Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3438203d3e20333938373730.roa
File:                     323830333a663938303a3a2f33322d3438203d3e20333938373730.roa (raw, json)
Hash identifier:          KcS2y3WUG/8ZNr0mwaz2hl2dpD0dVPVpzi5y4VyHJ/c=
Subject key identifier:   53:CD:E4:A4:7D:76:83:10:9F:FD:71:05:B1:C0:32:4E:27:5E:25:36
Certificate issuer:       /CN=185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0
Certificate serial:       6A968B6F60066C088CD23D48B84736115917D3BD
Authority key identifier: 18:5E:96:C8:0D:FA:32:CF:38:CB:2E:53:75:42:AD:1F:B5:A2:BD:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3438203d3e20333938373730.roa
Signing time:             Sun 19 Apr 2026 20:39:20 +0000
ROA not before:           Sun 19 Apr 2026 20:34:20 +0000
ROA not after:            Sun 18 Apr 2027 20:39:20 +0000
asID:                     398770
IP address blocks:        2803:f980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 18 May 2026 06:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:96:8b:6f:60:06:6c:08:8c:d2:3d:48:b8:47:36:11:59:17:d3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0
        Validity
            Not Before: Apr 19 20:34:20 2026 GMT
            Not After : Apr 18 20:39:20 2027 GMT
        Subject: CN=53CDE4A47D7683109FFD7105B1C0324E275E2536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:98:eb:fa:85:2d:fe:0e:81:28:9d:99:5d:
                    07:c8:fc:17:70:21:3f:0a:21:8d:ce:df:40:47:14:
                    0b:76:af:e8:6a:71:e8:aa:a4:ea:59:f5:4e:6b:c3:
                    47:c1:40:db:75:fb:19:84:13:2d:a5:be:7b:92:21:
                    eb:f9:8a:a3:ae:93:d8:90:bf:9a:eb:9c:8f:07:12:
                    f9:7e:90:b2:42:60:e8:e7:bc:a0:e6:c4:de:2e:71:
                    5d:bc:cd:89:60:12:59:24:ed:7a:a1:b4:e6:f9:1d:
                    0e:7a:77:1d:13:c5:8c:7b:2b:41:7f:00:59:6d:7a:
                    90:f0:97:b4:a9:61:7c:ab:ae:82:bf:b7:fc:8f:f5:
                    01:51:9b:05:29:e8:c9:9b:7e:b0:2c:31:db:22:46:
                    3c:68:08:f0:e0:a4:51:8a:82:2b:df:fc:02:d7:7c:
                    0a:78:c8:b9:43:ca:3e:c7:b2:0b:db:c4:93:7f:55:
                    08:34:c0:81:9a:f3:fc:bf:c3:99:9b:4b:14:70:2f:
                    82:29:17:ec:ee:d8:b2:be:60:5e:54:89:c1:be:5f:
                    9f:f5:16:d1:71:6c:1f:03:3e:ee:50:ec:68:b4:17:
                    e7:97:71:dd:b4:36:3c:bf:c7:b3:30:64:f9:15:8d:
                    5c:2b:dd:04:b7:a9:ef:55:15:8a:89:21:38:14:10:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CD:E4:A4:7D:76:83:10:9F:FD:71:05:B1:C0:32:4E:27:5E:25:36
            X509v3 Authority Key Identifier:
                keyid:18:5E:96:C8:0D:FA:32:CF:38:CB:2E:53:75:42:AD:1F:B5:A2:BD:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3438203d3e20333938373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f980::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:95:1a:24:4b:db:06:6e:84:9a:34:78:19:55:3b:73:3c:
         4d:85:0d:3b:31:e4:40:83:b0:91:40:e2:a1:79:f2:47:e1:12:
         78:90:fc:8d:ab:da:16:b2:b7:e7:79:59:3e:76:dc:6d:1a:11:
         51:55:99:84:33:b8:27:5c:e6:2b:14:85:1d:0e:dd:69:8b:dc:
         75:7a:53:78:a7:04:ef:d3:36:be:8f:a4:23:61:7a:54:c9:3c:
         d8:be:e6:a7:0b:66:eb:c0:7a:c3:e9:87:0a:f9:cf:93:8b:66:
         a7:b5:7b:74:0f:19:80:92:33:1f:06:fa:03:8e:3e:d0:1f:82:
         72:11:2f:7d:c7:bc:55:70:78:d7:85:c6:bd:a0:cd:c4:37:83:
         a0:2f:91:f1:2b:4a:08:a5:6b:a2:3c:c9:25:43:9a:4c:f6:b1:
         07:38:4a:43:d1:4b:c2:f2:47:7f:70:34:14:79:5c:86:8a:42:
         6a:e2:a3:bb:c7:d8:91:01:ca:c4:8b:58:be:a0:b5:6d:50:d6:
         61:95:0d:85:49:6e:16:0b:c9:da:47:d5:8b:09:cd:d0:98:0d:
         b5:9d:f1:5a:3d:d2:49:59:d7:a6:dd:76:d9:4e:a6:85:ac:55:
         36:de:ed:f9:6e:3c:0c:31:1d:a1:d2:f4:2d:aa:d0:9d:72:61:
         39:7d:52:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:37:54 2026 by rpki-client