Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316330303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a316330303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          jOknKmy91FpKMGvw7MeiLWWXiGOsDBKpeZyMDBOvqfI=
Subject key identifier:   35:7C:EC:C7:45:DA:D5:BE:59:DE:37:A9:9D:D2:ED:1C:E5:85:77:52
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       20F0284BBE58D2D6095F2B93C07C7ED14A622648
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316330303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 20 Mar 2026 03:35:15 +0000
ROA not before:           Fri 20 Mar 2026 03:30:15 +0000
ROA not after:            Fri 19 Mar 2027 03:35:15 +0000
asID:                     272869
IP address blocks:        2803:7290:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f0:28:4b:be:58:d2:d6:09:5f:2b:93:c0:7c:7e:d1:4a:62:26:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar 20 03:30:15 2026 GMT
            Not After : Mar 19 03:35:15 2027 GMT
        Subject: CN=357CECC745DAD5BE59DE37A99DD2ED1CE5857752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:3a:84:1c:f2:f7:36:34:20:06:af:0b:a1:
                    98:35:0a:39:95:c1:ce:22:55:25:f2:93:50:62:ea:
                    08:59:22:91:d7:2d:00:40:b0:db:7f:91:cd:94:ba:
                    17:7b:f0:db:fd:ee:4c:77:f7:aa:23:71:4a:44:f3:
                    89:ab:e9:81:73:a2:99:ef:ac:12:31:00:94:bd:df:
                    14:15:7a:4f:95:de:56:cc:4d:23:e0:2f:45:34:6e:
                    e1:05:9f:db:3d:28:7e:0e:dc:c5:6e:4e:a4:95:2a:
                    e5:9e:2e:eb:54:5d:84:40:8b:2c:f1:e7:57:9a:9d:
                    f7:ae:f8:3e:74:29:14:74:44:b5:2d:d8:40:97:bd:
                    dc:52:09:6b:66:0c:af:f3:0e:2e:8f:8d:d3:d0:49:
                    c8:95:3f:66:f9:6f:eb:89:c8:c9:9b:e7:61:71:28:
                    a5:4a:c0:b3:b8:37:b9:9c:a6:32:7c:3c:25:ef:a7:
                    4d:02:19:dc:dd:9d:ce:b5:d5:32:ea:6d:b9:02:05:
                    66:55:d5:7a:61:8b:5d:70:f7:d3:8a:44:5a:0d:60:
                    d6:c8:f5:41:17:a3:29:a9:2f:12:ac:96:3e:90:44:
                    f1:1d:ec:84:d5:52:79:7e:77:c3:b6:8a:03:84:67:
                    1c:92:46:3b:f1:8c:d1:50:8b:27:53:a9:f2:21:91:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7C:EC:C7:45:DA:D5:BE:59:DE:37:A9:9D:D2:ED:1C:E5:85:77:52
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316330303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:fb:b0:55:07:be:53:92:2a:8d:58:fd:5f:45:6c:14:12:d6:
         ce:41:72:a1:72:fb:bc:67:4b:fe:0c:0c:5e:82:2d:92:87:4b:
         f0:a8:c2:10:9b:6a:c2:18:c5:a5:0b:86:06:e5:d9:70:59:75:
         4c:db:d8:b1:e9:10:b6:c9:74:3b:18:21:4c:ba:8f:40:1a:89:
         b1:fd:42:ab:5a:d8:89:c0:27:ca:cd:06:a8:0d:08:f9:46:dc:
         68:21:23:04:10:55:10:e3:b8:93:25:77:3d:ff:f7:db:7c:ce:
         d6:39:f9:1d:7d:0a:b2:0b:53:9f:f6:0b:a3:19:8e:5c:64:15:
         37:65:f0:9a:88:fe:bc:cd:7e:f3:1a:d0:c8:27:2f:51:ab:15:
         c4:35:b2:00:4d:86:af:53:77:a5:28:c7:2b:6e:d7:a9:ed:63:
         25:ed:82:76:cb:58:43:c8:14:68:bb:41:f7:73:05:15:35:de:
         a6:85:f4:9d:d6:34:aa:e0:c3:22:9d:d2:b9:d7:4b:0e:75:97:
         e4:b6:16:dc:fa:ec:ea:1e:d4:4c:50:7a:88:53:09:e2:d7:8e:
         53:c4:cb:e1:14:4f:a4:1f:8e:70:96:ba:98:9e:5c:d2:11:72:
         70:fe:c6:6b:27:25:60:d0:42:44:69:4c:51:26:26:31:c0:a1:
         9b:72:94:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:03:55 2026 by rpki-client