Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6530303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a6530303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          UVxyNMUSWUliK5eV44czG+iFNWRf1fAPSt5pfZWMn8Q=
Subject key identifier:   40:08:45:14:C4:E2:35:66:26:61:B7:9D:83:00:87:18:00:C7:24:3D
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       70DB503D22A32C9656792C4F8BBA308FA53069E0
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6530303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 20 Mar 2026 03:35:17 +0000
ROA not before:           Fri 20 Mar 2026 03:30:17 +0000
ROA not after:            Fri 19 Mar 2027 03:35:17 +0000
asID:                     272869
IP address blocks:        2803:7290:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:db:50:3d:22:a3:2c:96:56:79:2c:4f:8b:ba:30:8f:a5:30:69:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar 20 03:30:17 2026 GMT
            Not After : Mar 19 03:35:17 2027 GMT
        Subject: CN=40084514C4E235662661B79D8300871800C7243D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:b7:b9:3e:0d:3e:a3:fc:ad:10:08:c6:1e:
                    b3:86:8c:30:de:74:22:f6:a1:4d:ef:dc:1d:bf:ea:
                    8a:50:5c:e4:d4:94:f0:db:72:26:00:01:d0:15:28:
                    4d:10:eb:fe:b1:c8:61:a4:d6:f4:8c:a5:67:bd:a5:
                    a4:ba:98:ce:0b:88:ff:cd:7f:70:12:4a:72:c2:8e:
                    31:08:b0:77:2b:19:ef:c8:50:63:91:62:39:7f:6b:
                    3b:8d:bc:4e:c5:fa:b3:d5:03:9d:7d:6b:55:1a:4c:
                    03:66:10:8a:ab:33:58:de:b2:9e:b9:ce:9d:32:61:
                    7b:26:8f:48:5c:de:b7:c1:21:af:e2:d5:ef:36:7c:
                    1e:9f:52:c5:33:54:7f:32:fc:57:20:e6:47:a2:88:
                    fd:33:6f:89:45:64:d7:af:eb:6d:8a:7b:e2:5e:8d:
                    37:e3:c8:3e:25:f2:10:d6:50:09:86:3d:a1:e2:0b:
                    d7:fe:7d:ef:77:30:3e:d3:45:42:1b:f7:b5:be:57:
                    96:65:37:32:70:1c:cc:e3:ed:3d:a5:18:03:cd:ba:
                    6f:dd:25:a5:60:57:76:b6:dc:4b:e5:26:dd:13:72:
                    fd:51:10:e4:a7:40:05:0c:b9:30:51:07:22:41:57:
                    3b:51:65:45:fc:63:e3:88:98:47:8b:b1:d7:cc:f7:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:08:45:14:C4:E2:35:66:26:61:B7:9D:83:00:87:18:00:C7:24:3D
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6530303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:4c:cd:5a:80:5a:f7:c3:d8:7b:94:89:f0:de:83:f7:a9:dc:
         db:89:e6:ab:f7:29:60:06:55:62:40:cc:af:2e:b6:04:f7:19:
         0b:d5:17:b0:06:f0:2d:8d:6d:b0:ed:49:cc:a2:49:37:75:b5:
         57:c8:50:d6:d7:d9:f2:fd:8e:9f:e9:5a:6e:20:3d:70:9b:de:
         a5:ed:c6:41:17:ab:88:1b:31:59:c0:2b:41:7b:d6:cd:9a:cf:
         5c:16:cf:45:4e:7f:7f:50:c1:93:60:56:65:40:0b:dd:a0:57:
         e4:36:d2:4d:f7:38:d4:53:92:63:75:f4:da:bd:58:fb:f8:6f:
         70:6c:ca:3e:50:3a:13:d0:59:6f:6f:51:20:00:8c:dc:2b:dc:
         d4:c9:81:b8:a0:fc:2c:e6:5f:d2:8f:31:7b:17:ef:75:80:98:
         7a:a7:34:96:cd:d2:40:f3:c4:d1:54:66:59:1b:d0:e5:ac:be:
         a6:13:a5:0e:a0:b4:d5:58:64:d9:e3:70:22:01:73:e1:b9:ae:
         cb:8c:39:86:10:3c:26:8c:0f:5b:19:83:c7:ea:f3:d3:06:c9:
         ac:d3:a3:0a:a7:ad:a1:1e:28:8a:ed:e5:85:46:b4:04:ef:7c:
         d6:94:cf:49:df:8e:fd:cd:87:02:47:f9:de:ee:09:cc:e7:85:
         e1:20:1e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:29:24 2026 by rpki-client