Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3630303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3630303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          gw4Y0cC8EVmZzhI6uUBQAj1MAXVChKaKOda96xOrIjY=
Subject key identifier:   89:45:FE:71:88:38:E3:2D:61:C0:A4:E3:98:DC:11:B0:EA:67:24:31
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       4F2733A1ED578231DAAF5F9907D48BA438EBDC5C
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3630303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 07 May 2026 20:41:39 +0000
ROA not before:           Thu 07 May 2026 20:36:39 +0000
ROA not after:            Thu 06 May 2027 20:41:39 +0000
asID:                     273068
IP address blocks:        2803:b790:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 12:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:27:33:a1:ed:57:82:31:da:af:5f:99:07:d4:8b:a4:38:eb:dc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: May  7 20:36:39 2026 GMT
            Not After : May  6 20:41:39 2027 GMT
        Subject: CN=8945FE718838E32D61C0A4E398DC11B0EA672431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:cb:11:f2:94:64:60:c0:d9:5d:e1:3e:d6:
                    58:8a:47:87:48:1c:4d:98:20:11:59:d1:57:6e:aa:
                    11:6f:1d:a9:e3:b9:7b:b8:b3:19:be:8f:60:1c:fa:
                    9c:a7:ee:b2:1c:3b:50:38:45:17:c5:09:67:99:38:
                    27:31:cd:bb:91:0c:95:76:d6:ac:60:a7:eb:bc:38:
                    9e:21:30:41:0d:09:d7:dc:a8:7d:a9:ba:0d:b9:41:
                    f7:62:7d:cd:fd:36:14:ce:d7:cf:80:a0:99:7e:5d:
                    db:80:a2:31:49:a7:2e:b8:e7:95:75:d4:43:5f:71:
                    77:44:aa:7f:f3:2d:29:63:d8:68:73:b3:a4:11:19:
                    bd:7f:22:88:a3:fe:b1:68:93:e7:d6:02:54:2e:3a:
                    36:ed:66:30:d4:7c:4a:b3:b4:62:4b:d1:af:98:c1:
                    29:b0:dd:4c:98:5c:8b:45:86:89:8e:32:2d:2a:73:
                    dd:8d:4d:a4:41:94:a1:80:c8:23:07:b6:0b:36:90:
                    1c:c6:e6:8c:74:2f:88:ba:9d:ec:57:a0:42:02:0b:
                    31:f2:8f:8e:6b:19:2d:d7:a6:6d:67:1d:da:ac:e5:
                    08:b8:1a:28:2a:5c:46:fd:e9:b5:29:73:9d:35:c8:
                    59:5f:c4:7f:3e:cd:9c:f8:d0:c3:11:70:2d:56:e5:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:45:FE:71:88:38:E3:2D:61:C0:A4:E3:98:DC:11:B0:EA:67:24:31
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3630303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:a3:2c:6b:ea:93:5b:f1:c7:e3:db:25:7a:8c:1e:44:84:
         b9:d3:b0:1d:6a:d7:26:95:4d:03:b3:65:ff:9b:07:9c:f8:0c:
         de:91:9d:1a:ba:4e:13:0c:17:36:e0:eb:a1:88:8f:42:ed:cc:
         58:ca:f6:78:c1:bc:a2:aa:cf:35:8c:94:5a:a4:3b:45:bf:aa:
         7d:7d:66:f7:73:a4:68:be:3e:6d:8d:98:7d:ca:db:5f:f5:c2:
         93:f3:46:d1:12:85:25:b8:52:67:2c:cd:30:4c:57:fd:a9:cc:
         06:d4:ff:f9:19:8e:3d:25:57:43:a6:a2:08:0f:6b:f2:9c:0c:
         95:6f:42:ac:ae:a6:f5:83:1e:8c:e1:f5:ba:c9:32:9e:3f:f6:
         cd:a2:af:1f:b7:11:77:6f:a7:2b:5f:b9:82:a9:c5:7a:bd:cf:
         90:82:06:a7:72:50:3f:15:a4:c8:ac:e9:71:37:b5:b7:92:6b:
         fe:28:32:d6:64:82:7a:2f:b3:a9:46:ff:a5:9c:80:da:74:b6:
         bd:ff:7e:f7:57:80:52:1b:ba:2a:53:e7:2e:85:d3:02:03:2a:
         c3:00:bf:86:ca:43:da:df:2c:33:88:a1:76:1d:62:95:ef:5f:
         3c:d0:73:84:a1:0b:7e:86:3f:94:65:71:8f:84:0d:f5:82:84:
         c2:24:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:47:06 2026 by rpki-client