Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E6022C0DC52175A6D143E0EA27C13ECAE7209FE629C770D05B3C3ACD1EC3D0C/0/323830333a3164303a3a2f33322d3334203d3e20323734313236.roa
File:                     323830333a3164303a3a2f33322d3334203d3e20323734313236.roa (raw, json)
Hash identifier:          4fbQqXHPlXc87rDwkygBwbC0tnhoB0iGfWfT/ReHbYA=
Subject key identifier:   00:E9:84:93:19:E4:8C:43:2E:D1:06:88:D2:C9:9E:B1:EB:78:29:42
Certificate issuer:       /CN=103F93FBB2B66BF4A637461F0B2D7248ED37C89B
Certificate serial:       76893B10FF222924278BB7ADE606CFE6756BF044
Authority key identifier: 10:3F:93:FB:B2:B6:6B:F4:A6:37:46:1F:0B:2D:72:48:ED:37:C8:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/103F93FBB2B66BF4A637461F0B2D7248ED37C89B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E6022C0DC52175A6D143E0EA27C13ECAE7209FE629C770D05B3C3ACD1EC3D0C/0/323830333a3164303a3a2f33322d3334203d3e20323734313236.roa
Signing time:             Wed 20 May 2026 12:43:18 +0000
ROA not before:           Wed 20 May 2026 12:38:18 +0000
ROA not after:            Wed 19 May 2027 12:43:18 +0000
asID:                     274126
IP address blocks:        2803:1d0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E6022C0DC52175A6D143E0EA27C13ECAE7209FE629C770D05B3C3ACD1EC3D0C/0/103F93FBB2B66BF4A637461F0B2D7248ED37C89B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E6022C0DC52175A6D143E0EA27C13ECAE7209FE629C770D05B3C3ACD1EC3D0C/0/103F93FBB2B66BF4A637461F0B2D7248ED37C89B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/103F93FBB2B66BF4A637461F0B2D7248ED37C89B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:89:3b:10:ff:22:29:24:27:8b:b7:ad:e6:06:cf:e6:75:6b:f0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103F93FBB2B66BF4A637461F0B2D7248ED37C89B
        Validity
            Not Before: May 20 12:38:18 2026 GMT
            Not After : May 19 12:43:18 2027 GMT
        Subject: CN=00E9849319E48C432ED10688D2C99EB1EB782942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:08:e1:d9:a6:78:b8:8c:55:15:d3:ff:8c:
                    f0:3d:aa:5b:89:d0:92:82:02:ae:7c:ac:74:de:e7:
                    64:c3:1c:98:1b:64:6d:1b:07:39:9f:28:0d:b1:0d:
                    34:1d:24:1f:bf:28:b2:f9:76:81:2f:20:65:81:d9:
                    ac:0f:e0:fa:76:54:72:5c:a4:9f:ad:db:26:ff:8b:
                    9f:2c:5b:a7:3d:01:aa:db:a8:be:a3:5e:bc:05:33:
                    d9:6f:80:d3:30:56:bc:c9:94:4b:d0:14:91:f9:94:
                    a3:8c:55:e7:7b:21:63:47:80:47:68:25:f7:cf:30:
                    a2:f4:cd:7c:6d:7c:f4:b4:76:3b:2b:bf:96:9c:d2:
                    27:d4:e6:f2:fa:5b:de:73:a6:23:76:00:d6:18:53:
                    e8:da:53:d7:b1:e3:0b:69:c9:34:53:fa:56:f4:15:
                    09:6c:6f:69:69:fa:1a:cb:15:b0:fe:bd:a0:9b:25:
                    bc:42:d8:a7:71:23:99:47:08:9e:3a:9d:c1:9f:ca:
                    13:33:e3:04:b5:7b:4e:83:86:af:c4:91:68:fa:a3:
                    76:7d:7d:1c:90:0e:68:83:c8:db:56:14:a6:59:67:
                    1e:26:b6:23:4c:6b:82:67:a6:a4:86:53:34:6c:99:
                    71:3b:0f:89:58:95:30:d0:33:88:0c:42:0b:7b:b4:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:84:93:19:E4:8C:43:2E:D1:06:88:D2:C9:9E:B1:EB:78:29:42
            X509v3 Authority Key Identifier:
                keyid:10:3F:93:FB:B2:B6:6B:F4:A6:37:46:1F:0B:2D:72:48:ED:37:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E6022C0DC52175A6D143E0EA27C13ECAE7209FE629C770D05B3C3ACD1EC3D0C/0/103F93FBB2B66BF4A637461F0B2D7248ED37C89B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/103F93FBB2B66BF4A637461F0B2D7248ED37C89B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E6022C0DC52175A6D143E0EA27C13ECAE7209FE629C770D05B3C3ACD1EC3D0C/0/323830333a3164303a3a2f33322d3334203d3e20323734313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:df:d2:e3:dc:0b:83:8c:de:c4:c7:11:85:52:50:8b:3b:
         0c:cf:8d:9b:4f:9f:1d:86:ab:53:76:a4:c3:5d:01:55:9a:6d:
         aa:f2:37:60:83:94:3d:3a:12:b2:12:17:b9:a4:3f:2d:06:e5:
         e9:db:f5:18:86:bc:c8:11:94:08:5e:3f:56:ed:f8:79:c6:27:
         c4:f5:8a:a2:3b:96:67:88:75:90:d4:f7:5f:dd:19:44:ab:0c:
         b6:d0:f2:81:e3:b0:71:06:01:c8:42:72:96:d2:c7:d2:be:ed:
         98:fe:f5:81:a9:ab:d8:a1:99:35:65:42:5a:6f:24:56:86:2b:
         b7:42:2a:c3:59:72:54:27:11:e2:6e:39:c0:fc:ff:19:6d:67:
         0a:82:ef:3f:f6:43:06:77:7f:d5:31:e0:f0:6c:7f:b5:5a:61:
         6c:fa:c4:22:8b:98:f5:dd:3d:73:31:2d:eb:e9:c5:39:ea:5e:
         94:c0:7d:12:30:99:53:18:f7:6a:b6:74:ff:4e:f3:6f:57:4e:
         22:c1:31:65:5a:8e:b6:0f:61:db:39:91:e6:08:95:d5:a6:44:
         b0:49:2d:7d:b5:dd:e3:0f:f9:eb:1a:87:94:0a:06:6d:97:90:
         a4:26:9d:21:26:fa:b2:1f:32:31:e5:a4:87:05:c1:0e:07:e4:
         a1:d6:dd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:13:54 2026 by rpki-client