Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313330303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313330303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          iykZhS+3XSAgmIIL2/ULWAvtgP6kynya8Qrhv8zYYzk=
Subject key identifier:   F4:4E:5B:EB:E6:8C:88:61:76:E9:05:2B:EF:F0:C4:9D:F5:AA:44:FB
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       65FA9BA7D75D246323CDA5543F296E030EA4BA9E
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313330303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 20 Mar 2026 03:35:14 +0000
ROA not before:           Fri 20 Mar 2026 03:30:14 +0000
ROA not after:            Fri 19 Mar 2027 03:35:14 +0000
asID:                     272869
IP address blocks:        2803:7290:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fa:9b:a7:d7:5d:24:63:23:cd:a5:54:3f:29:6e:03:0e:a4:ba:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar 20 03:30:14 2026 GMT
            Not After : Mar 19 03:35:14 2027 GMT
        Subject: CN=F44E5BEBE68C886176E9052BEFF0C49DF5AA44FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:40:09:85:4a:48:b1:f3:be:b7:d4:f7:46:
                    99:fe:91:7f:c3:2a:f8:b5:8b:c6:9e:3f:8d:3f:b2:
                    8e:6a:f6:3e:11:59:10:0c:2e:7f:cb:c3:1e:99:d4:
                    18:ad:9b:a7:2b:ec:ff:9b:4a:10:99:91:c9:23:f9:
                    c7:3c:49:d6:54:19:f1:56:5d:4c:4c:62:03:66:83:
                    d0:17:7b:c4:46:a0:e7:6e:73:a5:dd:f2:2e:a5:ef:
                    63:76:a0:8d:e1:b1:46:a9:8a:af:a1:d4:a9:1c:ea:
                    33:4b:fe:45:32:5e:57:cb:37:77:71:68:09:c0:33:
                    03:b8:32:7d:3c:91:20:16:9b:9d:17:83:2c:3a:95:
                    e0:62:eb:47:64:32:84:ed:21:d6:c3:87:fe:dd:2c:
                    7b:9f:ce:3b:9e:8a:e7:b8:5e:ec:8e:16:c2:e7:69:
                    7c:48:e8:2e:2c:74:77:72:6c:98:26:e7:d1:a3:2e:
                    49:e4:c8:69:94:ab:0a:5f:0a:65:f4:b6:c7:94:6c:
                    67:80:10:c3:8f:b0:d8:ad:43:02:4e:a6:bf:99:9b:
                    9d:55:5c:3c:ad:5d:a4:18:82:c5:dd:8d:0f:bc:8d:
                    d5:62:aa:53:30:f0:a2:86:d1:bc:54:94:49:90:12:
                    08:da:ba:3c:1c:e3:08:dd:53:85:c8:9a:e5:b5:0f:
                    bd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4E:5B:EB:E6:8C:88:61:76:E9:05:2B:EF:F0:C4:9D:F5:AA:44:FB
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313330303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:1f:83:9f:4e:61:b5:2b:d9:9a:cf:52:a9:68:06:a3:ad:
         29:b3:14:ba:c0:18:51:b1:ce:4f:34:99:43:c1:ef:c9:82:0a:
         dc:dc:73:14:93:50:90:c5:4a:72:4c:5a:0f:5e:e8:cc:f2:3b:
         9b:52:b0:93:c3:11:77:4e:11:b0:8c:1f:a1:96:38:5c:f1:52:
         77:d2:fa:30:83:dd:01:5b:0f:ff:79:22:72:f6:c3:ff:1b:bb:
         b3:ce:6d:76:df:0c:9e:f0:21:5a:93:10:a6:5f:11:22:b4:25:
         76:72:b6:bd:16:19:d7:db:9a:27:dc:da:95:28:0e:89:10:82:
         e9:9c:1e:16:db:d4:e0:ba:a0:70:aa:b8:86:1c:4a:3d:58:98:
         c6:eb:c8:3b:5e:8f:e9:18:b2:ab:5d:14:0d:c5:47:60:5d:37:
         b4:4c:7a:cb:8c:21:be:4a:25:01:2f:81:17:d8:ff:d7:b6:7d:
         30:8e:e7:75:4f:05:d1:35:78:72:c9:96:1b:bb:43:f5:d8:3d:
         9b:0b:72:0b:aa:7a:4a:f9:5b:be:2b:ec:5a:01:34:c3:68:00:
         da:5d:3f:cc:64:4d:c2:28:d5:7d:d0:0a:6c:b3:71:50:76:67:
         ce:fd:8d:d0:9d:f7:d4:50:63:7c:2f:36:6a:2f:eb:1d:57:52:
         84:f8:60:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:17:21 2026 by rpki-client