Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/323830333a363431303a3a2f33322d3438203d3e20323731383535.roa
File:                     323830333a363431303a3a2f33322d3438203d3e20323731383535.roa (raw, json)
Hash identifier:          mU+T+v1QIB255nPq+G2WtW6mCtCnsyVjahlvZdiFxgQ=
Subject key identifier:   8E:0E:68:36:E9:4F:C0:D6:97:7A:E3:62:1D:A4:FF:DE:3B:60:81:DE
Certificate issuer:       /CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Certificate serial:       7168F66A71CF2579AF24372196C4EDAD0A0735A4
Authority key identifier: 82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/323830333a363431303a3a2f33322d3438203d3e20323731383535.roa
Signing time:             Fri 24 Apr 2026 01:20:00 +0000
ROA not before:           Fri 24 Apr 2026 01:15:00 +0000
ROA not after:            Fri 23 Apr 2027 01:20:00 +0000
asID:                     271855
IP address blocks:        2803:6410::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:68:f6:6a:71:cf:25:79:af:24:37:21:96:c4:ed:ad:0a:07:35:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
        Validity
            Not Before: Apr 24 01:15:00 2026 GMT
            Not After : Apr 23 01:20:00 2027 GMT
        Subject: CN=8E0E6836E94FC0D6977AE3621DA4FFDE3B6081DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:63:ef:b0:a9:af:39:af:98:93:85:cf:b4:
                    e5:4e:c8:e4:fc:f7:03:07:63:cd:01:9c:18:0b:3c:
                    02:95:28:e0:97:7f:e7:51:ec:e4:de:5d:32:a8:0d:
                    7b:af:53:5e:f5:c2:8b:f0:36:05:71:34:7e:64:3a:
                    f7:d4:78:2a:fa:a9:32:2a:dc:d7:d4:49:14:32:cb:
                    a2:fe:65:2c:a1:bf:20:94:36:02:96:d4:76:b1:96:
                    80:48:29:b1:27:b1:95:6f:54:64:64:fc:b0:4f:93:
                    06:4b:ca:5a:5a:4a:10:f2:a1:91:c5:8a:81:e7:da:
                    be:26:26:fb:ac:21:bc:89:75:d5:05:40:26:4d:d3:
                    24:69:55:19:e9:b5:d2:c5:cf:6a:c7:f6:14:bf:0a:
                    a9:39:73:d0:ae:37:d1:eb:53:25:a7:dd:75:58:b5:
                    62:d6:de:e4:5e:75:0f:c8:d0:f6:a7:26:fb:9b:a4:
                    59:71:81:84:69:28:66:c0:a5:1d:33:e3:f9:1f:1c:
                    47:bc:af:cf:70:8a:37:7a:5e:fd:b0:3c:a7:e2:6d:
                    f9:39:51:14:25:3e:fe:98:bc:b8:a8:9b:45:bc:cc:
                    34:cc:be:04:dd:b9:43:da:f9:e2:db:e5:ce:6b:3b:
                    50:90:d2:32:b6:4a:91:52:fd:9d:2b:99:c6:a0:05:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:68:36:E9:4F:C0:D6:97:7A:E3:62:1D:A4:FF:DE:3B:60:81:DE
            X509v3 Authority Key Identifier:
                keyid:82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/323830333a363431303a3a2f33322d3438203d3e20323731383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6410::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:f3:e1:b9:db:dc:f1:0a:1d:b7:9f:d4:80:7b:fc:f7:4b:
         7e:cb:63:b0:c4:3e:02:ee:fa:d4:b3:35:9d:c9:2c:94:f5:40:
         ac:28:79:d7:70:4c:ba:25:97:4f:95:a6:cc:25:32:4f:6e:db:
         3d:df:8b:50:c3:7b:d3:b8:34:9e:ff:c9:63:b8:9c:7e:a7:58:
         f6:1f:ae:38:86:1d:0f:ee:79:d2:7f:d0:b7:2e:da:61:3e:74:
         28:5b:83:7a:fd:5a:2b:de:78:2b:a9:26:51:91:19:e8:dc:4d:
         51:43:95:6d:ae:26:0f:6d:1b:5a:51:64:8c:82:8f:2c:e1:c2:
         85:e6:85:b6:e0:7f:40:43:c5:39:36:d0:2b:0a:15:74:87:a0:
         fd:97:ce:2b:af:44:7b:0c:e0:f5:10:76:6a:8c:92:c8:28:c5:
         fe:c6:6f:4f:e1:a8:d3:a4:8e:ab:23:99:ba:4d:5a:ca:8d:13:
         65:93:a9:10:bf:f5:1f:81:38:b9:1f:c2:1e:69:aa:3b:07:b1:
         93:a2:50:bb:6d:2a:d4:9a:48:7b:11:4c:83:c3:3e:bb:d1:ee:
         80:c5:39:1a:67:44:fe:e0:d7:69:f3:f0:48:64:99:0e:0e:6a:
         b3:b4:e3:cd:1f:bd:ec:38:d8:12:8d:43:6c:f0:9e:79:8a:16:
         fd:42:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:05:06 2026 by rpki-client