Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313930303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313930303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          rmraZ052DzTODVxZtTQ6ljHhiXqfHDturXiyQgZ2ZUg=
Subject key identifier:   05:52:B5:87:30:33:B4:62:94:96:0D:83:9C:39:A9:3D:3E:26:A2:B8
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       19B0C9B913C0E30693C9A9A318613E6837BA78C8
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313930303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 20 Mar 2026 03:35:17 +0000
ROA not before:           Fri 20 Mar 2026 03:30:17 +0000
ROA not after:            Fri 19 Mar 2027 03:35:17 +0000
asID:                     272869
IP address blocks:        2803:7290:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b0:c9:b9:13:c0:e3:06:93:c9:a9:a3:18:61:3e:68:37:ba:78:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar 20 03:30:17 2026 GMT
            Not After : Mar 19 03:35:17 2027 GMT
        Subject: CN=0552B5873033B46294960D839C39A93D3E26A2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:45:74:17:9a:b1:35:18:23:56:27:40:07:
                    e0:aa:a3:76:97:54:61:58:63:c2:34:d5:9c:eb:fc:
                    82:7d:66:b5:95:71:8a:b4:97:68:09:dd:2a:37:3d:
                    45:7d:9a:33:08:41:1f:ef:b2:86:c6:3b:bb:1b:8c:
                    47:3f:f7:e4:5f:67:21:c0:5e:d6:6a:91:f9:d8:43:
                    bd:30:fc:71:2a:c7:67:95:c1:c8:ad:52:3a:f3:df:
                    dc:67:bf:14:c6:ef:e5:b9:52:dc:33:d5:23:6a:61:
                    c9:62:0e:54:6d:ec:d0:d3:bf:39:be:90:05:a4:ca:
                    38:e7:dd:20:69:03:9b:3b:12:a0:d5:3e:e8:df:07:
                    b6:fb:59:8a:3b:8d:a9:06:33:ca:ea:36:db:45:71:
                    3a:0c:f0:bd:19:ae:fd:68:ab:94:6d:04:eb:99:ff:
                    a5:63:56:18:b1:87:e3:cc:c5:e7:ef:bd:68:00:0c:
                    19:a3:29:53:90:5d:65:9a:84:77:46:74:90:06:04:
                    82:fa:d6:a2:5e:4d:d6:c0:ef:2c:21:33:de:13:be:
                    06:4a:dd:e4:0f:41:0b:5e:19:82:17:28:8f:86:5e:
                    85:25:7b:51:80:b0:3a:56:8f:7b:42:80:1e:e9:06:
                    d3:68:4d:ec:6e:0a:8f:2c:92:88:f4:03:bb:c3:0d:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:52:B5:87:30:33:B4:62:94:96:0D:83:9C:39:A9:3D:3E:26:A2:B8
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313930303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:4f:fa:61:85:4d:f0:fa:66:14:1f:c8:5e:ab:55:f6:51:dd:
         a0:5f:ac:58:10:29:12:03:89:83:91:82:bc:56:8b:75:68:0e:
         82:88:c7:d2:e1:1a:b4:13:93:7e:0a:7e:5b:82:ab:f9:a9:d0:
         59:d3:90:5f:11:99:36:84:70:6a:6a:ab:3e:f2:89:a2:ef:3d:
         f5:4f:c7:3f:d6:19:36:19:91:d2:87:6f:fc:2a:45:e5:7e:60:
         b2:a6:37:09:f5:ab:64:57:3c:57:8e:cb:d4:ad:1f:88:58:9a:
         d0:32:df:76:9c:89:8d:a7:75:1f:2f:77:8f:b2:dd:2d:70:80:
         83:0f:93:65:de:cf:79:7a:8b:58:34:9b:b2:ae:39:b1:3d:f7:
         c0:c3:02:e9:43:09:f1:01:4b:fe:11:9b:f9:a3:a3:e1:92:e5:
         b3:51:51:f1:bb:b1:30:19:93:a1:5d:54:d1:23:68:52:87:ec:
         27:9a:af:e7:e3:ce:68:e5:aa:dd:e7:c9:d4:8a:6f:ea:61:2e:
         ce:65:a6:73:16:64:54:f9:94:45:a2:33:8d:bc:12:6f:fd:c2:
         06:48:3c:98:13:84:d7:82:22:65:b9:54:7a:8c:bf:d8:6a:2b:
         77:3a:44:ec:79:07:cc:20:09:94:0e:ef:57:03:23:3a:2b:a4:
         e1:96:0b:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:30 2026 by rpki-client