Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/323830333a623930303a3a2f33322d3337203d3e203532343336.roa
File:                     323830333a623930303a3a2f33322d3337203d3e203532343336.roa (raw, json)
Hash identifier:          cNvEOJzr/B87ZEv66o+GpOLpPN5k4/QBQKZUNad7pyo=
Subject key identifier:   66:4B:3A:8D:6A:A2:C3:D4:62:4E:DC:D5:E5:6B:74:DC:20:7F:43:D4
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       39B1570BA51077B5FC7FEEF989D17003E12A59D1
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/323830333a623930303a3a2f33322d3337203d3e203532343336.roa
Signing time:             Thu 19 Mar 2026 13:34:32 +0000
ROA not before:           Thu 19 Mar 2026 13:29:32 +0000
ROA not after:            Thu 18 Mar 2027 13:34:32 +0000
asID:                     52436
IP address blocks:        2803:b900::/32 maxlen: 37
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b1:57:0b:a5:10:77:b5:fc:7f:ee:f9:89:d1:70:03:e1:2a:59:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Mar 19 13:29:32 2026 GMT
            Not After : Mar 18 13:34:32 2027 GMT
        Subject: CN=664B3A8D6AA2C3D4624EDCD5E56B74DC207F43D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:c0:e6:82:34:d2:d6:ab:88:6a:d4:e4:54:
                    82:05:f8:57:59:f4:c8:3a:36:3f:5d:9f:fb:ec:bf:
                    7d:3f:2a:93:bf:df:6a:0e:7d:00:61:c0:da:ff:6e:
                    54:e4:54:37:6f:41:92:1f:a0:f9:23:80:55:97:e7:
                    89:cc:01:a9:f0:20:cf:63:14:72:82:cf:89:d6:1f:
                    a8:c5:63:5e:d4:94:f9:fb:69:1e:59:1e:21:2f:d4:
                    8c:05:60:41:a6:0f:16:9a:cb:14:a5:46:16:49:90:
                    c0:ea:ba:5a:56:a6:87:5a:06:80:03:ad:9f:ff:b8:
                    d7:79:b6:7c:14:e0:f3:f1:a3:7d:48:80:f3:42:45:
                    46:cb:80:45:61:74:b1:1c:0d:c8:0c:58:cf:67:e8:
                    17:56:78:7d:ca:48:79:94:ce:e0:ca:56:81:52:70:
                    89:76:9c:74:91:b4:38:13:d1:6d:fa:ca:6f:ca:9d:
                    37:6f:8d:c0:7c:51:a9:2c:4e:ce:de:14:79:47:8a:
                    d5:71:7d:cf:fd:4e:3e:04:b2:4d:0c:47:b2:9c:ef:
                    84:b0:a7:47:94:f2:75:e0:45:5b:7d:16:6e:d0:e2:
                    9d:83:b6:de:7f:c2:2d:ae:c7:42:93:5b:4c:73:85:
                    a5:19:11:14:3d:49:af:98:fb:41:84:bd:b1:2c:21:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:3A:8D:6A:A2:C3:D4:62:4E:DC:D5:E5:6B:74:DC:20:7F:43:D4
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/323830333a623930303a3a2f33322d3337203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b900::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:bf:37:1c:6f:3b:64:a0:fa:c2:f6:c0:e2:6e:80:e2:eb:56:
         60:fe:ef:a4:8b:11:8f:d2:94:70:88:47:01:f6:c3:b0:b5:17:
         86:1c:02:a0:74:24:6a:09:dd:8f:c3:71:14:b6:70:db:f8:fc:
         67:2f:2a:2f:d7:f1:f7:a5:94:f6:4c:4e:de:48:b3:9d:4f:5e:
         36:f9:9a:c6:69:24:00:2e:05:1c:99:f5:49:ec:09:62:07:58:
         dd:b6:d3:07:01:92:98:53:4c:77:4c:77:f5:ff:f8:ca:49:3c:
         7a:80:db:c0:87:f2:74:5a:e8:6f:a1:e7:80:32:a5:4d:bf:12:
         09:18:db:36:1d:5a:3d:5a:f8:29:14:de:fe:38:07:34:a9:07:
         8d:97:09:2a:13:e5:98:47:45:77:b6:98:9b:e4:5c:7a:ea:e2:
         74:ce:cb:e1:55:aa:62:52:9a:f5:ff:a1:0f:67:86:d9:34:60:
         a5:f8:38:1f:89:75:98:9e:41:e3:82:dc:13:b3:1b:f9:cc:ff:
         04:ce:4b:86:4f:ae:4c:82:d1:20:6c:22:1e:46:5b:31:77:dd:
         1a:48:24:d7:51:97:0a:fd:4d:75:72:cd:eb:65:01:0c:cb:90:
         00:7f:a6:23:c1:b2:1a:fe:b9:3a:70:ab:7a:2a:98:a2:2a:5b:
         5a:7a:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:57:39 2026 by rpki-client