Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/323830333a313939303a3a2f33322d3438203d3e20323732393533.roa
File:                     323830333a313939303a3a2f33322d3438203d3e20323732393533.roa (raw, json)
Hash identifier:          8G9FIm//dzm958fNCDSLiT7CBS6c8EqIphQiuOSWj7g=
Subject key identifier:   F1:59:E0:DF:A2:55:D5:01:E4:3A:EB:96:3B:9E:CD:42:2B:2A:D2:28
Certificate issuer:       /CN=11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203
Certificate serial:       125ADCD259D060778EAE76B6577CB5A2315A9A92
Authority key identifier: 11:A5:C3:4E:7E:1C:4A:DB:CB:B3:7D:80:77:C2:83:6D:1B:F6:32:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/323830333a313939303a3a2f33322d3438203d3e20323732393533.roa
Signing time:             Mon 29 Jun 2026 20:50:18 +0000
ROA not before:           Mon 29 Jun 2026 20:45:18 +0000
ROA not after:            Mon 28 Jun 2027 20:50:18 +0000
asID:                     272953
IP address blocks:        2803:1990::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5a:dc:d2:59:d0:60:77:8e:ae:76:b6:57:7c:b5:a2:31:5a:9a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203
        Validity
            Not Before: Jun 29 20:45:18 2026 GMT
            Not After : Jun 28 20:50:18 2027 GMT
        Subject: CN=F159E0DFA255D501E43AEB963B9ECD422B2AD228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f2:83:8b:c8:28:e2:8d:bd:25:25:5a:bf:6e:
                    77:16:48:d2:5c:a5:57:8d:2c:e0:1a:46:b0:53:e9:
                    cc:f4:e5:36:28:4f:43:72:ab:a0:ba:af:a9:51:e7:
                    79:7a:70:c2:4f:e7:3f:83:c6:54:a3:be:5e:92:6a:
                    49:a8:65:ae:d7:f8:76:89:a9:31:ca:34:0b:c4:0a:
                    11:35:dd:2e:6e:37:c8:a6:8d:c8:51:b2:40:c3:eb:
                    99:19:a2:47:6d:c6:ce:86:ae:94:50:03:00:ab:2b:
                    1f:85:67:4e:9f:38:e3:aa:c8:8d:f1:5a:e0:54:c8:
                    ad:47:30:28:54:2e:6f:b3:70:50:22:72:ea:b7:89:
                    58:ab:95:57:11:4b:7f:50:54:9e:6f:d3:84:97:e5:
                    e0:56:c5:e2:69:98:2e:7d:6e:26:1f:54:21:78:e1:
                    80:25:f9:6d:e7:29:12:2b:a5:14:7c:9f:97:8a:47:
                    db:cc:e5:9b:2b:0f:48:af:21:a3:f0:0e:22:ca:67:
                    09:c1:b6:f7:0e:69:b7:50:a1:f3:47:a9:53:02:f8:
                    cc:f8:16:92:05:02:bf:ea:be:e9:89:ed:05:33:1e:
                    b2:d5:c8:bb:09:f3:06:93:50:b8:25:09:0e:57:44:
                    90:80:1b:a8:38:41:5e:25:09:f1:99:10:25:b1:e2:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:E0:DF:A2:55:D5:01:E4:3A:EB:96:3B:9E:CD:42:2B:2A:D2:28
            X509v3 Authority Key Identifier:
                keyid:11:A5:C3:4E:7E:1C:4A:DB:CB:B3:7D:80:77:C2:83:6D:1B:F6:32:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/323830333a313939303a3a2f33322d3438203d3e20323732393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1990::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:63:93:86:e1:8c:80:2b:1a:8a:8b:ce:52:20:7f:0d:54:1d:
         7f:1c:1b:de:42:84:0d:2a:90:45:05:aa:ec:2e:41:68:7e:bf:
         8c:f9:9e:3e:d6:53:a3:ba:de:6c:d7:ad:8a:c7:43:b9:ae:d8:
         12:13:5f:e7:d3:b1:32:34:5b:ab:5b:e8:5c:86:c7:5a:78:00:
         4d:f0:24:57:f3:de:e0:1f:60:a3:a2:fb:00:f7:d0:71:54:a3:
         ea:87:e4:55:8b:6d:a2:f7:69:4d:2d:e5:fe:12:b2:8f:b4:87:
         e1:92:0e:ae:f8:84:55:e4:fa:ed:9d:66:2a:4d:28:4a:b2:6b:
         b1:e6:f9:fc:a7:e0:15:35:62:8b:3b:a9:83:35:c1:45:fa:da:
         4c:a7:25:f2:05:e7:0e:ec:13:39:03:ee:58:97:b1:7e:aa:8d:
         f0:d6:b5:b2:c2:6a:0d:dc:b2:6a:c9:d0:d7:86:22:f3:4b:79:
         4f:1f:86:d7:63:df:44:85:1d:4f:97:c0:6d:31:24:d9:a4:05:
         10:df:49:c3:26:81:af:9d:31:09:b1:e7:48:40:30:de:9e:d8:
         9b:3f:6f:25:fc:d4:bd:5b:d6:9a:84:64:80:b3:72:5a:d7:01:
         3a:a9:93:90:00:58:3f:3f:b8:ff:b2:20:ab:26:82:23:f4:03:
         d2:85:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:31:17 2026 by rpki-client