Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a383030303a3a2f33332d3333203d3e20323733383437.roa
File:                     323830333a633535303a383030303a3a2f33332d3333203d3e20323733383437.roa (raw, json)
Hash identifier:          ozh7jH+lDwI8ay2lyPPKFdn/9a4d5w6faKEcH7GJKDY=
Subject key identifier:   6C:F2:4F:E9:87:11:7F:0F:5D:3E:35:86:94:1E:2A:19:54:65:35:F3
Certificate issuer:       /CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
Certificate serial:       3A4D50A5CECDB4E1013B65174E375861358869D4
Authority key identifier: E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a383030303a3a2f33332d3333203d3e20323733383437.roa
Signing time:             Fri 10 Apr 2026 16:38:25 +0000
ROA not before:           Fri 10 Apr 2026 16:33:25 +0000
ROA not after:            Fri 09 Apr 2027 16:38:25 +0000
asID:                     273847
IP address blocks:        2803:c550:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 21:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4d:50:a5:ce:cd:b4:e1:01:3b:65:17:4e:37:58:61:35:88:69:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
        Validity
            Not Before: Apr 10 16:33:25 2026 GMT
            Not After : Apr  9 16:38:25 2027 GMT
        Subject: CN=6CF24FE987117F0F5D3E3586941E2A19546535F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:cd:4b:5e:ea:a8:ab:8a:c6:6e:e5:7f:f9:
                    10:87:0d:ae:84:80:f4:b1:8a:09:7c:0e:0f:29:bc:
                    44:59:99:f9:7b:11:76:8c:f5:78:4d:8b:55:ce:83:
                    25:c3:8b:88:40:e5:ce:85:97:8e:2e:f1:6d:fe:3b:
                    e4:74:15:92:1c:98:0d:c8:12:ea:f5:78:9a:d3:b1:
                    42:04:62:8d:e4:1d:76:bc:42:b2:47:94:6e:68:3e:
                    e8:7d:c8:a3:c3:5f:01:44:82:b1:7b:5b:d9:31:09:
                    49:93:b8:51:a7:76:0b:7a:71:86:33:45:81:09:78:
                    90:ca:e6:8f:b5:e9:53:28:31:1e:da:c3:f6:a1:6f:
                    12:fe:57:29:e1:95:45:98:fd:68:15:b4:fd:52:c0:
                    b5:75:3e:e5:e4:de:ac:df:2b:18:9b:a4:1d:45:2d:
                    9b:39:8f:a0:4c:2f:72:31:0b:ef:d3:20:6a:85:30:
                    ca:e9:76:d1:aa:c2:3d:94:e0:cf:1a:85:c3:fb:7d:
                    3d:76:92:b7:05:6b:71:37:54:ce:cd:e0:6b:1a:62:
                    bb:78:22:6b:17:f4:80:48:cb:2f:f8:de:5b:a1:00:
                    69:d2:34:97:58:f7:ac:91:0d:d6:5e:24:4d:13:6a:
                    8d:f3:00:4d:f0:eb:32:09:c0:0c:d8:fc:a2:61:cb:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:4F:E9:87:11:7F:0F:5D:3E:35:86:94:1E:2A:19:54:65:35:F3
            X509v3 Authority Key Identifier:
                keyid:E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a383030303a3a2f33332d3333203d3e20323733383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c550:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:92:52:2f:96:e4:11:87:2e:0b:26:52:99:53:a6:7b:40:de:
         88:87:63:ee:81:e3:47:7c:b7:21:09:c2:90:66:4c:a8:1c:35:
         4b:c4:50:09:de:ee:5f:db:55:24:b9:0e:bc:dd:81:85:7f:15:
         e9:50:57:f1:39:13:42:a1:69:59:c9:00:d2:a1:b4:0c:ae:1e:
         e2:30:84:71:34:f6:8a:cf:44:e0:ab:25:55:8d:4c:3f:dd:88:
         4d:67:2f:67:30:a4:f2:51:91:b5:fb:e2:c4:ec:f0:04:23:a1:
         d1:a3:9d:91:cb:d0:65:c3:62:c2:69:22:8e:b5:f9:12:ec:a8:
         56:50:fc:0e:12:41:5e:6f:24:1b:e2:d5:aa:5f:57:c5:50:39:
         8c:ee:74:e7:c7:8e:37:ac:2d:6d:ab:c6:38:5a:41:1b:48:8b:
         43:88:a5:a8:8c:f3:78:95:bf:ad:d4:ab:8a:8f:27:a2:a7:eb:
         59:67:1d:d7:45:a6:0d:ab:f7:68:71:af:0c:9c:ec:8d:f1:57:
         0a:7a:2f:d2:92:db:2f:90:f4:e9:93:eb:e0:b1:a9:36:7a:b9:
         e1:b2:d8:b0:07:af:2e:6a:8f:89:19:df:1f:0b:07:ce:be:c5:
         b2:30:c8:c6:a5:5a:2b:03:46:98:5a:db:2c:25:ac:f4:77:36:
         8d:49:1b:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:10:22 2026 by rpki-client