Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E202A5DF303B1808E2BFC5B6074B3177DD18A2B4A047B4D9337C8B3F0BF66AC7/0/323830333a643631303a3a2f33322d3438203d3e20323731393530.roa
File:                     323830333a643631303a3a2f33322d3438203d3e20323731393530.roa (raw, json)
Hash identifier:          tSGIaUNcaowRKFUaJnyC9+19lk099RwZqBD+rpO6ip0=
Subject key identifier:   A5:B0:F4:90:37:D7:85:CF:3A:9F:2D:C8:0B:FA:B1:D4:0B:43:DD:FA
Certificate issuer:       /CN=6EE8CE5A8CDD93BEEAA1B5C5A55CE06045984D59
Certificate serial:       238E07286CB5BF90877EAFD5D8421609782C48A0
Authority key identifier: 6E:E8:CE:5A:8C:DD:93:BE:EA:A1:B5:C5:A5:5C:E0:60:45:98:4D:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE8CE5A8CDD93BEEAA1B5C5A55CE06045984D59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E202A5DF303B1808E2BFC5B6074B3177DD18A2B4A047B4D9337C8B3F0BF66AC7/0/323830333a643631303a3a2f33322d3438203d3e20323731393530.roa
Signing time:             Sat 20 Jun 2026 14:10:00 +0000
ROA not before:           Sat 20 Jun 2026 14:05:00 +0000
ROA not after:            Sat 19 Jun 2027 14:10:00 +0000
asID:                     271950
IP address blocks:        2803:d610::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E202A5DF303B1808E2BFC5B6074B3177DD18A2B4A047B4D9337C8B3F0BF66AC7/0/6EE8CE5A8CDD93BEEAA1B5C5A55CE06045984D59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E202A5DF303B1808E2BFC5B6074B3177DD18A2B4A047B4D9337C8B3F0BF66AC7/0/6EE8CE5A8CDD93BEEAA1B5C5A55CE06045984D59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE8CE5A8CDD93BEEAA1B5C5A55CE06045984D59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:07:28:6c:b5:bf:90:87:7e:af:d5:d8:42:16:09:78:2c:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE8CE5A8CDD93BEEAA1B5C5A55CE06045984D59
        Validity
            Not Before: Jun 20 14:05:00 2026 GMT
            Not After : Jun 19 14:10:00 2027 GMT
        Subject: CN=A5B0F49037D785CF3A9F2DC80BFAB1D40B43DDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:2a:db:97:91:0b:2a:58:49:05:b7:f1:d0:
                    42:a2:47:8b:61:ad:7a:aa:09:eb:dd:78:06:94:4b:
                    3a:64:34:b5:98:2b:80:01:20:44:c5:fd:5b:9b:48:
                    d3:c6:ab:27:2c:1e:b8:90:d8:e7:b4:bf:2f:40:07:
                    d1:49:82:79:7d:6c:51:69:f3:f5:b1:4f:36:9b:66:
                    7f:bd:56:4d:1b:8a:0f:39:95:ca:12:77:62:81:0a:
                    b8:51:f8:7b:1e:a1:32:56:15:08:90:2a:3e:68:54:
                    c0:e4:33:10:cf:fa:50:47:db:f0:ea:e9:65:02:da:
                    f1:1e:b9:74:e0:8c:5d:b5:d0:31:9d:36:61:b8:2f:
                    9a:f6:10:d0:3a:68:71:b7:21:5b:13:7b:d1:a9:a0:
                    55:4c:40:f8:5e:83:bc:66:91:8d:a1:f1:df:a2:f4:
                    a7:88:cb:a7:18:7d:05:79:72:a7:61:8f:e9:99:6d:
                    ba:4d:76:cd:98:d8:24:08:b2:2d:73:9f:11:75:44:
                    6d:cf:76:a2:7c:69:e5:15:2e:ed:95:ab:bc:1d:68:
                    a2:4f:94:c3:03:1b:89:98:a1:a6:1a:5b:82:7c:97:
                    ae:4b:ad:7c:6f:cc:38:1c:ac:84:4a:ca:f2:0e:9e:
                    ed:a0:7a:ae:c3:86:69:61:99:80:64:99:cc:90:3d:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B0:F4:90:37:D7:85:CF:3A:9F:2D:C8:0B:FA:B1:D4:0B:43:DD:FA
            X509v3 Authority Key Identifier:
                keyid:6E:E8:CE:5A:8C:DD:93:BE:EA:A1:B5:C5:A5:5C:E0:60:45:98:4D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E202A5DF303B1808E2BFC5B6074B3177DD18A2B4A047B4D9337C8B3F0BF66AC7/0/6EE8CE5A8CDD93BEEAA1B5C5A55CE06045984D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE8CE5A8CDD93BEEAA1B5C5A55CE06045984D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E202A5DF303B1808E2BFC5B6074B3177DD18A2B4A047B4D9337C8B3F0BF66AC7/0/323830333a643631303a3a2f33322d3438203d3e20323731393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d610::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:a7:ba:b4:a3:c3:86:f4:15:c2:29:f5:b2:be:f9:d5:cb:
         a4:72:2d:80:3b:2b:d9:06:86:0b:96:08:01:20:91:17:6d:16:
         f1:e5:50:4f:54:f8:79:33:0e:0a:a4:9a:82:1c:44:97:4a:f0:
         f9:c5:f1:8e:ab:04:63:a3:1e:3c:a4:85:41:37:88:ee:d0:1e:
         8e:67:14:1b:ad:6e:a2:3d:93:f5:3a:9e:e1:e3:44:41:42:ec:
         12:a4:3b:65:70:94:bc:04:00:26:eb:44:ea:21:77:30:70:f6:
         e4:84:e8:7c:43:c0:36:84:1b:43:44:21:67:54:ff:32:95:ff:
         d0:35:ec:d3:50:d4:e9:4b:ee:d4:96:bb:11:2e:b8:f0:0a:58:
         cd:62:0d:47:b0:46:f7:2c:d1:29:76:78:91:15:9b:85:df:52:
         db:f2:db:5d:ec:14:8d:43:cb:77:68:ec:4b:49:a5:ed:fa:a0:
         72:87:c6:da:9a:cd:29:66:6d:da:04:3c:68:5b:1d:45:96:d5:
         d4:d5:27:f9:95:c6:37:ce:24:0c:72:83:7c:de:61:bf:b4:ef:
         1c:bb:93:74:f2:14:fb:81:f9:7a:55:1a:cb:b6:69:7b:d2:79:
         b4:68:5e:e1:72:a2:1b:46:92:0a:14:97:dc:72:23:c1:01:66:
         6c:86:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:59 2026 by rpki-client