Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3330303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3330303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          673ZGNaSEfiOKIU8il5OcP1odLfhE3Cf+IPw9Tohu0g=
Subject key identifier:   BA:F3:29:9B:DB:E4:5F:13:7F:0B:BE:9C:66:AA:67:32:32:2B:4D:30
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       1A713ECBAB51746BDFC3E1DBE6A0D1035283FA64
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3330303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 07 May 2026 20:41:40 +0000
ROA not before:           Thu 07 May 2026 20:36:40 +0000
ROA not after:            Thu 06 May 2027 20:41:40 +0000
asID:                     273068
IP address blocks:        2803:b790:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 12:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:3e:cb:ab:51:74:6b:df:c3:e1:db:e6:a0:d1:03:52:83:fa:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: May  7 20:36:40 2026 GMT
            Not After : May  6 20:41:40 2027 GMT
        Subject: CN=BAF3299BDBE45F137F0BBE9C66AA6732322B4D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:65:96:63:9e:5e:1e:4d:cd:bb:9d:5c:32:
                    55:3a:93:97:ed:7e:ba:8e:79:77:14:ad:20:3d:2a:
                    1a:ad:a4:27:46:a6:00:ef:7d:e9:7c:10:49:b3:2f:
                    9e:48:5d:d0:71:98:91:1f:09:00:7e:9f:19:d6:a8:
                    0f:2b:75:eb:89:62:06:25:e5:ed:87:99:c2:8a:5c:
                    0c:61:f5:34:e3:cd:03:bf:a0:4d:b5:16:54:99:0c:
                    e7:b6:5c:60:35:62:89:4e:67:80:c7:f7:ca:69:2d:
                    d7:38:74:15:4b:05:fc:45:59:e8:37:7f:84:c3:91:
                    bc:38:74:ee:14:22:1c:37:0b:c1:df:44:bc:8a:1e:
                    0b:9e:6b:c4:e2:df:fc:1c:4e:39:8a:84:68:98:c2:
                    ac:87:05:d5:c5:fc:57:12:a6:8a:4e:45:0d:ab:85:
                    4b:96:2f:35:f1:bf:bc:fe:0b:77:9d:01:9d:cd:8b:
                    4d:b9:ea:b2:e1:8e:22:b0:8f:08:17:98:01:15:c9:
                    e6:72:8a:f7:35:fc:0f:cf:ee:15:57:dd:2b:c4:94:
                    2e:a2:5b:55:7f:84:4c:2e:a3:b9:60:e2:33:a9:ba:
                    1f:58:29:99:61:b5:f3:d9:99:59:f8:93:f2:3a:aa:
                    98:d3:2d:25:39:1d:b9:f5:0d:b8:a0:48:44:d8:0d:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F3:29:9B:DB:E4:5F:13:7F:0B:BE:9C:66:AA:67:32:32:2B:4D:30
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3330303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:00:bc:c5:ee:c8:df:3b:cd:ba:7c:1c:99:52:3e:56:f2:8c:
         17:f0:9f:d7:7a:cd:c8:88:0f:63:04:6c:a3:f4:81:7b:ba:d7:
         76:70:49:6f:97:da:e8:18:c9:ca:de:9f:c9:4a:e5:04:03:38:
         9c:b5:79:38:1b:ea:1d:54:38:d2:aa:84:26:6e:d0:dd:d2:4c:
         6b:3a:cc:fa:06:28:d5:15:45:e8:b2:6a:d4:f1:9d:f3:2c:6e:
         cc:07:6c:9f:b9:20:51:58:fc:ee:4b:14:46:d5:18:d0:08:58:
         d7:94:90:c3:c2:6e:91:16:0f:46:e2:9a:18:d9:22:ed:c9:04:
         fa:2a:45:b8:34:c2:38:65:c4:29:cf:4c:a7:7d:87:55:bf:43:
         16:fb:a6:99:c8:16:a7:88:06:82:2c:0b:e3:f1:e6:f4:4c:78:
         65:15:88:ed:3c:b2:f5:1c:00:9b:87:ea:aa:8b:47:b4:10:d2:
         37:24:b3:54:49:4c:1c:60:1a:24:92:e5:02:da:d5:f5:59:68:
         cb:2f:72:e2:50:07:68:5f:85:ec:4d:dd:71:87:52:99:26:bb:
         b6:45:5f:1e:16:7e:73:d9:4e:aa:12:11:b7:74:12:5c:ad:4c:
         a4:42:44:a2:9b:ea:1f:25:5e:35:65:58:e7:88:e1:ee:d0:e8:
         f5:de:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:44 2026 by rpki-client