Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF682AEEF8BD200DD148257298570B7C209572B17E76A16C07D36968C48AD33/0/323830333a3433303a3a2f33322d3438203d3e20323733383934.roa
File:                     323830333a3433303a3a2f33322d3438203d3e20323733383934.roa (raw, json)
Hash identifier:          Wx2St4BcDYnNxFwMXAAjW7DvYm/nZZJp0tnPKiuODvA=
Subject key identifier:   58:C6:18:C5:5D:5B:0F:31:3E:01:90:3B:A5:07:63:71:E7:E8:85:1E
Certificate issuer:       /CN=A5A90D60BBA1CDAE6C68AE70785DAF95C6482DFB
Certificate serial:       7DCE96A3160FF6483F481A5F598751F15E8257D8
Authority key identifier: A5:A9:0D:60:BB:A1:CD:AE:6C:68:AE:70:78:5D:AF:95:C6:48:2D:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5A90D60BBA1CDAE6C68AE70785DAF95C6482DFB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF682AEEF8BD200DD148257298570B7C209572B17E76A16C07D36968C48AD33/0/323830333a3433303a3a2f33322d3438203d3e20323733383934.roa
Signing time:             Wed 25 Mar 2026 14:55:00 +0000
ROA not before:           Wed 25 Mar 2026 14:50:00 +0000
ROA not after:            Wed 24 Mar 2027 14:55:00 +0000
asID:                     273894
IP address blocks:        2803:430::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF682AEEF8BD200DD148257298570B7C209572B17E76A16C07D36968C48AD33/0/A5A90D60BBA1CDAE6C68AE70785DAF95C6482DFB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF682AEEF8BD200DD148257298570B7C209572B17E76A16C07D36968C48AD33/0/A5A90D60BBA1CDAE6C68AE70785DAF95C6482DFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5A90D60BBA1CDAE6C68AE70785DAF95C6482DFB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 01:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ce:96:a3:16:0f:f6:48:3f:48:1a:5f:59:87:51:f1:5e:82:57:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A90D60BBA1CDAE6C68AE70785DAF95C6482DFB
        Validity
            Not Before: Mar 25 14:50:00 2026 GMT
            Not After : Mar 24 14:55:00 2027 GMT
        Subject: CN=58C618C55D5B0F313E01903BA5076371E7E8851E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:0b:ef:98:92:6d:40:30:ee:32:c1:a3:ce:
                    af:48:4e:94:b6:b5:13:fe:35:f7:0f:ae:49:fe:4a:
                    0a:c7:c5:50:ca:52:ce:69:f2:c3:04:46:ce:33:cc:
                    16:80:ea:31:e6:54:42:87:66:73:89:55:50:8a:31:
                    e0:d1:10:9f:2c:5b:19:84:7b:53:18:f3:18:a4:dd:
                    0e:32:5f:30:3b:b5:e9:b7:76:d5:8a:08:3a:e3:0f:
                    6c:96:cf:e1:7f:4d:a1:ae:74:f6:f2:ca:9a:23:d0:
                    9f:bc:bb:a1:47:dd:c3:67:14:a5:69:f2:18:cd:c8:
                    ea:ef:65:21:bf:c4:a9:00:c4:16:ac:8a:0b:89:c6:
                    8a:82:83:05:88:b4:b9:a8:47:50:98:0e:68:7e:27:
                    62:18:c7:26:97:08:ba:89:55:6d:48:54:dd:f7:6d:
                    b8:2c:be:31:c0:40:21:60:e8:f0:43:bc:3a:98:88:
                    9a:a6:c7:73:37:3e:b3:40:58:66:60:ab:f2:27:aa:
                    5c:05:9d:ba:57:9d:bb:7e:36:4a:86:5e:45:82:20:
                    e6:a7:8d:9c:cf:dd:a9:f9:00:4e:f7:d9:e2:fd:57:
                    aa:0f:ec:67:0d:05:11:f2:5c:53:30:f0:f5:cb:74:
                    8e:89:34:71:d7:63:58:0a:b5:d3:a4:9c:a7:a9:d2:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:18:C5:5D:5B:0F:31:3E:01:90:3B:A5:07:63:71:E7:E8:85:1E
            X509v3 Authority Key Identifier:
                keyid:A5:A9:0D:60:BB:A1:CD:AE:6C:68:AE:70:78:5D:AF:95:C6:48:2D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF682AEEF8BD200DD148257298570B7C209572B17E76A16C07D36968C48AD33/0/A5A90D60BBA1CDAE6C68AE70785DAF95C6482DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5A90D60BBA1CDAE6C68AE70785DAF95C6482DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF682AEEF8BD200DD148257298570B7C209572B17E76A16C07D36968C48AD33/0/323830333a3433303a3a2f33322d3438203d3e20323733383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:430::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:7e:61:5d:90:84:c8:91:71:f3:b9:92:98:01:63:1a:01:8b:
         95:cd:e8:5f:0b:aa:99:98:86:4a:42:76:dd:65:f1:d0:a2:5d:
         53:29:f0:7e:3f:22:14:b7:ef:ec:b6:fd:6d:33:e9:3e:b3:67:
         03:75:8f:c2:48:87:f9:a2:b3:68:a8:41:2a:8d:16:bc:81:be:
         bf:e5:65:56:43:09:3f:c5:c5:f9:4b:cf:c7:1b:f4:21:60:b5:
         ed:36:b1:51:f6:fd:62:19:59:44:e1:26:61:70:84:1d:d4:be:
         91:6b:55:ab:c4:8a:2f:9e:10:41:cd:a5:81:30:d5:8a:52:2f:
         78:b8:c5:56:ed:76:e2:df:0c:81:38:b6:01:db:52:aa:c2:a2:
         91:a5:46:c9:13:7e:9b:44:c5:50:b5:ec:59:35:2b:65:38:91:
         97:b6:35:08:7f:70:7e:1d:5f:db:2d:0f:f7:ca:36:ba:87:41:
         c0:1f:6f:93:db:d4:02:a1:39:d9:b7:04:2c:10:9b:ff:49:a0:
         e3:ba:22:fd:ea:7f:c6:eb:52:db:99:8b:86:7d:17:1f:8b:2c:
         d9:7e:33:6a:45:a8:87:a0:d9:c0:25:28:71:e9:70:81:3a:1e:
         c3:82:1e:d7:e8:25:36:01:fa:31:18:ea:c8:e0:da:5f:e0:98:
         ef:6b:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:43 2026 by rpki-client