Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/323830333a336238303a633032303a3a2f34382d3438203d3e203331313238.roa
File:                     323830333a336238303a633032303a3a2f34382d3438203d3e203331313238.roa (raw, json)
Hash identifier:          CRb3/6XHr5r/Ptm2mNt0wmRg7yJrB3ypgKHyTyBHaeU=
Subject key identifier:   95:D3:96:9D:27:00:3A:86:95:11:8E:4A:CE:15:B9:CB:24:F2:8E:42
Certificate issuer:       /CN=6E90D630525F8D2B3768945D2D18476B244030E8
Certificate serial:       5F067B6CB60D2FCA23EE554299BDC6275F025533
Authority key identifier: 6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/323830333a336238303a633032303a3a2f34382d3438203d3e203331313238.roa
Signing time:             Tue 24 Mar 2026 05:35:47 +0000
ROA not before:           Tue 24 Mar 2026 05:30:47 +0000
ROA not after:            Tue 23 Mar 2027 05:35:47 +0000
asID:                     31128
IP address blocks:        2803:3b80:c020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:06:7b:6c:b6:0d:2f:ca:23:ee:55:42:99:bd:c6:27:5f:02:55:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E90D630525F8D2B3768945D2D18476B244030E8
        Validity
            Not Before: Mar 24 05:30:47 2026 GMT
            Not After : Mar 23 05:35:47 2027 GMT
        Subject: CN=95D3969D27003A8695118E4ACE15B9CB24F28E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:c1:fe:7f:94:c3:d1:2a:e5:a4:9c:d8:bc:
                    c3:80:76:29:f4:32:4e:65:fb:0f:cd:ac:e0:b7:65:
                    72:4f:15:10:59:7a:ba:c7:91:62:ae:56:08:e9:01:
                    54:69:22:79:28:46:69:f7:e0:1b:0d:1c:f7:75:34:
                    93:ea:20:42:9c:f2:fd:ad:43:21:e1:2d:f2:f3:3a:
                    b5:25:59:ad:5d:95:aa:a6:92:f6:1a:f8:76:9e:f6:
                    87:85:cd:92:c2:33:66:c6:c7:b1:5a:af:73:21:78:
                    81:3e:c1:83:50:f1:16:69:90:0a:4b:73:10:06:b8:
                    2e:9d:0c:1f:e3:ed:6b:a9:d8:98:bb:fe:ec:72:1b:
                    d9:3d:97:cb:af:e1:b8:9d:2a:5a:1e:e3:33:45:e9:
                    25:08:67:74:c8:74:ca:94:38:a6:06:9c:ec:14:1f:
                    dc:6f:2e:bf:1f:18:74:5d:37:74:7b:b6:a6:eb:a8:
                    9d:ca:99:ac:53:1e:36:89:dd:6f:4b:c7:86:2f:d0:
                    cb:fc:95:bd:73:5b:0c:fe:01:2b:63:7a:73:ec:fa:
                    06:13:4e:0d:67:53:ac:a3:c7:c9:e2:23:f6:60:7a:
                    7a:1c:e5:b5:93:e8:ee:01:36:d5:20:3c:48:4e:61:
                    6e:17:58:d9:08:00:ed:b6:71:b1:6d:cc:ab:fc:ba:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:96:9D:27:00:3A:86:95:11:8E:4A:CE:15:B9:CB:24:F2:8E:42
            X509v3 Authority Key Identifier:
                keyid:6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/323830333a336238303a633032303a3a2f34382d3438203d3e203331313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b80:c020::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:61:f5:41:d1:2b:9c:5c:cc:bd:7a:43:40:54:d5:45:c2:cb:
         33:4d:67:d4:e5:61:c9:b2:0e:be:1c:8f:76:c0:58:82:d3:32:
         70:08:b9:a1:ff:a8:5a:51:87:7f:65:65:92:6c:0d:52:72:c0:
         8c:bf:83:cd:c8:4f:72:6c:8b:26:39:27:5d:c0:e3:57:42:10:
         1f:76:5f:73:da:66:62:bb:9d:ce:e6:63:75:d7:e9:44:26:53:
         ca:66:35:87:ab:31:f5:c3:97:19:68:1f:45:cb:9f:09:be:74:
         8e:64:cf:a7:f5:df:e2:02:cb:2e:43:91:a2:3a:18:4c:ca:44:
         18:d9:5c:ee:e3:a7:07:5e:36:ce:06:eb:df:2e:dd:78:7c:37:
         c3:e9:6c:b9:89:4a:3f:7f:ee:75:16:88:ae:7d:a7:55:7d:84:
         7b:ff:4e:92:33:95:4c:c7:2c:41:0d:81:df:61:56:32:1d:ff:
         63:d7:97:59:8c:d3:58:37:c6:cf:ce:8a:a0:fb:1e:33:77:14:
         05:86:c6:d0:56:f2:05:89:1d:b4:b6:e3:f9:04:17:df:3b:24:
         b1:55:d1:b6:a2:c5:3c:0d:99:9a:10:42:d8:4c:01:d2:40:99:
         b7:76:be:59:d5:8f:49:c8:b3:f6:e1:da:bd:5b:bd:33:fe:6b:
         88:ea:7f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:14 2026 by rpki-client