Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62333a3a2f34382d3634203d3e20323734303633.roa
File:                     323830333a663264303a62333a3a2f34382d3634203d3e20323734303633.roa (raw, json)
Hash identifier:          Y1x9ghhuaQ7vmGeYBsut6/3N+DpZnqWd/PxaI8LUi4A=
Subject key identifier:   A2:F8:E5:FB:A6:18:41:92:46:CD:60:CE:07:85:FC:19:62:44:0F:7B
Certificate issuer:       /CN=0024F2646BA42106407316FE59A0CD2A76EF240C
Certificate serial:       72031CF03DC4B3D5F4A8AA74602C88BB1767F19E
Authority key identifier: 00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62333a3a2f34382d3634203d3e20323734303633.roa
Signing time:             Wed 17 Jun 2026 20:48:19 +0000
ROA not before:           Wed 17 Jun 2026 20:43:19 +0000
ROA not after:            Wed 16 Jun 2027 20:48:19 +0000
asID:                     274063
IP address blocks:        2803:f2d0:b3::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:03:1c:f0:3d:c4:b3:d5:f4:a8:aa:74:60:2c:88:bb:17:67:f1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024F2646BA42106407316FE59A0CD2A76EF240C
        Validity
            Not Before: Jun 17 20:43:19 2026 GMT
            Not After : Jun 16 20:48:19 2027 GMT
        Subject: CN=A2F8E5FBA618419246CD60CE0785FC1962440F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:fe:fa:73:fb:a4:6e:51:0b:de:8a:f8:e6:
                    ef:03:10:f6:30:c1:68:ac:fd:1e:9c:3e:04:5a:30:
                    7f:4a:8f:73:65:4e:23:6e:ea:59:ae:3b:0b:9a:01:
                    fa:a3:e9:24:f3:cc:7f:23:48:44:6c:74:0e:e6:0b:
                    6e:34:a4:4e:b0:38:0b:26:62:2a:00:36:af:c0:da:
                    5f:f2:d0:3c:d9:80:70:4d:20:f4:18:f4:7d:59:a5:
                    94:45:15:d6:dd:63:c4:b7:24:62:d0:22:84:24:bc:
                    1b:b7:9d:df:7c:d0:12:bd:90:d1:ce:26:73:42:9d:
                    54:05:47:69:aa:af:4c:68:af:6d:b5:04:90:b1:af:
                    48:f4:34:c8:3e:c4:c9:6e:88:1b:4f:88:21:83:26:
                    1f:ba:7f:3e:b0:22:68:1c:90:2d:73:e2:d5:19:d6:
                    36:a0:34:72:64:58:a9:4f:bf:e2:19:68:ab:b2:f5:
                    08:79:20:2b:80:ca:f1:8a:07:3a:0b:36:e1:b1:18:
                    79:64:81:72:a0:ca:f2:ca:59:c9:6f:0d:41:56:a2:
                    a9:1c:b4:fc:6b:f1:80:72:0b:38:fd:78:40:d6:b3:
                    22:ab:03:79:c6:09:ca:d8:6d:67:78:a3:64:b3:c7:
                    f0:c9:d2:61:b3:f0:18:0a:de:05:bd:2d:0a:f6:05:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:E5:FB:A6:18:41:92:46:CD:60:CE:07:85:FC:19:62:44:0F:7B
            X509v3 Authority Key Identifier:
                keyid:00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62333a3a2f34382d3634203d3e20323734303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2d0:b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:2d:13:d6:92:69:0f:69:b5:17:f7:ce:f9:a6:23:32:d7:f7:
         cd:e1:39:90:9e:f3:77:cc:5e:94:a4:71:2f:b3:ad:f1:7a:aa:
         c8:fe:a6:d0:21:04:bf:18:b0:45:b1:4b:a4:c6:a8:26:d9:4e:
         b2:6e:b1:25:1a:b9:c2:43:d2:4e:d7:c5:b0:24:19:d2:6f:a2:
         79:69:d7:65:40:ea:de:0f:d2:a7:36:9d:66:46:80:26:98:6e:
         3a:c7:b5:89:89:1a:21:48:d7:f7:a8:3d:69:2e:bc:1f:82:d6:
         b7:53:f3:de:c4:4d:f4:cb:03:6b:50:9d:4e:98:1c:3e:0d:fd:
         ec:35:8e:c1:68:6a:73:c7:69:e4:98:4c:47:36:d2:4b:73:56:
         35:65:27:f1:73:5d:8f:7e:44:7a:a8:38:61:53:1b:60:2d:e9:
         9c:81:2b:eb:9e:8c:2c:4b:25:8e:bc:02:1b:f8:63:e8:1e:22:
         0f:97:ad:71:f6:18:ed:41:c7:16:bd:ec:6a:25:a1:ce:25:ad:
         8f:10:ce:06:b8:e2:37:56:64:1b:46:92:ab:bb:b4:00:15:dc:
         89:79:a3:04:f4:ef:57:47:12:a7:d4:c4:49:d6:12:78:33:02:
         38:ba:3f:b6:d9:81:0a:38:96:46:4a:1b:2e:39:06:96:04:ab:
         68:7f:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:55:48 2026 by rpki-client