Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6230303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a6230303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          LvXL4aSIDZC7RuM2/2EaSntw43alcAbDwvC6c02kh1M=
Subject key identifier:   BA:99:F3:BA:6A:9C:18:58:3E:A1:E7:C7:4A:1B:6D:BE:08:54:5E:38
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       610B2DF46F262593E8624DF04288204C9B05241B
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6230303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 03 Mar 2026 05:32:29 +0000
ROA not before:           Tue 03 Mar 2026 05:27:29 +0000
ROA not after:            Tue 02 Mar 2027 05:32:29 +0000
asID:                     273192
IP address blocks:        2803:650:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 16:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0b:2d:f4:6f:26:25:93:e8:62:4d:f0:42:88:20:4c:9b:05:24:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Mar  3 05:27:29 2026 GMT
            Not After : Mar  2 05:32:29 2027 GMT
        Subject: CN=BA99F3BA6A9C18583EA1E7C74A1B6DBE08545E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:45:7b:be:1b:f7:69:90:68:1f:89:a0:16:
                    d3:db:2a:87:2e:2b:6b:a5:4f:df:5a:4f:ca:3d:00:
                    b8:2a:30:d2:73:3e:60:c6:0b:c5:bb:99:6a:99:62:
                    65:40:55:e0:78:89:bb:4b:de:a0:95:86:af:70:c0:
                    e5:8e:e8:45:c4:71:4b:b0:84:92:d9:89:a6:33:89:
                    cd:b8:ad:80:90:d5:61:7b:dd:a3:11:3e:99:5f:b7:
                    e5:9e:6c:b4:e3:ac:6b:7b:bd:25:99:01:e8:a0:8e:
                    10:cb:7f:c3:b7:2a:a2:b4:7b:ea:ae:69:07:a6:97:
                    dd:05:02:39:7a:63:fe:9e:1f:23:a4:76:d3:87:8f:
                    9b:e5:5f:5e:85:58:7b:71:76:da:a9:bb:91:f7:fd:
                    bb:fa:d8:b0:d9:32:56:45:dd:fc:57:3f:01:67:41:
                    5e:cc:bd:77:fe:a8:8d:a1:6c:10:aa:9d:d9:81:94:
                    d3:cd:20:33:1a:b9:34:6f:f0:0b:ef:56:ec:e6:00:
                    2f:31:8c:77:a5:42:39:0d:08:71:39:02:3f:cd:ba:
                    b1:08:da:65:12:5a:c3:6b:b8:66:62:a1:6c:6d:e4:
                    3a:5b:cf:cf:a0:0c:22:11:c7:b9:6f:8b:7c:42:86:
                    a4:f2:61:c0:b1:21:4b:9d:87:7d:2b:d7:a6:8c:dc:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:99:F3:BA:6A:9C:18:58:3E:A1:E7:C7:4A:1B:6D:BE:08:54:5E:38
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6230303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:94:5f:8a:a9:6e:af:19:56:4e:5e:6b:36:aa:72:ac:0a:
         2a:5a:1c:52:88:ef:1d:2a:6b:cc:cf:ec:8b:04:48:97:03:8b:
         9b:33:4d:7d:2e:d4:4a:ff:de:15:e9:4d:cb:e0:73:e8:ba:99:
         7e:f4:d7:64:df:45:a4:8a:8a:97:1d:ef:95:38:74:4e:3e:8f:
         2d:4e:74:85:bf:49:f7:08:82:98:49:25:fe:5f:49:65:42:60:
         e4:65:a0:6b:79:4a:53:b5:eb:7a:c0:9b:10:52:8e:b3:ef:9b:
         a1:50:29:1d:c9:d1:da:b8:54:00:b4:e4:22:2d:d5:ba:73:ee:
         13:50:ee:d8:ae:bf:d7:21:7d:c4:3c:c9:1d:63:aa:9a:9c:89:
         be:50:dd:d0:2f:a6:df:1b:99:1d:4d:96:9f:92:fe:78:09:62:
         93:48:ba:8c:38:2a:6f:8b:a2:84:07:ea:75:91:2f:69:b2:bf:
         9a:c4:1e:1e:45:b8:77:6b:f8:27:53:3c:40:8b:e1:23:a4:57:
         43:5e:bf:e0:b4:2b:7e:db:b2:aa:f8:5b:d5:f5:0d:57:74:97:
         b0:c0:d0:94:50:91:d0:60:a9:2c:01:1e:3c:fb:0c:fc:24:ef:
         5e:c9:7f:36:b2:c4:67:11:1c:c3:5a:1c:03:94:e4:f6:ea:10:
         74:8c:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:56:44 2026 by rpki-client