Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3438203d3e20323733313836.roa
File:                     323830333a646135303a3a2f33322d3438203d3e20323733313836.roa (raw, json)
Hash identifier:          ch3aq3EGYLsTt7sKB2V1Ri7D3M+w7eOpK6L6mXu3g80=
Subject key identifier:   98:1B:E9:E0:95:B3:AB:80:E6:D1:1A:B3:B7:78:F6:F9:4A:4B:65:4A
Certificate issuer:       /CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0
Certificate serial:       58B5A96471818E1F6DD207E5C45696D7FFEB16A4
Authority key identifier: 49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3438203d3e20323733313836.roa
Signing time:             Fri 26 Jun 2026 04:49:57 +0000
ROA not before:           Fri 26 Jun 2026 04:44:57 +0000
ROA not after:            Fri 25 Jun 2027 04:49:57 +0000
asID:                     273186
IP address blocks:        2803:da50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b5:a9:64:71:81:8e:1f:6d:d2:07:e5:c4:56:96:d7:ff:eb:16:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0
        Validity
            Not Before: Jun 26 04:44:57 2026 GMT
            Not After : Jun 25 04:49:57 2027 GMT
        Subject: CN=981BE9E095B3AB80E6D11AB3B778F6F94A4B654A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:f0:bc:ad:d0:b0:49:1f:8a:93:9d:72:ba:
                    73:2d:ec:9d:61:05:26:57:e1:c3:21:e0:fd:b0:79:
                    d4:b4:e0:33:67:99:b6:f8:c1:62:38:cf:27:cb:79:
                    63:37:80:5f:4c:38:6b:b7:11:2f:f9:01:ff:68:88:
                    8f:d4:80:e2:a8:0e:cc:cb:f7:37:99:40:2d:55:6f:
                    c9:8b:e8:3d:11:3b:47:99:ba:03:98:78:40:82:3c:
                    1f:fe:b1:6f:75:e0:ab:3e:74:12:81:ad:23:18:22:
                    1c:cf:86:4e:8e:08:36:2a:37:24:25:3d:32:b9:8e:
                    e7:79:ca:13:b9:4b:5e:c6:3e:64:18:dd:a2:3f:3f:
                    95:09:ab:d6:dd:2e:67:9f:58:4f:97:64:21:34:a2:
                    4a:4a:33:e2:2f:80:fb:7d:60:59:a1:de:c3:c1:24:
                    d7:3a:e0:d7:f9:20:d5:e5:d9:4e:9d:49:34:42:43:
                    b4:e1:82:f0:8d:3f:e7:fd:e6:9e:44:45:d9:f0:9b:
                    81:04:06:fe:83:5c:07:47:9c:fa:c2:6b:11:85:3f:
                    64:65:52:16:80:09:dc:b7:0f:7f:34:6a:9e:f9:75:
                    fb:b8:8e:a8:34:0b:39:9c:1a:77:dd:45:a8:26:17:
                    59:53:7a:4f:4d:f5:33:57:31:7f:56:34:49:15:79:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1B:E9:E0:95:B3:AB:80:E6:D1:1A:B3:B7:78:F6:F9:4A:4B:65:4A
            X509v3 Authority Key Identifier:
                keyid:49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3438203d3e20323733313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da50::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:69:d0:31:37:22:c3:d5:d0:5e:10:69:7e:dc:89:95:10:dd:
         b5:92:6c:13:36:31:dc:b8:f1:4e:a0:81:13:93:37:5d:40:28:
         96:a8:44:58:f4:4c:a8:4c:d3:98:4f:25:b6:08:47:46:ef:f6:
         ad:89:33:4b:66:46:e6:6e:cb:16:3a:47:39:c9:0e:7d:a9:a9:
         41:96:6b:2e:75:ab:cc:90:70:d8:58:42:89:90:22:b4:d4:13:
         9b:81:3e:26:e9:b6:72:d1:6a:03:be:56:1e:35:8c:30:52:33:
         8e:43:ea:26:14:95:52:05:d2:a1:e8:ff:d0:ed:2a:5a:33:54:
         60:96:54:da:6f:e6:1a:c1:39:8e:f0:67:0e:8c:67:f0:d7:37:
         de:bb:23:30:2b:e8:c9:51:c1:c4:5e:18:ae:2b:1d:29:be:b8:
         d4:fa:ab:2d:c7:42:9c:9c:2f:0e:c6:63:1b:34:74:d9:c1:8d:
         83:a8:94:66:e4:8a:f8:0a:80:30:2e:33:63:2b:04:5a:15:0f:
         9f:71:c5:f6:62:fd:44:51:a7:28:bc:a0:95:be:90:32:ed:f7:
         f7:97:09:d3:04:b5:b6:59:de:0b:97:7c:88:14:d7:9c:c8:33:
         c6:70:2b:9a:80:a7:41:55:bf:31:37:70:5b:d1:d6:bf:fb:ce:
         0a:17:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:47:39 2026 by rpki-client