Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313230303a3a2f34302d3430203d3e20323734383937.roa
File:                     323830333a623633303a313230303a3a2f34302d3430203d3e20323734383937.roa (raw, json)
Hash identifier:          VA9c3hZZlp2OD5QR7ho1WonGrCD2P2Vv2RL5OTWi/fg=
Subject key identifier:   D0:C8:CE:75:D6:C5:98:10:8B:DB:F2:F7:69:EC:6F:94:6D:59:51:D3
Certificate issuer:       /CN=4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C
Certificate serial:       5CF7786E6BE4989B0586FBD8A8CB30998BEFA347
Authority key identifier: 48:19:B4:5C:4B:0B:57:AB:26:DB:91:79:0D:D3:2B:7C:84:B8:AA:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313230303a3a2f34302d3430203d3e20323734383937.roa
Signing time:             Sat 13 Jun 2026 03:25:02 +0000
ROA not before:           Sat 13 Jun 2026 03:20:02 +0000
ROA not after:            Sat 12 Jun 2027 03:25:02 +0000
asID:                     274897
IP address blocks:        2803:b630:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f7:78:6e:6b:e4:98:9b:05:86:fb:d8:a8:cb:30:99:8b:ef:a3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C
        Validity
            Not Before: Jun 13 03:20:02 2026 GMT
            Not After : Jun 12 03:25:02 2027 GMT
        Subject: CN=D0C8CE75D6C598108BDBF2F769EC6F946D5951D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:2b:f4:c2:7f:3b:f0:61:d7:7e:36:51:59:
                    37:1c:65:b7:b7:b3:fc:d6:69:ca:cc:bf:ad:89:b5:
                    89:64:d9:aa:0c:7d:8d:7d:b1:f3:47:45:cc:99:be:
                    f8:6b:f8:78:d3:82:a7:6f:28:23:d4:a5:f8:b4:09:
                    ef:d0:e8:80:4a:57:55:a9:f3:1b:da:9e:a1:42:08:
                    b6:41:d9:2e:b5:63:64:98:b2:35:2f:c1:8f:45:04:
                    b8:2a:7d:51:1c:fc:51:91:f6:0f:bd:35:a2:e0:5d:
                    6c:91:09:3a:8a:c1:54:c3:9f:3f:f5:87:85:18:9d:
                    52:01:eb:d5:1a:9a:1c:aa:bd:e6:58:13:f5:2e:4a:
                    74:6d:0f:61:87:44:01:bd:6a:4f:15:ae:17:90:64:
                    bb:f7:d0:91:0e:29:0c:44:54:a8:0f:15:c7:2a:87:
                    10:72:c0:a1:f5:48:e7:c9:1c:7f:d4:70:c4:81:b7:
                    a8:92:87:b0:fd:bb:48:43:d7:6d:b8:51:9d:c4:97:
                    4b:ff:c0:af:92:ff:87:61:e2:9b:3d:d6:7f:c4:14:
                    07:1b:37:b2:da:66:c5:58:11:8c:c9:e3:5f:d2:bc:
                    ea:b8:66:48:d7:2a:cd:5f:e7:55:79:12:fc:a6:2a:
                    81:fc:c7:c0:38:16:1e:90:16:d3:25:90:e1:ef:b8:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:CE:75:D6:C5:98:10:8B:DB:F2:F7:69:EC:6F:94:6D:59:51:D3
            X509v3 Authority Key Identifier:
                keyid:48:19:B4:5C:4B:0B:57:AB:26:DB:91:79:0D:D3:2B:7C:84:B8:AA:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313230303a3a2f34302d3430203d3e20323734383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b630:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:67:90:c3:00:8d:53:37:4b:00:fb:5e:75:3a:c3:c3:ec:85:
         ad:ab:8d:17:62:bc:1a:f3:7c:07:52:ef:12:54:e6:d1:6a:7a:
         9e:25:81:b0:41:29:16:0a:5f:e3:53:66:9c:97:aa:c0:35:a3:
         cf:3b:08:4e:e0:50:5a:f4:44:c7:52:d2:b1:c9:7e:8f:70:4e:
         31:d5:b2:e4:88:f0:a2:0f:1f:a2:65:c4:8e:c0:04:e8:f3:3f:
         ac:b9:45:46:80:ae:3d:a2:5d:01:5d:a4:52:d6:8e:fc:ed:f2:
         e0:3e:11:a2:19:97:13:76:d6:c7:9d:2f:46:90:50:71:f6:29:
         e7:af:4f:55:2c:34:4b:da:2c:b6:c0:9b:33:d4:76:83:29:a9:
         ce:69:d0:e0:bb:69:73:05:c8:59:1d:15:6f:95:3b:a8:90:75:
         1f:32:48:a6:b1:7c:d5:3d:ac:a3:66:19:6a:7f:73:c4:f8:63:
         a0:08:c0:79:f6:41:d0:35:aa:e2:f3:04:02:0c:32:e1:bd:92:
         a1:98:95:78:67:28:00:76:a1:a8:02:3b:e2:8f:21:1b:e2:f4:
         8d:b5:12:58:7e:f1:23:9d:7a:17:49:8b:d3:ad:c4:37:bf:ab:
         44:99:32:83:65:08:00:df:05:0b:ad:57:f7:a0:1a:aa:91:bb:
         90:1e:cd:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:06:14 2026 by rpki-client