Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/323830333a376435303a3a2f33322d3332203d3e20323733383739.roa
File:                     323830333a376435303a3a2f33322d3332203d3e20323733383739.roa (raw, json)
Hash identifier:          GEaZkcveKqgXbpCh7i+ghLxR43HfByaU57J29ryQRgI=
Subject key identifier:   55:3B:D5:2C:8C:30:1B:D9:98:55:EE:65:31:64:B7:E9:CF:FE:88:D5
Certificate issuer:       /CN=B4FABCBFF83288B64BE540323B458825C54A4663
Certificate serial:       3BDE1FC70F1B77D1C594FE3035F0EB1F1A482D0A
Authority key identifier: B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/323830333a376435303a3a2f33322d3332203d3e20323733383739.roa
Signing time:             Wed 15 Jul 2026 23:58:02 +0000
ROA not before:           Wed 15 Jul 2026 23:53:02 +0000
ROA not after:            Wed 14 Jul 2027 23:58:02 +0000
asID:                     273879
IP address blocks:        2803:7d50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:de:1f:c7:0f:1b:77:d1:c5:94:fe:30:35:f0:eb:1f:1a:48:2d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4FABCBFF83288B64BE540323B458825C54A4663
        Validity
            Not Before: Jul 15 23:53:02 2026 GMT
            Not After : Jul 14 23:58:02 2027 GMT
        Subject: CN=553BD52C8C301BD99855EE653164B7E9CFFE88D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:ce:8a:d1:81:15:6d:cf:7b:91:ab:c2:24:
                    be:31:1f:b0:60:bd:b1:42:d8:0c:a6:19:de:29:29:
                    28:31:47:29:c3:9d:dc:fb:04:47:9c:6b:26:2d:56:
                    7c:14:23:10:3a:a9:78:a9:0a:52:06:72:3d:dd:5c:
                    82:e4:c7:e6:08:6e:52:69:86:d4:ef:be:a5:48:fc:
                    7c:5a:dc:87:be:1a:61:12:70:ed:2a:f9:59:82:83:
                    a5:77:14:9b:ef:a9:e3:e4:87:16:56:a1:ec:38:ca:
                    1c:4e:e7:f5:c1:2c:4c:23:97:a6:54:d9:16:df:a4:
                    3d:b8:ca:77:5f:3b:c3:b7:e8:76:09:c3:26:f6:f0:
                    a4:fe:55:85:34:aa:9d:1a:6b:9b:6c:75:ab:48:c1:
                    4c:ff:b7:52:76:42:7c:80:dc:a4:57:d7:89:3b:ea:
                    ec:e6:45:04:8e:39:83:bc:87:a1:65:9a:53:24:62:
                    8b:89:d1:22:7b:d2:40:51:c8:b7:4c:b8:4a:0f:01:
                    82:d9:41:e8:f3:6f:72:95:04:ff:2a:0a:e3:ad:9d:
                    00:bc:72:bd:a6:fd:e3:d1:82:b2:49:13:dd:b2:54:
                    79:2c:5e:1e:57:e2:c5:13:76:e2:8a:f7:cf:cf:4d:
                    c2:d7:69:5f:9c:c3:37:87:49:c7:32:e5:d1:88:4a:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3B:D5:2C:8C:30:1B:D9:98:55:EE:65:31:64:B7:E9:CF:FE:88:D5
            X509v3 Authority Key Identifier:
                keyid:B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/323830333a376435303a3a2f33322d3332203d3e20323733383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:61:b6:63:44:7c:e0:7d:b7:39:11:87:d9:24:ed:f9:27:
         65:65:3a:45:c2:55:bc:01:f9:1b:e5:a0:35:6d:45:3d:6d:d0:
         31:f8:db:55:65:1a:b3:1d:5b:8a:8e:aa:43:28:14:eb:59:5b:
         b4:69:51:60:5b:e2:51:d1:63:ce:1d:33:36:4d:7d:c4:59:8e:
         e7:80:1d:ce:6c:9f:cc:37:d4:9d:0f:c3:4b:92:44:1a:05:77:
         de:38:3f:fd:df:c0:e0:c4:31:42:5c:53:f8:ae:fc:d8:7c:d5:
         13:12:20:1d:21:8a:b6:9f:9f:ff:fd:1c:e5:6c:22:4f:4e:b3:
         34:6a:84:c1:f3:0e:af:22:97:93:c2:dc:e7:0d:56:28:a9:21:
         37:a5:6d:36:1a:d9:12:11:84:81:a7:d9:44:05:19:71:e8:f7:
         ff:25:9b:2c:59:64:9e:10:d9:57:02:00:73:4b:e9:d1:04:63:
         47:4c:74:a2:78:45:06:20:ae:58:1b:06:c6:98:b5:50:e1:7e:
         51:3b:b0:b2:ac:6f:e9:f7:ed:4c:a7:cf:bb:e5:65:08:4e:e4:
         fc:ad:48:6b:60:21:40:a8:04:86:7f:8f:4c:19:98:55:30:2b:
         96:42:dc:da:d5:5f:9f:5a:96:ef:67:d5:6e:22:46:51:c4:7f:
         7e:96:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:32:26 2026 by rpki-client