Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/323830333a6235303a3a2f33322d3438203d3e20323733393033.roa
File:                     323830333a6235303a3a2f33322d3438203d3e20323733393033.roa (raw, json)
Hash identifier:          cLm/sOtijv9tUxv0gNYeq+uzl28t20gf139GQKEZj0g=
Subject key identifier:   AC:DF:C9:1A:94:45:0B:AC:76:DB:AB:50:25:5E:4F:58:56:E9:BF:93
Certificate issuer:       /CN=BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2
Certificate serial:       56E9480BA1E97CBC25607E40481840D37CEE0357
Authority key identifier: BA:FB:10:BE:93:E0:3D:E3:AD:70:11:08:0A:4B:6D:0B:EC:28:18:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/323830333a6235303a3a2f33322d3438203d3e20323733393033.roa
Signing time:             Sat 16 May 2026 19:00:00 +0000
ROA not before:           Sat 16 May 2026 18:55:00 +0000
ROA not after:            Sat 15 May 2027 19:00:00 +0000
asID:                     273903
IP address blocks:        2803:b50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e9:48:0b:a1:e9:7c:bc:25:60:7e:40:48:18:40:d3:7c:ee:03:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2
        Validity
            Not Before: May 16 18:55:00 2026 GMT
            Not After : May 15 19:00:00 2027 GMT
        Subject: CN=ACDFC91A94450BAC76DBAB50255E4F5856E9BF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:d1:d7:a9:32:26:93:6c:f0:5b:b1:97:93:
                    f0:01:ac:30:5e:7c:56:c8:cc:38:cb:7d:03:86:e0:
                    69:1f:21:de:cb:7f:db:83:25:54:5f:a8:d6:39:51:
                    c1:7e:c6:0d:c2:31:2a:ca:ab:f8:cc:98:ca:d8:68:
                    82:50:c7:18:70:9c:6a:fa:bc:63:73:ee:ec:37:d6:
                    00:b8:7f:de:82:25:53:d2:47:72:0d:f8:7e:a9:1d:
                    18:1a:58:2f:1c:b3:57:cb:a1:88:a9:1a:60:6a:6f:
                    33:0f:44:a4:72:0a:0b:ed:b5:c0:3c:d1:f0:6f:79:
                    c5:dc:6a:16:e8:fc:41:a2:b4:1e:4c:91:23:09:b2:
                    2c:f1:85:44:86:38:56:38:3f:16:87:7f:1f:9d:53:
                    2a:23:25:3f:f1:e6:09:cd:2f:99:5c:7e:02:76:98:
                    54:80:19:9a:e9:e0:4e:a3:40:ba:a1:6c:bf:20:6f:
                    41:18:11:a4:75:aa:3d:4a:33:fb:be:ee:5c:12:70:
                    75:fb:6b:67:ea:a7:f8:72:46:a4:fb:2f:68:70:90:
                    72:85:d0:07:fc:a2:82:e3:ed:73:ea:1d:0c:9e:a9:
                    c6:0b:76:d9:f5:56:bb:23:7c:c3:10:b4:d7:3f:bb:
                    be:14:ac:dc:68:7c:51:a4:87:83:42:99:b9:95:ca:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DF:C9:1A:94:45:0B:AC:76:DB:AB:50:25:5E:4F:58:56:E9:BF:93
            X509v3 Authority Key Identifier:
                keyid:BA:FB:10:BE:93:E0:3D:E3:AD:70:11:08:0A:4B:6D:0B:EC:28:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/323830333a6235303a3a2f33322d3438203d3e20323733393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:5b:56:09:d3:e1:04:f5:aa:33:18:da:8f:df:30:55:43:73:
         98:04:8e:80:dd:f6:98:de:e1:fe:e9:24:08:41:99:b0:df:da:
         5b:7b:7b:d8:96:c4:17:f5:5f:e2:7f:2c:f1:58:7d:df:78:e5:
         c4:35:63:e7:d6:44:56:7f:b8:fd:66:b6:b2:b9:95:c2:c3:ee:
         0e:c0:36:bf:47:0b:61:eb:89:99:42:58:f0:0a:56:4a:16:80:
         d8:2e:9f:9a:02:d0:ee:56:15:f7:bf:28:c1:b3:68:45:f9:df:
         a7:a8:2e:99:3f:b6:d2:dd:fc:ad:0c:27:19:48:2b:b6:09:ee:
         50:4e:99:a8:3b:4c:f4:d3:b0:c4:da:18:51:8f:d3:c2:c9:88:
         01:25:9a:54:15:1a:70:5a:fd:71:f4:a4:77:6a:02:df:48:db:
         00:53:51:5e:0d:b6:b3:63:7b:98:56:e0:1a:06:30:0b:cd:2f:
         6c:82:3a:6c:4a:8c:f8:b8:67:f1:e4:89:6d:b6:d2:8b:3a:4d:
         09:e4:0c:ff:bc:58:17:37:41:87:13:85:04:3d:6e:8c:cb:3d:
         a0:6f:80:63:9b:b0:9f:b8:59:5f:7c:ef:3b:f2:23:a1:46:69:
         ce:18:b0:e0:34:25:68:40:d6:84:b4:e4:9a:5c:71:ee:31:c9:
         54:74:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:06:04 2026 by rpki-client