Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3438203d3e20323730303231.roa
File:                     323830333a353965303a3a2f33322d3438203d3e20323730303231.roa (raw, json)
Hash identifier:          uKNaSUr0/sFXy4dwD8hEQhQkcd+9bXiOgF5n1OsuYLg=
Subject key identifier:   59:71:41:AF:53:7B:67:E3:CB:F2:CD:BC:B8:F3:0E:4F:54:D4:61:52
Certificate issuer:       /CN=6D9C794B5D39E9E3CCC978B3378627D090E06C4F
Certificate serial:       BBE6F107A0C026F79F8AF70434BD0B674C5B0A
Authority key identifier: 6D:9C:79:4B:5D:39:E9:E3:CC:C9:78:B3:37:86:27:D0:90:E0:6C:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3438203d3e20323730303231.roa
Signing time:             Wed 06 May 2026 23:50:00 +0000
ROA not before:           Wed 06 May 2026 23:45:00 +0000
ROA not after:            Wed 05 May 2027 23:50:00 +0000
asID:                     270021
IP address blocks:        2803:59e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bb:e6:f1:07:a0:c0:26:f7:9f:8a:f7:04:34:bd:0b:67:4c:5b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D9C794B5D39E9E3CCC978B3378627D090E06C4F
        Validity
            Not Before: May  6 23:45:00 2026 GMT
            Not After : May  5 23:50:00 2027 GMT
        Subject: CN=597141AF537B67E3CBF2CDBCB8F30E4F54D46152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:b9:84:89:98:1a:29:ac:de:8d:3c:fa:eb:
                    35:ee:71:ff:63:86:fd:c5:44:4e:e8:49:0b:48:e1:
                    a9:99:4d:90:61:20:59:c0:7b:92:17:d6:6d:02:8c:
                    bb:ad:ff:a6:fa:9a:9f:6f:3c:e8:f4:76:3b:74:aa:
                    0d:cd:da:34:21:22:7c:f4:42:ce:21:11:9c:62:0c:
                    9d:09:ee:5b:f8:31:02:b9:1c:9f:e2:d6:5d:58:4f:
                    1f:66:93:8e:e4:7e:3c:f1:4d:2e:6e:6f:b8:ab:3c:
                    b6:1b:ff:1a:06:61:9c:b4:2f:af:e2:b8:2a:29:b0:
                    f5:7b:5b:e0:ba:19:a6:dc:9e:ec:c4:b0:8c:ad:c1:
                    e8:04:a6:16:e4:2e:d8:fd:72:73:83:96:cf:1e:4a:
                    76:b0:83:c4:e5:97:13:6e:1a:22:c5:b0:42:75:68:
                    fd:2f:68:16:a4:ca:41:ce:c7:e7:81:90:ef:1c:d2:
                    12:4e:90:e3:46:22:58:b9:9a:1b:90:2e:7b:73:ec:
                    ad:2d:1c:2a:a6:6a:4b:83:40:3f:56:46:43:52:0c:
                    98:ec:b2:21:eb:8c:1f:81:b8:0d:a1:b1:35:30:f0:
                    ad:91:51:63:70:ab:9e:a1:58:66:14:be:5c:44:94:
                    5f:48:1d:43:bb:77:df:fd:f6:aa:e4:af:6c:79:d7:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:71:41:AF:53:7B:67:E3:CB:F2:CD:BC:B8:F3:0E:4F:54:D4:61:52
            X509v3 Authority Key Identifier:
                keyid:6D:9C:79:4B:5D:39:E9:E3:CC:C9:78:B3:37:86:27:D0:90:E0:6C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3438203d3e20323730303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:10:2c:7a:0a:af:d3:77:dd:83:5d:77:4d:9b:53:a0:e2:db:
         7c:51:45:c3:4e:3c:f1:f1:47:96:94:29:dd:26:a7:97:e9:46:
         66:d1:85:58:71:35:a7:62:66:e3:f1:fa:4d:06:8d:53:de:5a:
         39:27:2b:4a:e6:34:a1:3b:e1:8d:ff:12:d9:63:5a:ad:28:83:
         ea:33:dc:29:36:76:77:60:03:16:ac:1d:60:56:8e:f8:65:b1:
         32:2e:34:e6:02:a4:ff:bf:45:95:c5:8c:fc:41:90:f7:1f:a6:
         34:4d:a2:2f:a1:26:37:8c:ed:b3:31:c1:65:1a:70:03:5a:18:
         ce:d6:5a:2f:fd:92:6f:d9:12:41:27:44:cb:2d:c8:c9:f9:f0:
         b0:80:d6:ad:9a:72:6a:79:26:91:a6:1a:1d:e7:46:6a:3e:1b:
         b5:a3:3b:26:7a:f4:14:6a:cf:02:d5:99:06:be:08:8d:0c:e8:
         d6:d3:f2:a7:d3:ed:2a:b1:a1:84:44:1b:c1:de:3c:4c:03:4d:
         4b:1b:4a:70:95:a9:cd:42:94:ca:f1:c7:e1:88:7e:27:7d:2f:
         f9:b9:cd:ae:98:93:6a:a3:ac:0f:5c:5b:75:98:63:a5:cc:d8:
         fe:1b:d6:d7:68:05:6e:5d:2b:20:21:cd:b9:ae:53:78:12:3a:
         4d:32:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:22:06 2026 by rpki-client