Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313230303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313230303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          325qQbE9TGkrXPhgS+R4QJfbz+Ly5gBS5V07+BAj32s=
Subject key identifier:   69:1E:31:58:B8:BB:D8:10:6D:59:AB:18:5F:00:86:7B:EC:D7:8F:20
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       5E1C06A13C69EC51241E79ECA63B7A67620C1D58
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313230303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 20 Mar 2026 03:35:15 +0000
ROA not before:           Fri 20 Mar 2026 03:30:15 +0000
ROA not after:            Fri 19 Mar 2027 03:35:15 +0000
asID:                     272869
IP address blocks:        2803:7290:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1c:06:a1:3c:69:ec:51:24:1e:79:ec:a6:3b:7a:67:62:0c:1d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar 20 03:30:15 2026 GMT
            Not After : Mar 19 03:35:15 2027 GMT
        Subject: CN=691E3158B8BBD8106D59AB185F00867BECD78F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:64:75:59:5e:d0:66:19:e4:b3:d7:08:0f:
                    48:68:76:c3:09:b1:e7:27:3e:4c:bf:d4:f3:5d:dd:
                    ab:28:9f:59:8e:db:c8:e9:a0:c7:d2:5d:25:41:22:
                    08:28:02:97:3a:8c:db:a8:05:b6:64:5b:95:54:ae:
                    45:f1:26:19:bc:d9:1f:b4:57:92:68:b9:6c:e8:ee:
                    6d:c3:de:82:27:8c:9a:87:f7:49:89:71:be:46:23:
                    7e:be:2d:9e:b2:82:e5:80:5d:a3:44:a8:eb:2e:23:
                    36:e0:fe:a5:e1:88:c7:9f:83:82:d3:ec:c2:44:34:
                    2d:d2:ff:13:6a:f7:37:b8:57:95:65:25:dd:c1:98:
                    32:3a:89:96:79:7b:b5:3d:40:48:4c:37:c7:5c:22:
                    d8:23:3e:8f:b2:ec:01:ca:34:d5:1d:39:17:a2:93:
                    75:fe:a6:ae:b2:0c:7d:da:2f:5d:96:69:bf:01:07:
                    ad:de:8b:a0:f7:d6:55:f3:41:06:10:fb:dc:da:29:
                    92:b3:d3:7d:34:06:ae:42:66:b7:d6:12:77:0d:45:
                    3e:d4:18:05:ea:26:b2:46:23:df:d1:f9:1a:06:d2:
                    27:61:59:37:6a:ba:da:ef:7e:c3:4b:62:57:17:18:
                    31:32:bb:d8:da:71:0c:bb:72:64:28:6d:d8:a8:ae:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1E:31:58:B8:BB:D8:10:6D:59:AB:18:5F:00:86:7B:EC:D7:8F:20
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313230303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:ce:99:bc:89:ba:79:47:78:ba:9d:cf:6c:ec:5b:0a:a5:
         44:1c:fa:e8:8f:75:ec:5e:10:b0:1a:26:3b:d6:53:67:1b:e3:
         83:bf:24:90:0a:1a:2e:f9:eb:bf:f7:90:96:da:f3:3c:3b:b3:
         8d:e3:fe:db:ad:4b:22:15:9e:8c:6a:64:d1:29:82:c9:89:bd:
         1d:41:ab:19:aa:24:5f:17:08:fd:28:77:97:05:a8:27:b3:52:
         34:76:78:37:c9:58:96:93:ae:91:73:f1:a7:8a:85:56:56:26:
         f0:ae:2b:dd:f6:29:45:86:70:84:48:23:44:64:97:be:fe:0a:
         5b:7a:93:d8:48:a8:19:ac:d7:d1:27:b7:5e:5d:e6:cb:3d:fe:
         32:82:25:c5:e8:53:83:f4:b7:27:36:e5:fa:09:7c:7d:f6:ee:
         03:d0:9a:3d:ee:b2:14:bd:25:69:e4:5b:26:41:ef:08:82:2e:
         f1:c5:23:cb:d7:2b:fe:29:5b:e3:c9:e3:8e:71:e9:4b:1d:58:
         be:52:b3:f2:82:b4:97:71:a3:dc:6c:28:57:b3:a1:d9:f9:50:
         45:fd:07:eb:a5:8d:68:fc:1f:10:7f:08:d3:7d:0b:cf:07:3e:
         f3:f3:08:63:99:f7:0c:3c:85:82:df:27:c3:a2:97:b3:88:24:
         d0:1f:42:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:32 2026 by rpki-client