Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/323830333a336338303a3a2f33322d3438203d3e20323636393030.roa
File:                     323830333a336338303a3a2f33322d3438203d3e20323636393030.roa (raw, json)
Hash identifier:          fGpgQ43Szswb0mk0qw4IKgbvYMbkE9nsxzJtMmv+Xzc=
Subject key identifier:   DD:00:78:E1:C3:53:30:2A:34:9A:06:DD:23:B3:82:18:D0:21:73:63
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       5F9FF96861C5AEFBA83D6DA9E77135CB44AA9374
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/323830333a336338303a3a2f33322d3438203d3e20323636393030.roa
Signing time:             Sat 18 Jul 2026 07:03:45 +0000
ROA not before:           Sat 18 Jul 2026 06:58:45 +0000
ROA not after:            Sat 17 Jul 2027 07:03:45 +0000
asID:                     266900
IP address blocks:        2803:3c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9f:f9:68:61:c5:ae:fb:a8:3d:6d:a9:e7:71:35:cb:44:aa:93:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Jul 18 06:58:45 2026 GMT
            Not After : Jul 17 07:03:45 2027 GMT
        Subject: CN=DD0078E1C353302A349A06DD23B38218D0217363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:ff:d5:6b:13:60:dd:09:8c:ee:9a:aa:b2:
                    33:64:dd:1e:a7:63:0a:2e:f9:e5:d9:ec:a6:38:00:
                    41:dd:63:b1:70:d9:14:2b:b1:f5:2a:d0:7e:b0:d7:
                    c7:aa:8d:f1:05:89:97:ae:b1:f4:6b:38:4f:e4:00:
                    a5:26:50:2e:2e:4a:55:d0:ca:fc:30:80:e3:27:40:
                    0d:e7:d9:e6:30:d5:03:1e:cd:7c:ae:7d:f8:3c:2f:
                    c2:11:b1:7f:7e:d7:d1:79:37:66:11:a2:4f:a2:6a:
                    00:22:3a:d7:f2:85:75:7e:a0:a6:55:78:4e:65:ba:
                    1b:92:e2:2f:66:69:b6:f7:07:4c:e3:47:6c:d7:db:
                    33:56:01:66:1a:7d:71:3c:93:0e:0a:21:eb:2e:af:
                    0c:e5:ee:92:8d:75:c9:28:fa:38:99:84:c7:4d:a7:
                    ce:21:ae:27:5a:bb:b8:05:ce:bc:0f:6b:2c:99:4e:
                    b6:04:b9:c0:96:db:3c:ff:1f:85:03:25:64:4a:17:
                    87:20:2d:fe:56:d1:21:3e:90:1d:b9:66:aa:42:9c:
                    55:87:0a:4e:0d:ee:3d:ed:03:4b:4e:f5:18:3d:45:
                    3d:cf:ac:09:9e:db:9f:96:f9:ed:91:a2:44:1b:39:
                    5c:cd:8d:85:76:26:fd:c8:0f:d0:5d:80:df:21:f4:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:00:78:E1:C3:53:30:2A:34:9A:06:DD:23:B3:82:18:D0:21:73:63
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/323830333a336338303a3a2f33322d3438203d3e20323636393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:60:54:f5:d3:6d:d6:08:24:17:8a:ed:a3:35:dd:88:2a:
         79:d2:8c:9b:e1:54:3f:d3:4d:cc:b5:5d:7b:c5:3b:aa:27:5f:
         e8:8d:af:a1:0a:fb:cc:17:b7:77:90:a5:05:76:75:7a:e8:1e:
         ec:56:bf:26:c4:45:31:2a:24:17:5d:6b:02:f7:bc:b9:54:8c:
         82:3d:2f:06:1c:01:ea:f6:d7:33:be:b6:37:1e:36:7b:c1:7f:
         f3:41:88:3f:29:e5:dd:98:3e:e2:7a:89:bb:2f:9b:7a:71:ee:
         e8:83:65:7a:a8:8d:47:46:cc:41:81:27:c8:46:87:f7:2d:6d:
         c1:b9:c9:e2:1a:c4:64:70:64:bb:18:6a:14:fe:44:02:2a:1a:
         d1:af:60:ef:bf:7a:ad:d4:05:2b:06:68:e7:15:a5:68:6b:02:
         94:0c:8b:74:66:18:30:b1:e7:fc:92:47:32:ff:5f:cc:3f:f9:
         c8:ae:0f:cc:85:e3:09:85:b8:70:18:ab:cb:75:75:9d:ad:35:
         ae:45:42:85:6b:b3:7a:a3:6b:17:27:2e:e9:dc:39:69:c8:27:
         b1:cb:29:02:31:d2:da:0b:c0:f9:2a:41:9f:f9:6c:11:e4:be:
         33:03:e7:b6:bb:c8:28:b1:e8:1d:b8:ea:00:68:4c:bc:8d:09:
         72:b0:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:52:02 2026 by rpki-client