Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a663a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a663a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          uZySP00Rdp9FKRvFQ0pBfgUbWl7WkwuOdybNuj1zkZk=
Subject key identifier:   9E:12:98:EC:45:8F:73:BD:AD:E4:FA:76:10:25:43:10:FB:A3:84:AE
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       3001A757022DAAE4DB3E2C7465BAC99B026AFBB5
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a663a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 13 Mar 2026 16:33:47 +0000
ROA not before:           Fri 13 Mar 2026 16:28:47 +0000
ROA not after:            Fri 12 Mar 2027 16:33:47 +0000
asID:                     263242
IP address blocks:        2803:1180:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:01:a7:57:02:2d:aa:e4:db:3e:2c:74:65:ba:c9:9b:02:6a:fb:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar 13 16:28:47 2026 GMT
            Not After : Mar 12 16:33:47 2027 GMT
        Subject: CN=9E1298EC458F73BDADE4FA7610254310FBA384AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:ed:9b:97:ea:98:94:6d:dd:56:9d:52:3e:
                    aa:a7:2c:89:d7:a0:be:44:b6:1f:6d:a2:5c:3e:3f:
                    b9:d4:d5:43:39:89:44:75:5a:7d:2d:5c:1a:f0:78:
                    a2:b6:90:a1:cc:04:56:96:16:8e:85:9f:95:9a:d0:
                    e6:6f:e8:54:58:85:33:7b:bd:ea:b4:b5:1e:ac:af:
                    41:0a:3a:93:5c:70:a6:2b:e8:e3:71:47:50:07:9c:
                    74:01:b0:0c:52:21:93:74:74:8c:8f:5c:e1:cd:9e:
                    85:11:ae:45:2b:2c:81:17:10:40:d1:49:65:a0:d5:
                    5e:ef:26:f8:e4:6c:6a:61:21:6b:15:b8:fd:42:17:
                    a0:a1:0a:a4:60:b2:e8:cc:85:83:d6:23:01:f8:fc:
                    22:ce:85:b9:aa:42:6d:b9:a0:77:ed:44:dc:11:fb:
                    bf:46:a1:ec:13:9d:13:c2:16:7b:98:d8:d2:98:54:
                    60:96:c1:69:e9:d4:31:a4:be:b5:33:a7:b1:1e:e0:
                    22:55:ea:9e:0f:ff:b8:12:82:fd:19:4a:73:ce:a8:
                    d8:d9:42:39:90:44:af:a5:c8:f9:66:f1:c7:a5:59:
                    59:ce:c4:49:4a:eb:20:a6:1c:03:d6:29:dc:94:3b:
                    0b:28:19:93:71:a0:33:71:8a:07:99:a3:a5:b1:37:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:12:98:EC:45:8F:73:BD:AD:E4:FA:76:10:25:43:10:FB:A3:84:AE
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a663a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:84:15:b0:50:e8:8d:b6:69:7b:99:5c:bc:5f:7a:bc:56:ff:
         ad:05:36:d6:c4:f1:3f:0a:de:17:1c:5e:d3:a9:b5:1a:05:a2:
         b1:70:56:1f:93:85:c4:23:42:dd:7d:94:ea:c3:3c:b9:59:46:
         a2:63:cb:ca:fb:22:c6:3f:a9:77:1d:22:14:6b:6c:57:ad:eb:
         8e:5a:95:54:54:76:57:7f:cf:7a:c9:06:cd:00:12:f8:2a:19:
         54:df:6a:03:f9:4f:b5:6f:eb:2e:9d:fe:fb:3a:ce:30:0c:3a:
         94:0c:98:79:8b:d7:9e:1d:e3:85:fd:b1:a9:4f:be:27:e5:e8:
         69:55:cb:19:2b:c8:c2:fd:46:51:33:e6:d1:f3:fa:e9:7c:7b:
         5f:99:8a:f9:84:95:99:7b:4e:c1:5c:52:60:85:1e:12:d7:7c:
         1f:cf:b3:b8:e0:10:de:6e:45:31:2d:cf:3c:d5:91:96:73:48:
         83:5c:44:6a:58:4d:1d:4c:67:6d:ce:10:4a:6a:32:60:36:e1:
         83:e0:79:50:64:0f:10:a3:83:d5:d3:6f:32:09:aa:2f:b1:51:
         eb:f5:a7:ce:7e:6a:24:5c:36:5b:7b:2d:e9:06:da:d6:0b:fa:
         85:46:2c:0d:6a:18:aa:24:4a:23:77:1d:98:64:71:e1:e2:f2:
         05:03:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:49:31 2026 by rpki-client