Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/323830333a646263303a3a2f33322d3438203d3e20323633373636.roa
File:                     323830333a646263303a3a2f33322d3438203d3e20323633373636.roa (raw, json)
Hash identifier:          5rPYAedh+XInFFb074+1ubHcKtr7MNMzfzwx5wUfrm8=
Subject key identifier:   31:A1:AC:01:90:AC:C1:D9:DB:4C:6E:CA:24:F5:FF:2C:8A:C4:1F:18
Certificate issuer:       /CN=D27A531CC81AF816305690F95709B8D48EE9B713
Certificate serial:       725BFFE8076099A5C79609B9245E196C0E7DA9AC
Authority key identifier: D2:7A:53:1C:C8:1A:F8:16:30:56:90:F9:57:09:B8:D4:8E:E9:B7:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D27A531CC81AF816305690F95709B8D48EE9B713.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/323830333a646263303a3a2f33322d3438203d3e20323633373636.roa
Signing time:             Fri 05 Jun 2026 22:20:00 +0000
ROA not before:           Fri 05 Jun 2026 22:15:00 +0000
ROA not after:            Fri 04 Jun 2027 22:20:00 +0000
asID:                     263766
IP address blocks:        2803:dbc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/D27A531CC81AF816305690F95709B8D48EE9B713.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/D27A531CC81AF816305690F95709B8D48EE9B713.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D27A531CC81AF816305690F95709B8D48EE9B713.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5b:ff:e8:07:60:99:a5:c7:96:09:b9:24:5e:19:6c:0e:7d:a9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27A531CC81AF816305690F95709B8D48EE9B713
        Validity
            Not Before: Jun  5 22:15:00 2026 GMT
            Not After : Jun  4 22:20:00 2027 GMT
        Subject: CN=31A1AC0190ACC1D9DB4C6ECA24F5FF2C8AC41F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:fd:5f:30:4b:04:9c:44:ab:dd:b8:b3:b5:
                    72:10:a3:b5:8e:94:e9:53:68:1f:49:66:1f:22:36:
                    84:a8:a7:46:34:f6:2a:a8:e5:bc:51:1b:e1:f4:04:
                    65:03:aa:40:f7:c1:5f:66:50:0f:36:d2:55:08:d7:
                    32:c1:88:ca:5f:41:52:20:7a:12:30:7f:c4:a4:33:
                    ea:c1:45:85:e3:3c:40:f4:3e:9e:4b:96:f1:03:a8:
                    27:ee:11:a9:bf:74:d9:11:3b:f9:73:47:f2:5a:29:
                    0b:53:df:cc:95:65:53:e6:e1:90:1e:49:b4:35:c0:
                    96:2c:9b:2f:2a:7d:ff:b7:d4:25:21:9d:a9:e5:06:
                    f3:26:78:74:34:66:55:85:fc:9a:4c:be:01:ae:cd:
                    04:0f:46:9e:38:c1:d1:38:2b:7c:f7:f0:93:91:a6:
                    d6:8f:ef:ed:df:50:33:6d:49:d1:99:5b:ce:f5:f9:
                    1e:fb:08:65:18:9d:98:fd:0e:98:0b:9e:65:65:2e:
                    da:6e:94:3f:3c:07:73:d4:e5:8a:5c:4d:86:a3:68:
                    9a:4b:07:c9:05:a0:d4:3d:01:3d:dd:c3:5b:b2:7d:
                    4a:1a:3c:f1:ef:c1:55:38:81:bd:70:b0:eb:62:10:
                    33:ca:3a:6e:ec:b8:f1:78:a4:e8:13:9b:ab:90:c4:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A1:AC:01:90:AC:C1:D9:DB:4C:6E:CA:24:F5:FF:2C:8A:C4:1F:18
            X509v3 Authority Key Identifier:
                keyid:D2:7A:53:1C:C8:1A:F8:16:30:56:90:F9:57:09:B8:D4:8E:E9:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/D27A531CC81AF816305690F95709B8D48EE9B713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D27A531CC81AF816305690F95709B8D48EE9B713.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/323830333a646263303a3a2f33322d3438203d3e20323633373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:7e:80:36:f9:85:9b:7b:a7:aa:53:25:36:f1:15:d5:2c:9d:
         ff:68:9d:1a:e2:82:b6:d3:aa:f9:b4:d7:43:ca:60:2b:bf:62:
         f2:a4:ab:ae:e2:b7:aa:34:8e:6d:f2:dc:7e:73:68:de:50:6f:
         3a:d8:02:f0:cd:43:05:c7:3a:ca:3e:2e:46:c9:4d:39:94:84:
         ad:ef:7c:fa:9f:d3:e0:4b:03:2c:ba:5e:42:f2:ce:76:9c:fa:
         0d:bb:b9:56:18:53:69:0d:f1:c3:e6:e7:ad:8d:e8:9d:0f:ca:
         ee:14:0f:c4:14:eb:04:57:21:0f:27:06:53:c9:23:76:5f:5e:
         42:a6:69:6a:78:79:78:b8:87:ac:5b:e9:80:32:0b:c4:0c:69:
         fb:67:11:1f:50:da:51:21:b3:5f:5a:ff:37:a3:18:84:07:ff:
         f6:f1:85:a0:c9:0c:59:1f:47:10:a2:df:7c:e2:6e:9e:48:b4:
         13:1c:8e:e0:92:f4:32:9e:19:58:b1:27:90:2d:d8:c8:54:ad:
         a9:c5:86:56:66:b3:6b:0c:c0:49:93:2a:f6:a0:82:44:48:01:
         b4:d8:51:38:f2:9b:59:dc:cf:48:6b:d3:8d:bc:11:4e:97:96:
         6d:2a:b3:43:c2:80:c4:0d:0e:cd:4f:a1:03:ee:55:c8:7c:c3:
         b6:85:e9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:40:10 2026 by rpki-client