Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/323830333a363632303a3a2f33322d3332203d3e20323635383633.roa
File:                     323830333a363632303a3a2f33322d3332203d3e20323635383633.roa (raw, json)
Hash identifier:          kCguJEZPlsO6VyJtMM1HOcKGl1ZD1sttwhiDh+Lfe3w=
Subject key identifier:   98:B0:CE:72:95:15:78:A9:35:5B:C1:75:C4:2F:AC:7F:21:D9:3D:32
Certificate issuer:       /CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74
Certificate serial:       5F57476F979487EBC124CF0873FCEEB24BEB6E31
Authority key identifier: 61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/323830333a363632303a3a2f33322d3332203d3e20323635383633.roa
Signing time:             Thu 12 Mar 2026 15:20:00 +0000
ROA not before:           Thu 12 Mar 2026 15:15:00 +0000
ROA not after:            Thu 11 Mar 2027 15:20:00 +0000
asID:                     265863
IP address blocks:        2803:6620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:57:47:6f:97:94:87:eb:c1:24:cf:08:73:fc:ee:b2:4b:eb:6e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74
        Validity
            Not Before: Mar 12 15:15:00 2026 GMT
            Not After : Mar 11 15:20:00 2027 GMT
        Subject: CN=98B0CE72951578A9355BC175C42FAC7F21D93D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:22:a1:1c:77:11:2a:1b:85:57:05:4a:30:
                    a9:2d:86:d2:c8:92:d8:ec:6c:9e:0f:07:67:d5:ec:
                    c6:8f:fc:d0:35:20:c4:ae:8b:6d:48:4a:f9:b7:8b:
                    94:c3:1a:eb:12:cc:6d:2e:91:61:e8:d7:68:86:05:
                    9f:e7:ed:e3:7e:c6:6b:d7:79:b6:98:50:d8:2d:c4:
                    70:de:8c:4e:78:5f:47:67:38:a7:64:ad:9f:ed:d5:
                    1c:2c:ff:3e:11:69:40:b2:69:83:ea:d3:88:5e:34:
                    69:ef:c4:66:e6:80:75:13:7c:53:42:88:01:58:92:
                    3a:b6:a0:cc:59:45:da:d0:20:a1:5c:40:ec:3a:ec:
                    25:63:10:27:24:67:3e:af:ed:fb:5e:47:c1:2d:3e:
                    95:77:45:6c:ed:ee:56:c9:c7:4e:11:f4:9a:39:31:
                    c2:43:bf:31:dd:f3:86:53:c8:71:c0:7b:19:47:c9:
                    4f:6a:4e:ba:b8:e4:b0:b3:b6:8d:43:09:2c:be:da:
                    62:37:03:85:8a:e2:d9:32:0c:3f:9a:dd:65:d3:a1:
                    b2:18:75:d7:e6:ce:87:1a:8b:6c:fc:a4:82:54:17:
                    07:3d:85:04:b6:74:e3:b3:e3:78:6b:a5:8d:4e:4a:
                    bf:48:90:60:80:31:e3:57:62:e5:4b:1a:22:ac:31:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:CE:72:95:15:78:A9:35:5B:C1:75:C4:2F:AC:7F:21:D9:3D:32
            X509v3 Authority Key Identifier:
                keyid:61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/323830333a363632303a3a2f33322d3332203d3e20323635383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6620::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:2a:6c:27:b3:0a:89:45:b3:59:28:ae:27:d7:bf:42:b7:b4:
         27:31:4d:70:74:5f:90:d3:89:3d:44:c7:a0:51:10:07:47:20:
         43:c1:45:51:bb:dd:f1:7d:1d:49:26:33:8b:6b:e3:5b:bc:0a:
         b6:ac:94:58:ca:4d:0f:ff:46:d1:e3:9b:4f:0d:f4:7f:82:74:
         58:47:90:19:48:48:5e:43:0d:b2:17:15:a9:b0:92:4c:d0:1d:
         50:d9:7c:b0:71:9b:01:68:b0:e5:3e:93:24:42:b4:ce:aa:d6:
         70:6d:7e:e3:c8:17:fe:f5:c5:fb:2d:aa:60:29:a7:e5:36:d4:
         d5:91:c9:e7:9a:67:3f:a8:cc:6f:ae:b8:77:09:12:ff:6b:56:
         4b:ef:e7:31:84:00:15:4a:30:07:28:ec:a4:d5:29:e2:12:8f:
         09:56:f0:57:e6:46:5d:07:9e:59:13:e7:ca:90:52:a8:70:8d:
         17:b3:d2:d8:b8:ed:b1:78:76:e1:1a:3b:d1:c8:82:e3:24:88:
         5b:57:e1:58:f2:25:c3:ec:1e:8e:8f:6f:47:34:ee:0d:1c:9b:
         61:10:4a:2a:5f:9e:d0:4a:7b:db:2b:1c:5a:62:6d:c8:e3:25:
         7f:3a:74:53:4d:78:c9:e7:51:59:89:6d:b4:a7:9c:16:7f:f7:
         c8:4f:59:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:01:11 2026 by rpki-client