f5:46:b1:e2:5a:b5:cb:76:1d:
                    38:46:74:e5:2a:3e:06:dd:60:a5:dc:37:ea:5f:3f:
                    f8:40:1a:a6:ed:f7:8f:cc:a5:cf:ea:86:9d:77:b5:
                    bf:10:48:89:38:ec:d6:2f:6f:cb:53:78:fa:f7:55:
                    39:3f:cb:01:8d:81:45:d0:7f:69:8d:da:bb:f5:bc:
                    49:e9:eb:00:32:6d:d6:5e:86:72:58:ef:24:4b:41:
                    8f:a5:28:63:c5:79:78:62:54:bc:d2:82:83:ba:00:
                    ad:5e:1d:c2:2f:1c:96:87:4e:49:52:33:6b:06:03:
                    9e:4f:54:63:25:af:cb:3c:94:29:e0:01:98:a7:f4:
                    f9:14:68:f5:82:62:8b:aa:92:88:99:d2:be:fc:46:
                    c7:44:7b:20:d5:62:97:6a:b3:b6:1b:75:4e:6c:0b:
                    7d:08:cb:d2:1a:02:70:c0:47:5b:74:a4:45:1a:19:
                    e8:de:6f:d1:99:5c:fe:51:4d:34:00:74:da:82:22:
                    f0:4b:fc:90:88:b2:e4:37:db:21:20:9c:fd:57:64:
                    02:8b:33:ad:2e:86:d7:10:2a:56:a9:ec:30:ef:7a:
                    e8:bf:62:b7:4a:ac:81:09:78:d0:f7:a6:ed:24:75:
                    97:b8:83:60:2e:14:49:f0:33:8b:e4:2c:16:fb:53:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AD:25:40:EA:B0:C8:2C:7F:1B:BB:43:1E:0A:3F:A2:AA:C7:90:0B
            X509v3 Authority Key Identifier:
                keyid:74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a3a2f33342d3334203d3e20323636373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df20::/34

    Signature Algorithm: sha256WithRSAEncryption
         de:40:5f:75:32:02:b4:ac:b6:2d:a2:a2:c3:d5:c5:f3:08:47:
         17:b1:6a:11:db:6b:78:2b:2a:92:d8:71:34:64:11:e5:8c:93:
         ee:b4:74:43:61:83:84:53:f6:ff:40:e5:8c:b9:9d:f0:94:60:
         4b:95:ea:bb:1a:7d:22:55:94:d3:69:c7:09:65:b0:e3:18:e2:
         b8:2a:19:0f:8a:9a:12:a3:37:cb:fd:73:40:36:1c:08:37:e3:
         fd:5c:32:f3:68:a2:7a:64:e7:4e:b4:79:6e:b9:57:7c:61:fc:
         61:1f:5b:54:5b:1f:d6:3e:6a:41:ed:c2:3d:3c:e8:31:12:f2:
         0f:c3:54:c4:8c:40:e7:1b:2e:d5:3e:ac:87:9e:94:16:36:c2:
         32:a0:48:5e:90:a8:a5:4e:8a:81:61:05:4c:90:e1:3b:c9:d7:
         e8:be:fb:12:1a:ca:3d:06:9f:50:4a:d0:98:85:5b:06:39:ae:
         24:d3:52:82:6b:e1:77:af:0d:d9:8e:73:86:85:9c:8b:2e:29:
         5d:07:f6:37:20:69:af:17:ae:d6:32:df:9e:ef:b8:2e:2c:c5:
         6b:88:10:27:23:8e:a6:45:0f:be:af:b4:6b:fd:11:96:4a:be:
         49:cb:1c:7d:5b:ea:42:1f:5e:6f:a1:c7:f7:85:a4:c4:0c:04:
         1e:7d:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:21 2026 by rpki-client