Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/323830333a356264303a3a2f33322d3332203d3e20323734323237.roa
File:                     323830333a356264303a3a2f33322d3332203d3e20323734323237.roa (raw, json)
Hash identifier:          IxQ1i/fItB9C4/dU0MCU9PaylJw4JSwRXgv28IS/UwE=
Subject key identifier:   CB:88:E4:58:71:2A:9F:AE:41:DE:D3:C0:D2:4A:61:6C:62:07:9C:51
Certificate issuer:       /CN=D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB
Certificate serial:       5A76AB30546C79384E39B6B0C9A5AF1979750FF8
Authority key identifier: D4:5B:9E:59:13:26:5B:79:B2:ED:CF:C2:15:0D:0F:21:51:B7:F4:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/323830333a356264303a3a2f33322d3332203d3e20323734323237.roa
Signing time:             Mon 11 May 2026 20:30:00 +0000
ROA not before:           Mon 11 May 2026 20:25:00 +0000
ROA not after:            Mon 10 May 2027 20:30:00 +0000
asID:                     274227
IP address blocks:        2803:5bd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:ab:30:54:6c:79:38:4e:39:b6:b0:c9:a5:af:19:79:75:0f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB
        Validity
            Not Before: May 11 20:25:00 2026 GMT
            Not After : May 10 20:30:00 2027 GMT
        Subject: CN=CB88E458712A9FAE41DED3C0D24A616C62079C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:b2:8a:4c:53:7f:fd:c1:5d:1b:44:b0:a3:
                    5c:29:01:57:71:b1:f6:1b:ee:0c:d6:36:cd:76:a9:
                    a8:a0:a7:ff:33:ff:1d:68:80:a3:af:16:a1:03:72:
                    a1:ce:bd:e0:b1:2d:8a:65:54:fb:2b:94:67:7f:81:
                    e5:9c:67:14:0f:1d:39:c3:d8:fb:88:6b:2a:7a:25:
                    fb:35:b4:68:20:71:67:95:0b:ff:6d:9e:67:35:7f:
                    da:c9:93:c8:33:5b:39:e5:3a:fc:d8:24:8a:c2:95:
                    1b:db:97:86:a5:f9:d3:43:44:0b:1c:82:e0:74:91:
                    2d:ee:b9:1d:7a:a5:81:a4:a8:a9:aa:74:b5:6f:a5:
                    23:85:79:d7:98:2f:b8:30:5d:d7:b6:b9:c8:ff:70:
                    0d:e8:cc:eb:d1:60:e9:b4:94:84:f1:ed:1f:12:1c:
                    ca:04:fa:71:a9:ae:c9:b3:82:85:b1:a7:20:a6:5e:
                    4e:ca:39:c8:a4:3d:af:65:d8:49:87:08:0e:32:2f:
                    48:a5:28:a8:de:d9:11:fb:49:38:d6:0c:56:1d:2c:
                    00:bf:3f:60:05:b4:78:c7:60:c0:1f:6e:e3:7e:34:
                    e0:e3:9f:f2:10:c0:0e:f1:55:a8:c6:b4:a7:82:d8:
                    a7:4e:0e:e5:f5:d5:3f:d0:87:c3:24:d5:33:c0:e1:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:E4:58:71:2A:9F:AE:41:DE:D3:C0:D2:4A:61:6C:62:07:9C:51
            X509v3 Authority Key Identifier:
                keyid:D4:5B:9E:59:13:26:5B:79:B2:ED:CF:C2:15:0D:0F:21:51:B7:F4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/323830333a356264303a3a2f33322d3332203d3e20323734323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:60:11:49:e7:85:4e:19:42:b0:24:c2:b0:11:cd:25:d3:b1:
         3f:c9:df:0a:87:aa:75:e6:02:09:39:d5:34:0e:0d:2b:19:e0:
         18:8f:de:6b:48:94:4b:7b:f4:2d:bd:1e:5f:ce:5f:d1:d1:aa:
         0e:b2:b7:78:57:9e:68:7f:17:6d:8d:c2:c4:c9:5d:c4:7d:c4:
         8e:59:08:b8:4b:ba:01:d6:16:17:83:5a:cf:bd:54:60:5f:25:
         2c:18:ea:3f:91:d4:66:15:89:11:00:57:93:1d:9e:32:2f:88:
         d7:a9:50:c6:a7:f6:e5:07:34:30:ba:bf:bf:0b:34:9f:d8:3e:
         43:46:6e:f1:f0:cf:98:cb:43:be:7c:65:d4:b9:98:3c:73:ce:
         4c:5b:af:dc:29:40:f0:5a:c4:1f:93:90:19:bc:59:7f:c8:64:
         87:b4:eb:41:6b:81:d0:47:00:6b:d5:87:87:3c:93:b9:b1:13:
         b8:3e:41:a3:28:b1:16:d2:8c:fe:df:b1:18:82:a4:f2:ec:8e:
         2a:98:6b:95:54:c3:d0:b7:f0:dc:7d:2a:29:4e:c6:d5:ae:af:
         15:29:b4:59:82:bd:e3:a6:58:ba:c4:47:5f:84:84:24:09:97:
         61:82:61:e4:0a:90:59:2b:0e:26:d3:f4:bf:af:10:0f:95:66:
         c6:aa:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:42:58 2026 by rpki-client