Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323030303a3a2f33372d3430203d3e20323730303335.roa
File:                     323830333a653565303a323030303a3a2f33372d3430203d3e20323730303335.roa (raw, json)
Hash identifier:          yjW11n+iHqACFt+K8iw3NMqvEBKGTszrjxiGKf5/ZAE=
Subject key identifier:   7C:00:23:1E:02:1C:7D:1C:70:94:74:76:BD:89:1D:D9:84:39:2F:99
Certificate issuer:       /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial:       65A838FB0CB50E6C89EA776741A3822ECDD83896
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323030303a3a2f33372d3430203d3e20323730303335.roa
Signing time:             Wed 28 Jan 2026 15:28:04 +0000
ROA not before:           Wed 28 Jan 2026 15:23:04 +0000
ROA not after:            Wed 27 Jan 2027 15:28:04 +0000
asID:                     270035
IP address blocks:        2803:e5e0:2000::/37 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 15:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a8:38:fb:0c:b5:0e:6c:89:ea:77:67:41:a3:82:2e:cd:d8:38:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
        Validity
            Not Before: Jan 28 15:23:04 2026 GMT
            Not After : Jan 27 15:28:04 2027 GMT
        Subject: CN=7C00231E021C7D1C70947476BD891DD984392F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:22:e9:b2:0c:bf:a3:26:76:17:e2:e8:b2:
                    a1:b8:7b:d6:2e:96:66:45:60:8a:16:b6:41:d1:c1:
                    b0:ca:15:68:9a:90:91:86:9e:44:64:35:4b:ad:86:
                    60:9e:1e:0f:12:30:c6:91:8b:b0:67:0f:39:35:c9:
                    ce:ec:2a:87:ac:bd:b7:83:24:85:a8:79:21:45:8c:
                    e2:8c:dd:80:ce:94:17:67:b6:ec:7d:af:00:81:af:
                    92:b6:8a:f2:d6:43:83:40:9c:84:0d:b5:35:50:b5:
                    d9:37:f5:d8:84:74:a6:79:5d:d0:be:49:1d:6f:5c:
                    c1:0a:7c:1b:c9:24:0c:b5:f3:68:1a:b3:56:1c:5a:
                    3b:80:79:06:40:d2:bc:96:a3:dc:84:3a:09:65:ce:
                    90:6e:5c:de:d8:20:cc:21:29:9b:38:f6:a5:40:2e:
                    90:98:84:f2:a7:51:c1:9f:9d:f4:b7:8a:3d:01:4f:
                    cc:b2:1d:eb:80:23:e6:62:63:91:18:42:c9:50:c8:
                    9c:09:62:f3:fb:16:56:47:cd:e4:16:6b:84:2f:df:
                    90:aa:f3:49:94:9d:28:a8:15:01:97:33:f8:09:60:
                    f5:2f:62:2e:95:00:dc:16:30:2e:a6:05:c7:42:43:
                    fb:6a:00:4d:6e:2e:42:c6:33:d2:8d:0f:a3:ab:6e:
                    ba:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:00:23:1E:02:1C:7D:1C:70:94:74:76:BD:89:1D:D9:84:39:2F:99
            X509v3 Authority Key Identifier:
                keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323030303a3a2f33372d3430203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         84:3e:68:eb:51:f6:eb:80:8a:77:bb:a1:09:5f:44:f9:9c:c6:
         86:12:62:20:c4:c2:ce:3f:c4:14:e3:6d:a3:07:5f:53:3f:14:
         47:c4:aa:21:9b:b8:8c:c7:2f:56:0e:d4:0d:fa:2a:e1:51:b5:
         69:f2:17:1e:82:d6:9e:48:d4:d6:39:f1:a6:67:e1:ae:81:33:
         77:70:18:2d:77:8d:07:a0:d0:91:54:93:b7:46:e1:ee:d7:8d:
         c3:09:ff:70:21:c3:2b:b8:0d:50:2b:76:ff:80:ac:f9:3f:f5:
         6a:f6:63:60:98:fc:97:94:4e:9d:5a:7a:60:2c:9c:ef:e4:59:
         14:fc:17:27:6c:7a:51:1c:56:3d:7e:9d:30:6a:fe:d4:b7:43:
         5c:ec:41:70:fe:2f:dd:39:bd:6f:f2:ab:e6:21:ff:ed:b8:b0:
         f9:a5:59:3f:63:79:28:c0:f0:40:36:80:2a:fa:fc:c9:4e:d5:
         3e:29:f1:a6:0d:03:cb:b1:04:79:5b:46:fc:d6:bf:76:fe:9b:
         68:ee:a9:b2:4c:2c:5c:e6:98:7c:64:af:fe:69:a5:48:2e:15:
         0c:57:7b:ac:28:5a:ab:76:34:0f:85:df:26:56:8f:58:47:f7:
         d2:3e:25:6a:92:db:48:07:69:aa:1a:5d:62:2e:f5:08:ef:4d:
         aa:6f:3c:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:58 2026 by rpki-client