Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          F7Ovh0bavjNbZsuvOMSjCSCvzK3Jf13mS6ZEDmHA7gU=
Subject key identifier:   44:12:C3:EF:64:84:E9:67:40:A7:6E:1B:D3:F0:75:57:6E:BE:2B:50
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       193D20B13B851EBFB77267AF9A2C587402706841
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 13 Mar 2026 16:33:47 +0000
ROA not before:           Fri 13 Mar 2026 16:28:47 +0000
ROA not after:            Fri 12 Mar 2027 16:33:47 +0000
asID:                     263242
IP address blocks:        2803:1180:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3d:20:b1:3b:85:1e:bf:b7:72:67:af:9a:2c:58:74:02:70:68:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar 13 16:28:47 2026 GMT
            Not After : Mar 12 16:33:47 2027 GMT
        Subject: CN=4412C3EF6484E96740A76E1BD3F075576EBE2B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:9c:1a:0d:8f:b5:6e:d5:48:eb:f9:d0:60:
                    fd:b9:41:c9:67:02:e9:ea:37:86:40:02:83:c8:f3:
                    06:2c:38:fa:f2:ec:26:22:d8:f1:5c:ac:d1:78:cc:
                    ba:de:95:69:31:69:7f:d9:ee:d4:57:da:03:11:a7:
                    ec:74:ab:de:c9:7d:d4:30:97:65:50:44:c1:c3:d2:
                    a9:1b:b4:2b:13:66:2c:1f:97:73:37:7d:e2:8b:c8:
                    c3:f3:f4:4a:8b:5a:87:1b:d7:20:4e:00:47:ba:b3:
                    77:11:c8:7c:05:b5:0c:a4:56:76:32:60:51:ca:b4:
                    5c:6f:a3:2c:7e:85:09:10:29:0b:f9:01:4c:ea:7d:
                    57:55:93:98:4e:7c:eb:dc:ad:2d:a1:18:d7:c3:d8:
                    8c:fe:54:5b:fa:0f:57:17:49:03:c1:7f:61:3d:dd:
                    09:fb:0d:f1:10:9b:37:fe:19:15:f2:44:6b:a1:13:
                    0f:0a:45:58:44:64:83:1c:5b:7a:08:f9:5d:73:93:
                    82:36:75:46:a3:2f:aa:1b:f1:12:0b:4c:bc:89:2c:
                    33:d7:2b:97:ee:1a:09:61:c1:53:a3:0f:90:fa:c9:
                    66:45:6d:e5:c5:3d:e3:9e:d7:21:b7:95:51:dc:4c:
                    3c:39:ed:9a:d8:f7:ce:df:9e:80:51:f4:38:94:3a:
                    df:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:C3:EF:64:84:E9:67:40:A7:6E:1B:D3:F0:75:57:6E:BE:2B:50
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:1b:2d:75:3b:3e:b0:86:06:fa:97:d4:cc:f5:b9:60:2d:cb:
         8c:13:47:6c:25:09:80:a8:94:86:6f:5b:70:2d:6a:33:4a:c4:
         d8:4d:7e:00:77:f2:1c:a3:d7:f8:1f:e6:91:0c:f6:71:c6:3b:
         15:ae:69:02:7f:45:ea:c0:65:c9:54:2a:9e:66:67:47:dd:2d:
         99:5a:c6:db:5e:a3:81:03:62:3d:9b:d7:89:df:b9:48:38:b3:
         2b:46:b5:6c:b4:1b:59:5c:a2:15:64:66:92:68:9d:d4:c0:4e:
         8b:52:4b:05:62:e6:20:e2:79:db:30:04:eb:28:0f:86:ea:86:
         8d:ef:4b:86:e4:ad:cb:f5:3a:99:56:5f:81:18:0f:1f:08:47:
         78:b1:e1:5a:41:8c:43:5e:bb:ef:a8:1b:7b:ad:e7:48:60:a0:
         7a:0a:db:b0:af:a2:53:41:fc:2a:e9:35:ac:97:af:84:39:23:
         97:cc:b0:bd:e1:b7:99:58:51:41:8b:95:aa:99:3c:3e:4c:35:
         af:5f:bf:a8:e9:16:cb:87:40:4d:db:6f:65:36:6e:43:59:1a:
         72:5f:5c:19:c5:24:63:b9:ca:67:0d:cf:b1:f1:23:a0:9e:f4:
         c0:ad:b1:b6:d6:aa:a3:1b:0e:92:47:be:60:90:75:85:25:e4:
         e5:67:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:49:31 2026 by rpki-client