Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/323830333a663430303a3a2f33322d3438203d3e203230323939.roa
File:                     323830333a663430303a3a2f33322d3438203d3e203230323939.roa (raw, json)
Hash identifier:          4Abaj/4Bsl0eyi4773+LOGPSEwMpzav2xolqxAofCxk=
Subject key identifier:   FE:89:F9:08:AA:B5:5D:3E:72:0A:AB:3D:09:3D:17:9E:C7:D3:4B:EC
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       15AC50BE57CE75DCC6CFBF0BE481C7FDE89C74F9
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/323830333a663430303a3a2f33322d3438203d3e203230323939.roa
Signing time:             Mon 06 Jul 2026 15:51:06 +0000
ROA not before:           Mon 06 Jul 2026 15:46:06 +0000
ROA not after:            Mon 05 Jul 2027 15:51:06 +0000
asID:                     20299
IP address blocks:        2803:f400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ac:50:be:57:ce:75:dc:c6:cf:bf:0b:e4:81:c7:fd:e8:9c:74:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Jul  6 15:46:06 2026 GMT
            Not After : Jul  5 15:51:06 2027 GMT
        Subject: CN=FE89F908AAB55D3E720AAB3D093D179EC7D34BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:46:f9:33:e6:42:42:46:72:48:85:ea:66:
                    9b:5c:1e:41:96:58:90:3a:14:12:fc:b5:29:3c:d6:
                    46:c2:8d:24:39:98:ec:8e:72:2d:43:dd:eb:db:79:
                    2c:49:45:17:65:8b:c4:9a:62:a1:4c:e4:53:53:a7:
                    46:e0:97:9b:ee:18:df:b4:14:d9:7b:bc:24:2b:d4:
                    99:71:64:50:95:67:ee:8b:6e:6e:52:86:bf:04:ae:
                    dc:2f:05:83:e4:a1:8e:22:e5:71:f4:7b:25:40:20:
                    62:3b:4a:7d:a1:88:71:df:91:b1:02:e7:9f:c4:b7:
                    ce:ca:1f:98:74:53:d5:da:50:15:03:c8:c7:6d:b0:
                    4d:c2:94:83:76:b0:d8:8d:49:26:a2:40:f9:02:dc:
                    19:a5:8d:2b:05:65:23:d5:de:2f:2d:c2:f9:85:e2:
                    df:f4:b4:39:46:46:99:35:c2:f8:c7:90:9a:8d:00:
                    e1:dc:12:8a:24:1f:fd:4d:c5:3b:4c:15:9a:e3:c8:
                    6b:3e:10:b2:33:dc:0f:dc:a4:7c:a0:61:68:f8:51:
                    96:c0:d7:44:3f:ea:6f:a0:99:c6:24:40:71:e8:7c:
                    fe:60:37:ea:e9:e0:d7:ce:49:af:da:95:04:b6:b4:
                    2c:6a:4c:28:80:47:f5:2a:a0:77:8d:6b:53:bd:55:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:89:F9:08:AA:B5:5D:3E:72:0A:AB:3D:09:3D:17:9E:C7:D3:4B:EC
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/323830333a663430303a3a2f33322d3438203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f400::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:7d:6f:52:70:4c:b6:92:71:e0:a9:ac:9b:a4:6e:1f:1c:
         17:c3:b6:07:cc:22:cf:dc:dc:b1:30:e2:fb:6b:26:85:e9:26:
         65:c5:8b:50:ce:36:24:51:a7:84:b2:7d:9b:49:f4:ce:d4:88:
         6c:3c:41:c0:bd:27:95:6c:2c:0a:ee:a8:3e:14:8f:4f:4d:97:
         5f:a6:38:1b:7d:d6:55:27:f3:8e:ac:88:a7:5a:12:40:a1:21:
         ec:f2:10:2c:ae:0b:3b:35:b9:58:47:39:09:a6:83:bb:72:53:
         61:97:39:c9:53:fb:1f:f9:c6:d9:92:32:75:0e:b0:c9:32:b9:
         aa:c0:02:9a:ae:a5:f0:67:c7:0a:89:ca:8b:7f:42:03:51:9c:
         56:62:be:b8:2f:53:89:44:78:78:12:05:32:73:cf:24:33:14:
         2b:ab:84:7a:37:9b:c9:a1:e1:d7:26:e0:59:2d:d1:9a:1f:07:
         93:31:be:53:6d:9e:0a:6c:db:1c:ae:07:a4:10:a7:5b:90:80:
         5d:3f:ed:0f:07:29:6e:d9:13:90:2c:9c:b3:21:ff:fd:57:c9:
         bd:70:1d:a6:13:c6:42:32:e0:c6:22:9f:c6:9b:b3:a2:52:67:
         79:7e:f1:8a:68:3e:50:82:0d:e4:e0:89:7f:ca:b7:28:2c:b5:
         aa:ba:be:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:35:51 2026 by rpki-client