Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1DE1F8AE32C066C9ACF6B7106ACE03D473D81B227F69F8E565FB4BFB8B300C8/0/323830333a383633303a3a2f33322d3438203d3e20323734383832.roa
File:                     323830333a383633303a3a2f33322d3438203d3e20323734383832.roa (raw, json)
Hash identifier:          lE1fpvQ7Hvt0TEsGcZg3Fze2SaYEBiZr8Nbw5MbWBCw=
Subject key identifier:   3C:B6:58:2F:4D:12:2E:37:C1:7D:FC:BB:86:2F:4D:83:59:E5:AA:8C
Certificate issuer:       /CN=FE01D18CF2FD201F2168629CDB3E19C1C30878B9
Certificate serial:       385BE5B332C5535A5D55CC43841A06D74A690544
Authority key identifier: FE:01:D1:8C:F2:FD:20:1F:21:68:62:9C:DB:3E:19:C1:C3:08:78:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE01D18CF2FD201F2168629CDB3E19C1C30878B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1DE1F8AE32C066C9ACF6B7106ACE03D473D81B227F69F8E565FB4BFB8B300C8/0/323830333a383633303a3a2f33322d3438203d3e20323734383832.roa
Signing time:             Thu 07 May 2026 17:55:00 +0000
ROA not before:           Thu 07 May 2026 17:50:00 +0000
ROA not after:            Thu 06 May 2027 17:55:00 +0000
asID:                     274882
IP address blocks:        2803:8630::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1DE1F8AE32C066C9ACF6B7106ACE03D473D81B227F69F8E565FB4BFB8B300C8/0/FE01D18CF2FD201F2168629CDB3E19C1C30878B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1DE1F8AE32C066C9ACF6B7106ACE03D473D81B227F69F8E565FB4BFB8B300C8/0/FE01D18CF2FD201F2168629CDB3E19C1C30878B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE01D18CF2FD201F2168629CDB3E19C1C30878B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5b:e5:b3:32:c5:53:5a:5d:55:cc:43:84:1a:06:d7:4a:69:05:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE01D18CF2FD201F2168629CDB3E19C1C30878B9
        Validity
            Not Before: May  7 17:50:00 2026 GMT
            Not After : May  6 17:55:00 2027 GMT
        Subject: CN=3CB6582F4D122E37C17DFCBB862F4D8359E5AA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:28:a7:ef:d2:42:e2:3e:d8:9a:79:c6:b2:
                    76:e5:a1:28:3e:3a:70:d8:65:f2:5f:fb:d1:e6:23:
                    99:7e:42:76:c8:fd:6f:b6:7a:f6:df:98:49:35:f3:
                    2c:eb:e3:14:0f:08:17:5d:66:18:f4:7f:4a:d6:4e:
                    cd:f7:c7:80:af:2c:42:f6:8c:8f:44:97:a4:7c:c1:
                    d5:00:04:07:95:cc:34:f0:b1:2f:a5:fb:e7:02:e9:
                    16:d6:81:08:86:4c:70:dd:6a:2f:5b:f3:4b:4e:82:
                    c2:ca:9f:71:2f:b6:53:06:e5:1a:75:8e:0d:7d:33:
                    04:b7:c7:a6:5b:f3:4d:85:7c:5b:ef:d7:ba:6d:45:
                    3b:7a:32:07:12:92:b5:e2:5a:35:e4:3f:b5:0e:79:
                    d2:a4:fa:ca:f9:60:50:ca:e1:5c:fe:45:43:63:f1:
                    fb:83:42:4d:9b:b9:e9:83:7b:bd:97:7d:cd:be:c0:
                    91:86:d4:7d:6a:1f:77:db:9e:4e:e9:69:30:16:b1:
                    a8:f8:02:01:54:84:a5:85:71:2d:83:77:23:66:94:
                    0a:61:f7:e6:16:d0:79:3a:ba:bf:a2:54:b8:d1:08:
                    91:6e:d1:dd:1c:1f:4f:73:58:88:a8:52:a9:3c:d3:
                    a1:dc:5c:4a:af:f5:74:2b:20:96:b4:7b:f2:a1:1c:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B6:58:2F:4D:12:2E:37:C1:7D:FC:BB:86:2F:4D:83:59:E5:AA:8C
            X509v3 Authority Key Identifier:
                keyid:FE:01:D1:8C:F2:FD:20:1F:21:68:62:9C:DB:3E:19:C1:C3:08:78:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1DE1F8AE32C066C9ACF6B7106ACE03D473D81B227F69F8E565FB4BFB8B300C8/0/FE01D18CF2FD201F2168629CDB3E19C1C30878B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE01D18CF2FD201F2168629CDB3E19C1C30878B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1DE1F8AE32C066C9ACF6B7106ACE03D473D81B227F69F8E565FB4BFB8B300C8/0/323830333a383633303a3a2f33322d3438203d3e20323734383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8630::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:21:19:1e:95:ce:b9:2c:f5:f5:0b:99:df:46:62:e8:1f:86:
         74:d1:41:c2:1c:f4:52:c2:86:47:86:f9:47:fa:18:f0:23:60:
         a6:3c:56:1c:0a:97:23:2a:55:65:30:18:86:2f:40:0f:eb:2c:
         84:ca:98:06:e7:0d:48:fe:2b:6a:cf:93:70:6b:3a:17:23:b3:
         e8:5b:35:57:dc:59:c8:8a:25:fa:18:2b:c4:59:1a:9e:45:ad:
         b9:7b:98:e2:a2:f2:54:2d:23:21:9d:b3:49:3c:3f:55:2c:ca:
         03:79:9e:7a:a4:b3:4c:33:96:71:17:48:25:d7:94:68:1b:01:
         c4:04:47:46:a2:1c:e6:02:de:f6:27:1d:af:db:a6:ff:bf:5e:
         0a:7a:99:e1:62:10:b5:e5:26:60:a1:e9:43:61:45:49:3d:5a:
         b3:20:1b:e1:a7:45:6c:3a:e3:56:08:fa:ae:4b:de:4c:49:59:
         c4:35:cf:bd:b1:fc:6a:8a:05:1f:5f:44:6d:76:0b:44:2f:1d:
         6d:aa:1c:37:45:68:8e:61:82:4e:37:b9:26:09:5a:39:29:9e:
         c0:db:bb:44:4e:1d:64:d8:30:1f:87:ad:22:ba:39:c8:34:77:
         8b:71:54:be:73:b4:4d:a6:04:26:d0:81:75:b9:ff:40:61:bc:
         a7:4a:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:18 2026 by rpki-client