Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e2036393339.roa
File:                     323830333a383038303a3a2f33322d3332203d3e2036393339.roa (raw, json)
Hash identifier:          e2dMVZVGLnAtDL1DCTIp6IGSlNyy7eXeKkR+siCKNr0=
Subject key identifier:   08:DA:C8:FE:6E:C1:14:A8:D4:83:4C:7A:D8:F9:B8:23:E7:97:77:77
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       51E5B671E4F52DAE86DB39382E246DA6F5546FB1
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e2036393339.roa
Signing time:             Thu 26 Mar 2026 17:25:00 +0000
ROA not before:           Thu 26 Mar 2026 17:20:00 +0000
ROA not after:            Thu 25 Mar 2027 17:25:00 +0000
asID:                     6939
IP address blocks:        2803:8080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e5:b6:71:e4:f5:2d:ae:86:db:39:38:2e:24:6d:a6:f5:54:6f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Mar 26 17:20:00 2026 GMT
            Not After : Mar 25 17:25:00 2027 GMT
        Subject: CN=08DAC8FE6EC114A8D4834C7AD8F9B823E7977777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:8d:82:31:f9:2c:5c:fa:81:55:7d:a1:1a:
                    54:d8:f5:11:7a:33:51:74:ba:c9:a7:dc:0c:26:9b:
                    71:a7:1c:57:23:ae:94:3d:37:83:10:2a:fa:3f:93:
                    95:3a:33:74:b3:2f:88:62:1e:13:99:c2:02:2a:17:
                    68:33:a3:8b:7c:89:4d:01:c7:f2:e1:f9:cb:36:e5:
                    47:f0:22:1d:7c:93:7c:ba:2f:f5:e1:85:03:71:41:
                    73:e7:2c:0a:ed:63:a2:29:84:62:3a:0d:33:aa:19:
                    2c:f5:c3:0e:8f:40:fc:df:6f:3c:d4:15:d3:26:19:
                    81:3b:34:27:a5:79:51:3d:c1:a6:59:57:1b:7a:25:
                    ea:11:86:99:76:bc:0b:0c:7d:f3:95:e0:ad:11:8b:
                    cf:98:59:5f:7c:34:db:3b:d8:5b:11:33:14:00:25:
                    b3:4c:44:ed:2a:19:41:89:18:97:c1:8c:0d:08:7c:
                    c9:64:76:95:0b:52:5a:f6:fe:bd:b4:94:db:f1:57:
                    c9:7e:29:b6:7a:ac:89:a6:e2:8b:b4:b9:26:46:08:
                    3d:02:06:ba:bd:08:1a:e1:1e:4d:1c:d7:37:2f:57:
                    9d:ab:3c:7a:2f:09:37:bc:f0:3c:67:bc:d8:32:be:
                    e5:31:7e:f2:8e:2e:1f:38:f5:76:5e:73:82:ce:03:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DA:C8:FE:6E:C1:14:A8:D4:83:4C:7A:D8:F9:B8:23:E7:97:77:77
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         f0:04:cf:76:80:84:64:3f:15:c2:d9:03:dc:7e:a7:03:b4:ed:
         6a:7a:eb:8f:e8:d6:f0:a0:47:ef:34:45:ba:64:7c:4d:57:45:
         ea:01:92:c3:e8:d7:f3:49:fe:52:7d:2d:08:82:77:98:af:5e:
         7f:0b:ec:b6:3b:bf:e7:4e:1d:33:fa:87:9b:0e:4e:dc:b6:2c:
         8d:7a:a9:a1:f4:51:fa:f6:46:46:2f:b6:2f:3f:74:a7:ac:d6:
         96:4e:71:a5:3f:68:14:60:52:5b:21:39:08:36:06:76:05:5f:
         69:f0:80:27:f6:ec:68:a0:63:4a:fe:41:23:06:21:df:1a:7f:
         48:c0:d8:60:0f:a1:aa:26:e9:92:a9:42:27:9f:7f:58:72:c8:
         9e:4c:bc:bb:fe:79:44:a9:80:d6:3d:3d:93:b8:56:7a:79:85:
         b5:cd:6b:b4:08:d4:aa:ee:a6:a2:a9:9e:f1:5e:dc:2c:c7:54:
         dd:dc:2d:a2:b7:29:e9:f5:85:23:a4:2c:4e:5f:19:e2:23:89:
         b7:5c:b4:4b:f6:53:41:e4:36:b4:74:95:be:8f:b3:c9:a5:55:
         59:4b:43:a9:3d:54:97:66:8c:81:56:5f:20:9f:ee:f0:0f:6c:
         76:bb:7d:88:da:f6:f7:7f:dc:61:7e:de:53:dd:14:a3:32:18:
         9a:c0:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:11:15 2026 by rpki-client