Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/323830333a346163303a3a2f33322d3332203d3e20323634383535.roa
File:                     323830333a346163303a3a2f33322d3332203d3e20323634383535.roa (raw, json)
Hash identifier:          XnmqUQuv1jc8g/G246UIP3HvydpY1wB7rwzKzrJEay8=
Subject key identifier:   CF:A5:E6:2E:90:98:2F:0C:27:B9:7E:B7:E0:1D:6E:D7:48:3F:EE:90
Certificate issuer:       /CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Certificate serial:       0E222C27AB40324D03C214A3ADB8250F0F1BF6A3
Authority key identifier: 5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/323830333a346163303a3a2f33322d3332203d3e20323634383535.roa
Signing time:             Fri 26 Jun 2026 01:49:51 +0000
ROA not before:           Fri 26 Jun 2026 01:44:51 +0000
ROA not after:            Fri 25 Jun 2027 01:49:51 +0000
asID:                     264855
IP address blocks:        2803:4ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:22:2c:27:ab:40:32:4d:03:c2:14:a3:ad:b8:25:0f:0f:1b:f6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
        Validity
            Not Before: Jun 26 01:44:51 2026 GMT
            Not After : Jun 25 01:49:51 2027 GMT
        Subject: CN=CFA5E62E90982F0C27B97EB7E01D6ED7483FEE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:5a:89:f3:59:f8:39:6d:1c:83:6b:50:83:
                    65:41:37:4f:9c:fa:d5:58:b0:8b:6b:31:8a:35:1d:
                    32:e5:53:a5:22:aa:51:79:14:d2:60:25:a7:ac:90:
                    84:5e:c5:a8:1f:84:14:be:fb:54:94:8c:51:87:f1:
                    c6:da:f9:67:29:79:e6:16:f5:cc:7a:e5:20:68:cc:
                    79:9a:bf:d9:1f:ac:b1:cf:a4:62:b7:e7:21:3e:af:
                    66:a0:04:58:96:bd:92:36:0e:a2:4e:d9:37:64:7b:
                    f1:48:e7:3d:e5:3f:ee:c3:89:f9:7a:5a:32:6c:79:
                    94:38:e5:81:dc:fd:3e:44:0e:59:76:87:9d:6f:21:
                    63:e2:fb:d0:43:4f:f0:46:42:31:6d:de:74:7e:f0:
                    02:a3:01:a3:e1:ce:96:2c:9a:c9:a7:f0:7d:c8:08:
                    19:a1:a4:2e:c4:f1:dc:31:8c:ec:f9:36:f3:56:fc:
                    95:15:cb:64:67:c0:12:68:9b:7d:53:aa:e2:32:5a:
                    e7:cf:06:11:71:ac:f6:32:f8:11:37:f9:ba:a7:b8:
                    4a:f3:88:e9:68:5a:5e:af:dc:72:e8:e9:61:90:9e:
                    db:65:5f:23:4d:28:3a:9d:9f:a8:9c:a5:e9:33:24:
                    bf:93:ab:0a:d2:d0:a8:23:c1:82:a4:d4:d8:63:92:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:E6:2E:90:98:2F:0C:27:B9:7E:B7:E0:1D:6E:D7:48:3F:EE:90
            X509v3 Authority Key Identifier:
                keyid:5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/323830333a346163303a3a2f33322d3332203d3e20323634383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:08:6f:4e:ed:a6:a3:fd:63:91:7a:7c:9f:65:12:89:2c:73:
         02:0b:6a:2d:52:b1:30:2d:f7:0e:00:83:80:08:53:9e:80:e4:
         d8:b0:54:16:ba:30:0f:65:d9:c3:e6:3f:4b:26:30:7d:16:57:
         3d:3c:17:09:f2:36:0e:76:de:ef:bb:f9:ff:e0:7d:8a:70:3c:
         7a:e0:2b:29:14:05:53:2b:53:25:4f:51:c7:7c:c4:73:3e:09:
         cc:bd:e1:71:de:f1:10:48:41:a6:80:4f:09:e5:cc:48:ec:60:
         53:53:ed:db:ca:04:49:00:17:4c:db:54:e7:82:f4:3c:46:8c:
         bc:ac:5e:3e:26:9a:a1:86:a3:34:35:36:67:2e:39:bb:07:27:
         ae:4c:9d:e9:cb:26:0a:3b:2e:ee:6b:aa:78:cb:31:ef:ef:ba:
         78:ec:9a:00:a0:15:72:48:1f:15:f0:2c:47:1c:71:55:a5:eb:
         9b:87:9d:4c:74:ed:51:f3:dc:fd:d9:b1:55:99:1b:b5:d4:15:
         5d:d2:af:f4:77:b5:d0:ed:dc:c1:0a:d6:03:fa:63:cd:6e:63:
         c7:f0:57:31:7c:c0:ba:ad:fe:1d:35:5f:e0:d4:e6:86:cb:43:
         e4:40:aa:d9:8a:15:f5:23:a2:54:dd:d6:88:96:db:51:53:2b:
         9d:0b:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:27:19 2026 by rpki-client