Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6330303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a6330303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          9ZN0LJpUSI7FZRuw+z01twkHA6WvnfdM27smvIDPbTU=
Subject key identifier:   43:32:BE:78:3D:76:F4:5A:4E:9C:17:47:D1:59:47:F2:8E:A6:0D:1C
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       4FA9D12839883E700D86A90901D2DA4BB206B9C2
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6330303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 03 Mar 2026 05:32:29 +0000
ROA not before:           Tue 03 Mar 2026 05:27:29 +0000
ROA not after:            Tue 02 Mar 2027 05:32:29 +0000
asID:                     273192
IP address blocks:        2803:650:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 16:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a9:d1:28:39:88:3e:70:0d:86:a9:09:01:d2:da:4b:b2:06:b9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Mar  3 05:27:29 2026 GMT
            Not After : Mar  2 05:32:29 2027 GMT
        Subject: CN=4332BE783D76F45A4E9C1747D15947F28EA60D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:98:97:2b:cb:c6:69:16:44:ba:e5:fb:89:
                    54:bb:96:13:a0:3e:db:01:61:1e:8a:2f:27:11:28:
                    82:ae:6b:5e:57:2e:b7:ce:a1:1a:69:93:2e:42:81:
                    22:b1:90:a1:b6:99:4b:3a:3f:d8:04:d3:83:dd:08:
                    35:a3:5f:97:ff:49:b3:ca:4e:27:a5:47:fa:77:3b:
                    0c:d4:d9:4a:a8:0d:7d:b0:62:bd:54:1f:74:ed:2c:
                    3d:75:68:b5:21:8e:f2:aa:f4:1e:c6:04:50:4a:0b:
                    eb:0b:38:b4:80:d3:67:11:52:e3:82:a4:5c:b4:25:
                    19:a7:19:83:77:4e:a5:e8:f1:d8:4a:77:51:42:0e:
                    df:a7:80:6f:96:61:b6:65:ee:70:77:63:f7:b8:79:
                    d0:39:c0:9e:13:3c:e7:40:11:df:4e:6b:65:f3:b7:
                    3e:31:99:00:01:fa:37:84:bf:07:ba:8b:4a:a1:cb:
                    1e:38:96:75:3a:d9:57:cd:c6:af:ea:29:26:38:cf:
                    62:ab:4d:85:22:62:f3:75:6a:5e:77:9f:c0:d8:3b:
                    88:ee:2f:3f:97:7c:26:0b:68:7b:f9:bf:48:a9:3f:
                    67:96:52:60:11:ba:39:27:06:98:dd:50:07:a0:85:
                    2f:75:7e:94:69:51:61:84:95:e0:9d:5f:79:90:6f:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:32:BE:78:3D:76:F4:5A:4E:9C:17:47:D1:59:47:F2:8E:A6:0D:1C
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6330303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:de:31:de:61:cf:a9:6d:d3:21:b1:98:5f:af:22:80:7d:ce:
         c5:f1:5f:72:0f:5e:3a:1e:b0:92:31:7b:f0:79:91:e5:1f:ad:
         68:bc:8b:69:af:0c:95:31:92:36:7e:d6:03:bb:31:d2:a4:40:
         de:7c:00:be:0a:ef:4c:33:e6:27:56:ae:d7:6b:1a:aa:46:55:
         27:c4:c3:3a:16:2f:ee:81:35:59:d6:c8:f5:4f:e7:f7:ad:4f:
         a6:1e:21:18:0e:94:c1:96:41:10:21:6c:70:51:85:69:e6:8d:
         7a:cc:1a:2b:f3:c0:29:6f:10:3b:8b:e1:a9:16:52:a5:c1:c0:
         11:1c:af:ff:66:ed:cb:03:9c:93:9f:09:e1:d3:bd:22:da:1d:
         51:ff:9a:9b:ba:80:80:6c:19:15:98:dc:de:f2:78:c6:8e:23:
         f5:38:4b:1a:b6:87:91:ab:83:40:39:22:15:72:07:12:2f:66:
         78:f3:89:83:f4:1a:df:ef:78:57:80:99:b6:81:d1:73:2c:33:
         0d:e8:48:e9:2e:b7:85:ba:98:00:b5:df:75:63:62:bc:b1:b4:
         8e:40:e3:8b:90:5b:bf:a8:bc:63:5e:2a:2b:0b:55:95:34:8a:
         68:c5:7a:8f:be:a2:8d:51:ee:42:1d:45:16:bc:f4:b1:56:67:
         10:9f:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:07 2026 by rpki-client