Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3438203d3e20323733313534.roa
File:                     323830333a376335303a3a2f33322d3438203d3e20323733313534.roa (raw, json)
Hash identifier:          Y5CTA30paTqAcbQN2bPQCvtmKzPCfqpoYzNPP4qj0pM=
Subject key identifier:   86:3E:D9:A8:8A:AA:22:F5:6E:0A:29:FD:FF:12:FD:58:48:0B:ED:9E
Certificate issuer:       /CN=93ED4FCE78C288E48F0F2D57E326100A93D1A90E
Certificate serial:       36391E1C068BE6140E5195BA30672B319B46DCE8
Authority key identifier: 93:ED:4F:CE:78:C2:88:E4:8F:0F:2D:57:E3:26:10:0A:93:D1:A9:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3438203d3e20323733313534.roa
Signing time:             Wed 15 Apr 2026 18:38:57 +0000
ROA not before:           Wed 15 Apr 2026 18:33:57 +0000
ROA not after:            Wed 14 Apr 2027 18:38:57 +0000
asID:                     273154
IP address blocks:        2803:7c50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:39:1e:1c:06:8b:e6:14:0e:51:95:ba:30:67:2b:31:9b:46:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ED4FCE78C288E48F0F2D57E326100A93D1A90E
        Validity
            Not Before: Apr 15 18:33:57 2026 GMT
            Not After : Apr 14 18:38:57 2027 GMT
        Subject: CN=863ED9A88AAA22F56E0A29FDFF12FD58480BED9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:41:12:78:10:8c:fd:af:93:56:91:0b:30:
                    fd:2e:66:55:85:45:c6:98:85:0e:6a:b6:10:1f:b0:
                    17:60:a2:87:ab:bf:1b:be:0b:35:f4:36:e6:c4:cb:
                    51:51:5a:2d:e5:60:b4:eb:75:39:27:fd:46:dc:d6:
                    41:c0:ed:14:a5:bb:34:1d:fa:c8:9c:2b:88:47:c2:
                    78:31:f2:c3:37:7e:17:52:2b:9d:d6:c5:76:0b:8d:
                    88:77:98:b8:7a:71:f3:2f:8b:d0:c2:3d:25:bf:0e:
                    ee:ed:4e:7a:0e:05:1c:f9:30:74:f2:f4:61:8b:c5:
                    c9:a6:1e:c0:68:ad:75:90:50:64:2f:bf:bb:02:0d:
                    b2:f3:fb:1c:17:04:87:4b:cc:cc:fc:fc:cd:14:cd:
                    fc:b4:fb:9f:6f:20:99:8e:09:60:b8:b4:91:8a:f4:
                    05:bd:8d:c5:eb:ed:67:b6:3a:bb:24:7b:63:28:27:
                    43:34:d3:27:be:f6:4a:09:1d:b1:64:35:0b:91:d3:
                    bc:53:9f:ed:23:ac:88:06:c6:79:e4:dd:94:6e:02:
                    03:cb:b9:65:3c:1d:42:2e:ce:aa:d0:49:fd:83:fa:
                    38:f0:f9:b5:84:a9:2c:f7:a0:ea:85:21:b1:70:9f:
                    98:4a:ad:6e:f6:5d:89:1c:ae:17:0b:3d:f9:f4:33:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3E:D9:A8:8A:AA:22:F5:6E:0A:29:FD:FF:12:FD:58:48:0B:ED:9E
            X509v3 Authority Key Identifier:
                keyid:93:ED:4F:CE:78:C2:88:E4:8F:0F:2D:57:E3:26:10:0A:93:D1:A9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3438203d3e20323733313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:24:31:55:bc:d0:12:a7:0a:ca:59:aa:38:78:9c:2e:84:76:
         ef:50:2e:4a:0f:63:91:ca:87:2b:52:fb:14:29:a3:ec:28:bf:
         8b:ab:48:58:23:00:a8:dc:51:af:23:ed:40:4f:6f:c8:45:f7:
         f6:73:db:0f:cf:61:9a:72:b8:bf:a5:9e:fd:79:26:84:a8:5c:
         28:b7:6d:2b:bf:12:38:1c:be:23:4f:91:d1:08:6a:c5:34:b9:
         3f:60:7a:d0:37:6e:4e:47:0d:b6:b2:b1:ec:f3:b7:60:ac:e3:
         c4:52:73:48:cd:d2:19:dc:03:b5:29:52:83:0f:18:64:73:32:
         d3:81:89:0c:58:87:b9:2b:c1:12:66:2f:8c:e4:cd:cb:0f:65:
         86:a3:91:e0:7e:a0:36:30:1d:49:13:8e:3f:81:2d:f0:1f:e2:
         b0:81:81:8b:18:b1:7b:8f:84:11:10:fb:7e:ad:79:02:1c:c4:
         3f:d4:1f:f4:29:4b:92:3f:29:a2:31:68:d6:d0:6b:e6:e2:f3:
         6b:8f:9e:61:df:63:3e:97:9a:f8:0b:55:7f:4a:a3:46:87:6c:
         34:5e:ef:77:94:4e:40:72:b2:ae:c7:98:9b:f3:90:6e:57:c1:
         d8:b3:ab:e3:5a:6a:dc:7c:97:10:3b:ee:5b:3f:3b:cb:5c:c8:
         68:9b:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:58:40 2026 by rpki-client